Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa
File:                     200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa (raw, json)
Hash identifier:          iA5dYmha7WHnxEOGkBzSo/YwRrX2qZcLhzjTSvQm//E=
Subject key identifier:   EC:DF:EC:C2:6B:C7:C0:7F:FA:8B:47:5B:C2:41:B0:25:4C:42:31:31
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584AE461477012D88F7DE095E250
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     398478
IP address blocks:        107.149.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:47:70:12:d8:8f:7d:e0:95:e2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=eaa51b09-2f32-44fb-a49f-f336f015f0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:22:a3:85:a4:66:0e:cd:2c:1e:83:ee:7e:
                    54:82:99:ca:ea:d7:7d:65:97:48:c7:18:94:c8:e4:
                    29:1f:95:f7:0f:22:4a:44:84:f2:66:27:ab:78:84:
                    1a:21:e5:fc:40:90:64:72:0f:c8:e1:66:2a:67:94:
                    19:c2:10:fa:df:55:5b:bf:d5:94:d1:5a:ac:64:17:
                    8c:13:43:ec:b9:06:e7:00:24:19:70:9c:e0:d3:49:
                    1a:41:58:67:c2:cf:b8:1c:4b:39:81:d9:54:de:24:
                    ce:80:15:31:e4:1e:d6:e0:4f:2c:9c:d9:7b:df:c1:
                    8d:62:95:93:85:8e:07:73:06:21:67:e1:99:6a:84:
                    0f:94:ff:b6:69:11:e7:68:70:28:37:17:05:c3:85:
                    f0:3f:e4:63:d0:46:7e:7f:55:1c:7f:1b:1e:a3:f1:
                    89:c6:89:48:8e:f4:c7:d9:65:ef:fc:2c:5f:f8:24:
                    b6:06:f4:40:f1:d4:5d:f8:b3:94:20:8e:bb:a3:f1:
                    70:fa:55:e4:e1:92:95:ff:29:40:ff:44:86:d1:6c:
                    76:63:6a:39:fc:a4:40:65:69:13:62:17:48:cb:d5:
                    b3:57:0f:2c:f1:13:98:02:b7:85:03:6d:0b:59:d0:
                    a9:0a:37:ea:7f:8a:28:ba:54:8c:ce:84:75:e0:3f:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DF:EC:C2:6B:C7:C0:7F:FA:8B:47:5B:C2:41:B0:25:4C:42:31:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b4:98:20:15:46:8a:b8:2e:2f:79:b6:a2:03:61:23:06:cf:
         12:79:32:11:63:99:bc:e6:33:d7:61:3f:e6:97:cf:8f:5d:89:
         4b:8c:01:a7:c2:32:29:e8:96:33:fd:2e:9b:e1:fd:0a:8f:1d:
         da:17:fe:68:99:3d:b3:88:ed:35:10:0e:7a:26:9e:77:c1:c6:
         cf:f8:3d:d3:d8:de:d0:67:17:97:38:f3:77:9c:05:bf:b8:45:
         e3:9b:6c:f1:f8:78:e9:25:b4:2d:d8:73:71:58:86:93:71:07:
         93:9e:ff:c6:2f:a1:78:5e:69:bc:a9:80:d5:b4:c8:58:30:ce:
         0b:32:e3:8d:3f:1d:58:57:fa:0f:b4:ed:2f:13:8a:41:5b:26:
         87:ec:18:0d:09:7d:7e:a7:fa:96:0e:6b:da:3b:8f:28:26:00:
         68:59:80:40:54:7d:cb:54:72:1d:3b:9f:c5:97:f8:65:49:c2:
         c2:45:cf:6e:1e:71:96:e6:80:9e:be:66:c7:25:9c:3c:55:6d:
         4b:c5:c6:e4:7f:4c:c0:c8:aa:40:41:d5:2c:1f:41:9c:c1:8c:
         92:a6:69:52:13:31:f7:eb:35:17:7c:ea:58:e9:a7:0f:22:64:
         8a:94:68:c2:a5:df:87:20:ae:25:89:c8:34:43:cf:10:b5:9c:
         46:de:32:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUdwEtiPfeCV4lAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZWFhNTFiMDktMmYzMi00NGZiLWE0OWYtZjMzNmYwMTVmMGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIwio4WkZg7NLB6D7n5UgpnK6td9ZZdIxxiU
yOQpH5X3DyJKRITyZiereIQaIeX8QJBkcg/I4WYqZ5QZwhD631Vbv9WU0VqsZBeM
E0PsuQbnACQZcJzg00kaQVhnws+4HEs5gdlU3iTOgBUx5B7W4E8snNl738GNYpWT
hY4HcwYhZ+GZaoQPlP+2aRHnaHAoNxcFw4XwP+Rj0EZ+f1Ucfxseo/GJxolIjvTH
2WXv/Cxf+CS2BvRA8dRd+LOUII67o/Fw+lXk4ZKV/ylA/0SG0Wx2Y2o5/KRAZWkT
YhdIy9WzVw8s8ROYAreFA20LWdCpCjfqf4ooulSMzoR14D976wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzf7MJrx8B/+otHW8JBsCVMQjExMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjAwZGRkYjQtNDk4ZS0z
ZmJkLTg0YWYtNDZkOWNjN2ZlMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5WEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFO0mCAVRoq4Li95tqIDYSMGzxJ5MhFjmbzmM9dhP+aXz49diUuMAafC
MinoljP9Lpvh/QqPHdoX/miZPbOI7TUQDnomnnfBxs/4PdPY3tBnF5c483ecBb+4
ReObbPH4eOkltC3Yc3FYhpNxB5Oe/8YvoXheabypgNW0yFgwzgsy440/HVhX+g+0
7S8TikFbJofsGA0JfX6n+pYOa9o7jygmAGhZgEBUfctUch07n8WX+GVJwsJFz24e
cZbmgJ6+ZsclnDxVbUvFxuR/TMDIqkBB1SwfQZzBjJKmaVITMffrNRd86ljppw8i
ZIqUaMKl34cgriWJyDRDzxC1nEbeMlE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:08 2025 by rpki-client