Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa
File:                     5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa (raw, json)
Hash identifier:          G8MVi5Sj23CipG6BBIW4lqaSlOo8EcsgkCSo25BvzSA=
Subject key identifier:   B1:2B:D5:23:6B:88:6A:E7:A9:67:9E:2E:BC:30:F5:B8:E7:31:FB:AB
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584AD23BB0C2FBF798C3E2C8EA00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     398478
IP address blocks:        107.148.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b0:c2:fb:f7:98:c3:e2:c8:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=9242923d-25de-4dfd-92b4-68f9bac7043b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:93:2a:b4:b2:9c:8c:6d:ca:84:20:6b:57:
                    44:e0:3d:e0:2b:88:f0:f6:7d:63:4e:39:c1:16:e2:
                    33:15:b1:74:ab:d5:97:46:5b:00:7b:48:21:7a:d6:
                    9d:bf:ac:59:66:f1:d6:2c:7c:05:6a:5c:2a:80:ce:
                    01:72:bb:86:8b:6b:43:17:5e:63:83:77:7b:cb:a8:
                    65:3f:f0:86:4f:40:96:34:d2:de:5a:66:4c:a7:6b:
                    59:ca:67:0d:77:46:97:0b:eb:9c:aa:ab:5e:32:c0:
                    29:fa:68:d6:c3:07:ce:96:86:f8:83:11:62:03:db:
                    32:36:3b:14:4d:d2:24:7e:61:7f:5a:41:26:95:88:
                    e8:d7:78:a6:d5:6b:51:d2:45:21:24:0d:38:0a:fa:
                    3c:1d:f2:ed:20:5c:8b:aa:29:90:e5:ea:91:da:9e:
                    dd:7f:9f:60:7c:6f:dc:af:eb:42:12:6c:5b:75:e6:
                    9c:e6:dd:b3:67:ab:6a:da:7c:12:23:18:93:1b:21:
                    ef:34:7e:7f:e0:d6:76:b6:18:c7:0e:85:72:cd:c4:
                    59:d7:68:b1:81:69:8f:13:17:0c:00:19:ca:41:f4:
                    db:ef:c3:04:0e:c0:73:30:63:f1:b9:3f:1b:71:3c:
                    17:b8:63:dc:d6:20:f6:ac:73:b1:c5:0a:3a:ea:af:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:D5:23:6B:88:6A:E7:A9:67:9E:2E:BC:30:F5:B8:E7:31:FB:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:08:67:5c:b4:7f:c5:0c:27:8b:81:19:c7:ea:f0:8a:3b:34:
         27:73:8c:24:f3:2b:b4:32:ab:6c:e1:1a:10:1d:b0:2c:df:56:
         78:22:39:e9:82:f2:81:02:f8:81:be:09:8a:5b:94:bb:8b:3e:
         ec:99:c9:70:93:b0:e5:d5:60:cb:f9:ff:8b:7d:54:7c:f9:eb:
         36:14:9a:ca:9e:6d:f0:d1:a6:aa:72:09:df:3d:87:76:59:46:
         a7:cb:14:50:87:11:2b:91:41:ca:45:1a:78:30:8f:5b:f7:1a:
         9e:f9:0c:3a:89:79:42:d4:2e:83:74:b9:88:a2:01:36:0a:eb:
         13:19:9f:be:f0:88:f2:75:eb:db:41:93:9c:20:f9:6f:0f:ee:
         da:fd:3b:0d:14:e0:94:88:8c:a1:a7:02:51:da:4e:e5:c6:8c:
         1c:91:c9:4b:3e:59:58:01:19:04:f8:e7:e8:44:57:c2:ad:c6:
         da:f6:6d:d7:0f:45:6b:12:c4:3c:b1:45:36:1a:95:6f:01:29:
         bf:8e:e2:16:0e:e4:83:94:5c:df:82:7a:ae:ca:72:a0:70:57:
         98:df:c0:ed:cf:24:34:3f:23:6b:c4:79:54:77:b6:97:e2:60:
         55:f6:40:6b:5b:71:e5:2b:36:8a:f2:0c:af:a5:c4:b5:e4:ae:
         5e:dc:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:30 2025 by rpki-client