Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
File:                     57e59a80-25de-3a88-8329-a612aabbf07a.roa (raw, json)
Hash identifier:          jIKKDxNe86uIrFUUBhJ190v0tqHgFAQGdZPyA7hjdVQ=
Subject key identifier:   FC:2C:3D:54:C8:86:09:49:C3:1C:63:88:0F:32:9C:0A:63:F0:7B:E7
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584B41E71CC1DC13F5059ED312A0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     398478
IP address blocks:        107.149.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:1c:c1:dc:13:f5:05:9e:d3:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=7696d92c-1a2f-4051-b7c8-b4f195750749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bb:f0:92:eb:b0:4b:2e:a7:fd:69:02:69:cb:
                    39:bf:1f:40:de:45:2e:77:e3:c2:21:88:3a:65:8f:
                    ea:57:8b:86:06:63:ea:2e:e3:27:12:67:95:48:3f:
                    58:22:ab:00:af:0f:61:3d:96:71:8a:03:fb:36:ac:
                    61:ff:c3:7b:1a:c4:3e:4b:f5:06:38:ee:7f:16:b5:
                    28:88:a2:84:e3:7f:56:76:88:bc:87:3f:e6:1d:01:
                    50:1c:82:07:3c:b6:2c:17:81:f6:8e:ff:b4:77:2e:
                    7c:89:24:25:9d:7e:20:3c:fb:d2:2f:b2:e3:bd:82:
                    6c:89:50:4e:d9:eb:6d:18:9a:5b:d9:a0:8c:ca:4b:
                    d4:39:14:08:70:86:96:25:0a:d0:cf:29:ef:83:ab:
                    5c:dc:80:2f:1d:7c:e4:f9:c2:1c:3a:4d:a5:55:96:
                    9b:61:3f:15:5c:73:1c:a6:44:ea:8f:a2:b2:77:1c:
                    22:af:51:06:92:23:fd:f2:a5:c5:c1:c1:1b:48:bf:
                    d3:4f:2a:58:4f:28:bf:6d:ba:a4:50:7e:58:7c:29:
                    1d:af:b8:a6:c6:50:ef:2f:4a:98:5a:15:c8:43:5b:
                    93:b8:d7:bf:e5:96:bb:ba:15:5d:4d:9a:eb:18:32:
                    6c:f0:9c:48:76:97:d0:cc:48:b1:42:77:a8:4f:f5:
                    55:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2C:3D:54:C8:86:09:49:C3:1C:63:88:0F:32:9C:0A:63:F0:7B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:22:ad:30:bf:5e:d3:d9:f4:fe:3a:93:a7:ad:9d:72:50:d0:
         0f:13:6e:70:ef:a7:38:22:1b:0e:e2:a4:b6:ec:5c:97:dd:12:
         e3:4c:75:6a:b8:bf:bf:bd:d8:ae:55:5c:be:31:75:91:7f:f2:
         8a:ab:2e:c8:ac:f7:fa:6d:95:46:fc:1c:21:55:af:4c:a4:52:
         b6:f6:74:56:43:d3:4d:ab:ab:b9:3c:6a:33:c5:e6:75:84:c6:
         8a:8e:4c:25:cd:7a:0d:60:01:86:09:a8:f7:72:2f:19:3a:97:
         41:82:49:cc:ff:a8:2b:67:4e:6e:67:54:1b:3c:b6:42:2f:5c:
         e6:87:63:ad:bd:33:4f:45:04:b6:78:d6:7a:19:dc:7a:34:6e:
         bb:76:ce:0f:80:5b:d1:04:ed:4c:d8:b7:5e:6d:b8:f1:df:6a:
         0d:9b:77:10:4a:c9:dc:1a:5a:b5:d2:ff:fd:99:60:76:95:7b:
         19:ee:28:be:8c:47:ec:5e:a4:c7:7d:ab:0b:05:10:45:b5:42:
         db:50:5b:5f:74:2a:af:00:59:2f:84:b5:08:c1:bc:d6:79:e8:
         a2:54:91:6e:60:bc:94:6b:a6:14:0a:73:e4:98:01:72:a9:d2:
         c8:07:d4:e4:32:e9:3f:35:3a:82:2c:d8:9a:34:37:d2:80:0f:
         60:a5:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:55 2025 by rpki-client