Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8e2655be-04b8-36ad-894f-889a069e37c3.roa
File:                     8e2655be-04b8-36ad-894f-889a069e37c3.roa (raw, json)
Hash identifier:          13IiRWMwkMi+fVHMSug+Yo38yJyv4bJPH/BcieW6xOM=
Subject key identifier:   B9:A0:E7:86:5E:07:63:5E:48:66:E6:44:5C:9A:D0:E5:DA:DA:9E:E8
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584B41E71CE5219820E64BED9B80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8e2655be-04b8-36ad-894f-889a069e37c3.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     398478
IP address blocks:        107.149.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:1c:e5:21:98:20:e6:4b:ed:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=2f738fdb-3b2a-4aef-9cad-9ce2a809540e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:db:ac:f8:3d:09:ce:a0:3a:4d:75:ee:9a:
                    3e:6c:e0:33:2b:12:e7:11:d4:13:93:67:55:a9:ec:
                    a3:bf:6e:af:2e:46:69:55:dc:7f:fc:af:75:65:22:
                    be:f6:99:29:ea:cf:ee:54:b5:a8:7e:d6:cd:ff:96:
                    60:ca:87:77:96:48:44:1b:d5:b0:96:0d:55:98:8d:
                    c3:d1:76:75:a2:e2:6a:a3:fd:9f:dd:27:47:49:9c:
                    fd:a9:4b:9a:83:28:3b:99:40:2f:97:c1:8a:72:7d:
                    5f:9a:99:d7:ca:fd:4c:3c:06:b2:18:be:f0:c6:b5:
                    11:70:5e:ae:11:e2:4a:b3:5e:6f:6d:1f:14:b8:ab:
                    b4:fa:2f:72:7b:e3:86:6f:0f:f9:97:12:df:ae:55:
                    84:f1:59:a6:2b:b1:44:00:01:24:9d:4d:e9:51:9c:
                    41:6c:a7:56:a5:52:49:e8:21:ee:9d:37:45:ac:ef:
                    d4:3f:80:c4:66:36:85:a5:91:67:dd:a6:d8:db:bb:
                    74:46:c6:bb:4e:33:e0:7d:76:b2:58:51:55:fe:b7:
                    1a:60:1e:2c:21:88:05:f3:2a:1d:8c:eb:be:8d:63:
                    5f:f5:55:ee:99:78:9d:b4:26:5e:28:d5:6b:26:fa:
                    2b:fd:3a:50:02:af:d3:ea:bb:29:a4:af:90:71:8c:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A0:E7:86:5E:07:63:5E:48:66:E6:44:5C:9A:D0:E5:DA:DA:9E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8e2655be-04b8-36ad-894f-889a069e37c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:da:fd:75:32:29:69:2d:59:62:27:da:dd:d1:ad:90:58:f4:
         92:0c:a6:2f:41:60:6e:4f:54:f5:1f:31:1a:c6:d2:ca:53:7d:
         98:dd:47:ee:2b:93:80:13:d1:2a:6c:5c:b9:f6:40:ea:9f:29:
         30:9e:9a:fe:5f:4c:27:45:9a:44:2e:b4:64:19:7c:a5:86:a6:
         f1:51:da:c8:f9:c5:01:6d:2d:e8:11:e6:7c:7e:2b:83:05:86:
         16:af:51:39:73:fe:d6:b4:95:30:30:fa:54:19:26:f2:e4:ff:
         0e:19:cb:50:c7:9b:09:ab:27:14:0b:a3:18:19:cf:6a:3a:24:
         7d:47:90:74:59:08:23:0b:a8:14:57:4e:c8:5d:a6:07:3c:20:
         be:ce:e9:bf:78:19:69:19:4b:6c:d5:61:84:a6:ba:34:6e:96:
         80:55:0f:e0:97:77:d9:dc:85:dc:52:c8:7a:85:9c:fa:68:d1:
         73:a6:dc:ad:80:d0:f4:74:b2:15:ca:9d:40:56:5c:85:70:52:
         ec:f9:fc:5b:b4:c9:01:08:a8:15:8d:e3:06:5b:49:05:57:88:
         51:b5:de:a7:31:40:f3:62:ce:96:25:b7:7a:83:94:3c:9f:47:
         91:a1:44:47:53:f7:a4:59:c2:5b:fa:57:2c:ce:da:3f:b2:3f:
         1a:28:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:29 2025 by rpki-client