Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa
File:                     c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa (raw, json)
Hash identifier:          ipv/b057jDadbr3r7CqZwacndKqcdVyBHbkFk4VYnJA=
Subject key identifier:   72:3C:42:64:9F:62:D4:C9:86:DB:43:B3:C8:18:7A:C6:A3:4A:BC:A4
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584B41E71C100FDD1379F41A6C00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     398823
IP address blocks:        107.149.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:1c:10:0f:dd:13:79:f4:1a:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=1794d5d3-8f1b-413c-b158-4a6b4f68ad55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:f8:62:74:46:4e:9c:3d:32:c3:6c:52:3b:
                    ed:fc:88:15:af:fa:64:8f:80:53:82:46:12:fe:33:
                    c5:be:91:88:f9:67:df:a6:62:7a:c2:71:fb:eb:84:
                    03:c4:06:e7:17:bf:ae:9d:74:ce:f9:0f:59:80:7c:
                    51:15:34:b7:5d:5b:5d:0e:20:42:a9:cf:0c:a8:87:
                    0d:c2:98:bc:69:79:1a:be:a0:84:54:b8:09:81:d0:
                    74:a8:42:6e:af:6d:60:62:bc:bf:65:03:e7:62:38:
                    d5:cf:1a:d5:ee:df:12:71:b7:c8:9e:5a:97:9c:16:
                    c9:00:89:85:af:04:7e:54:6c:06:32:32:a8:65:a1:
                    72:00:40:31:ba:20:81:5d:ee:60:68:be:43:28:ff:
                    f3:28:d8:0b:58:55:70:00:e8:4b:80:81:a0:97:d2:
                    00:df:4a:c9:58:1a:18:a5:e3:b9:e7:57:4f:d6:48:
                    bc:7f:5a:bf:df:dc:9f:a2:94:b1:7b:e6:ff:61:08:
                    f9:bd:25:31:39:51:77:19:ad:26:ae:dc:e0:a3:c4:
                    48:7d:86:73:b4:de:46:54:f6:bd:86:b5:87:49:e7:
                    6c:98:ab:a6:66:3f:2d:a4:28:2b:e0:e9:e8:78:62:
                    60:23:fb:d9:8b:e6:01:fc:29:68:f7:d8:01:77:fa:
                    2c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:42:64:9F:62:D4:C9:86:DB:43:B3:C8:18:7A:C6:A3:4A:BC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:07:5d:60:99:85:2c:67:d5:ee:8c:b1:10:97:7c:dc:b7:c4:
         03:bb:54:12:84:77:fc:c8:e6:06:18:d1:56:c1:52:a3:7f:3c:
         92:ee:27:cb:19:08:fb:c1:3c:8a:d8:aa:57:6e:55:21:f7:a7:
         cd:26:2b:05:79:84:8f:b1:e7:79:f6:46:fa:6c:c5:94:2e:0c:
         bb:a4:df:c4:7a:78:43:1b:df:61:4f:33:f4:ed:b6:70:e4:1b:
         e6:3f:e9:ad:b1:7e:5d:c1:ae:e3:84:0a:04:4e:31:bb:48:f5:
         60:25:61:d3:d9:56:81:06:3d:55:11:6b:eb:99:1a:50:5c:a8:
         d0:4a:e9:a0:1f:1c:49:a8:43:7c:94:c2:5d:ef:f1:50:43:79:
         4e:35:de:19:f0:f5:28:ba:9d:14:b4:49:8b:db:90:14:cc:b3:
         e1:38:98:b9:d0:78:46:8c:92:73:bc:66:15:fa:46:92:02:3d:
         11:dd:23:d9:a1:92:15:d2:4b:ad:4d:3b:11:5b:8a:e3:f0:5d:
         58:24:2b:af:97:ba:b5:11:0d:f7:45:58:c7:e6:4e:e8:01:f4:
         9e:bb:b8:ad:f7:62:6d:b0:30:44:3c:1c:bc:f9:6b:d3:34:c8:
         5e:ab:e7:81:12:9c:d9:e6:f8:ee:af:88:55:b7:3f:5c:a0:de:
         d3:d5:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:20 2025 by rpki-client