Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/311fb489-48a2-3f99-a66f-a535414c6417.roa
File:                     311fb489-48a2-3f99-a66f-a535414c6417.roa (raw, json)
Hash identifier:          XNlDTGW5j6QSsvSAScrSuSJlclrstag31zaa+0mAfvI=
Subject key identifier:   C6:E8:D3:D8:32:C8:30:C0:FC:76:DD:0E:BA:74:0D:05:28:6C:EC:6E
Certificate issuer:       /CN=0153231e-bade-4c05-b3fd-55b65671daae
Certificate serial:       010D0C9F4328584A9640614A79EEB7E6188E1493
Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/311fb489-48a2-3f99-a66f-a535414c6417.roa
Signing time:             Mon 21 Jul 2025 01:21:44 +0000
ROA not before:           Mon 21 Jul 2025 01:21:44 +0000
ROA not after:            Sun 19 Oct 2025 01:21:44 +0000
asID:                     395153
IP address blocks:        107.182.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:40:61:4a:79:ee:b7:e6:18:8e:14:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae
        Validity
            Not Before: Jul 21 01:21:44 2025 GMT
            Not After : Oct 19 01:21:44 2025 GMT
        Subject: CN=9318b508-25d4-4454-ae8f-d679b60c7f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:2d:86:e6:43:22:5f:3a:ea:d7:d3:73:05:
                    eb:cd:75:e4:d2:2b:50:3d:b9:af:ef:9d:04:86:c1:
                    9a:8a:2c:02:3d:bb:9d:2c:98:2f:24:2a:b1:62:bc:
                    31:08:47:71:99:8d:d9:51:61:95:68:f3:c4:f6:ec:
                    9d:59:3f:79:29:a9:67:8b:47:5b:e7:7c:b2:be:c0:
                    7b:d4:91:05:91:d3:05:68:40:73:37:f2:11:a6:12:
                    89:ba:cc:ce:8d:dc:4e:17:f8:b4:15:16:73:c1:ff:
                    71:d7:4e:5f:27:cf:b8:93:32:ba:bc:aa:09:88:bf:
                    d5:8c:97:a9:1c:16:a4:2a:b1:08:04:bb:23:ca:38:
                    78:fe:13:5b:be:94:7f:a2:77:ab:fd:95:1b:6f:9e:
                    8d:65:95:07:d0:16:e9:b1:ac:07:e6:65:53:81:f0:
                    c8:89:00:b4:1c:58:38:e8:70:8b:09:9c:09:a5:05:
                    92:c2:e1:40:ba:e6:f9:9b:2c:b6:c2:b2:3a:28:ea:
                    db:fc:a7:21:0a:7e:4d:33:a8:67:50:6c:bd:f0:12:
                    b3:65:b6:5d:a6:fd:ab:ce:08:14:e7:5c:db:69:ab:
                    3f:d5:6a:95:81:54:4d:b3:01:d9:1d:0e:a4:9c:8b:
                    13:00:1e:8f:22:8a:99:46:49:82:6b:da:5b:e0:c5:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E8:D3:D8:32:C8:30:C0:FC:76:DD:0E:BA:74:0D:05:28:6C:EC:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/311fb489-48a2-3f99-a66f-a535414c6417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b4:6d:c9:a4:11:cf:5a:f9:2d:c5:ea:01:91:ff:04:42:f0:
         ea:c8:e3:43:e9:47:76:b1:a3:4f:f1:b5:7c:fb:79:0c:7a:75:
         d5:fb:20:03:07:51:90:5f:a8:66:86:51:6f:38:4a:5e:fb:ed:
         a0:24:cb:ef:8e:ee:b3:f8:a7:03:58:cc:12:76:a3:fd:92:82:
         20:48:2b:7e:bd:88:7b:48:9f:8b:10:45:b3:76:1b:ec:fb:1b:
         f6:18:4e:16:f4:b8:f7:ae:e2:49:8a:1d:83:9a:8c:95:f5:1a:
         dc:33:19:97:a5:72:c8:22:ec:3d:fd:04:3c:95:04:d8:a6:3d:
         1a:e6:0d:a3:8c:17:8b:47:e3:05:0c:97:0d:7f:9d:16:55:32:
         4b:78:5d:67:80:fe:c2:2b:a6:fe:e6:49:34:f7:5a:90:60:7f:
         05:03:0c:ad:09:5d:db:11:30:9e:17:9e:56:f1:67:d9:c8:3d:
         ab:f6:a7:50:15:24:4d:b6:a6:87:bf:63:7f:33:d8:cc:93:34:
         d5:98:f1:13:95:f5:ef:d0:58:6e:54:d6:3d:34:f3:b4:3a:62:
         d4:e0:d5:6e:52:c0:6b:55:ba:e4:41:1e:31:2d:84:94:92:1c:
         12:d9:08:1e:2c:c9:76:2b:f5:88:8c:0e:67:f6:0a:a3:d4:58:
         12:14:8f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:35 2025 by rpki-client