Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/8358f286-491a-379e-92f5-a70e719eff4c.roa
File:                     8358f286-491a-379e-92f5-a70e719eff4c.roa (raw, json)
Hash identifier:          gvCe3NmAOWYGZeeniyh52jHOUqrd5Rgp7CklvedKNCA=
Subject key identifier:   70:B3:0C:9E:DC:6C:55:BA:56:04:C5:C0:58:74:06:AF:91:48:77:7B
Certificate issuer:       /CN=0153231e-bade-4c05-b3fd-55b65671daae
Certificate serial:       010D0C9F4328584A7FE08E0368087E14D703BD00
Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/8358f286-491a-379e-92f5-a70e719eff4c.roa
Signing time:             Sun 13 Jul 2025 01:00:52 +0000
ROA not before:           Sun 13 Jul 2025 01:00:52 +0000
ROA not after:            Sat 11 Oct 2025 01:00:52 +0000
asID:                     395153
IP address blocks:        107.182.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:8e:03:68:08:7e:14:d7:03:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae
        Validity
            Not Before: Jul 13 01:00:52 2025 GMT
            Not After : Oct 11 01:00:52 2025 GMT
        Subject: CN=e2347535-7f34-421d-944e-54bc0b82bdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:a0:13:31:f5:e8:18:de:86:3b:81:b3:09:
                    dd:b5:66:f3:87:d9:a3:92:42:f1:77:26:a5:6d:31:
                    9b:84:d3:dc:5d:bd:e7:9d:c0:e4:56:78:97:e3:0d:
                    ea:8a:7e:d4:1d:9a:41:ee:62:1d:38:32:ea:de:7c:
                    23:a4:01:45:16:26:b4:60:38:ee:68:db:2d:0f:a1:
                    1d:58:de:80:4c:d3:13:0e:c9:2a:a6:47:88:92:04:
                    bb:a5:b1:ea:9b:8e:3b:32:39:0d:81:e9:83:30:13:
                    f7:56:3f:8f:4c:05:de:fb:59:a6:4e:3a:a9:39:97:
                    88:dd:a5:5a:79:2b:c4:36:9c:bb:39:93:c7:eb:da:
                    d5:3a:71:7f:0c:7b:33:59:77:9c:33:4e:2b:af:f5:
                    6e:57:a8:a4:6d:1f:97:d0:31:ce:be:53:7e:98:a7:
                    21:25:f8:13:9d:e0:41:95:1b:94:6f:7e:07:ad:ce:
                    7e:7c:77:c3:a4:90:98:52:4a:79:34:5d:99:6f:fb:
                    0a:8a:30:8b:cf:ee:91:db:e6:22:06:d9:ac:d7:25:
                    29:82:de:cb:5c:b9:8a:a6:65:cc:fe:14:fb:cd:0e:
                    6c:44:73:c5:c7:01:c9:00:02:89:d1:ba:f6:22:b8:
                    f3:35:09:ca:92:cb:43:76:fc:aa:4f:78:4f:c1:7a:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B3:0C:9E:DC:6C:55:BA:56:04:C5:C0:58:74:06:AF:91:48:77:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/8358f286-491a-379e-92f5-a70e719eff4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f4:3f:b8:c2:65:c2:f7:fa:af:0c:b0:61:07:24:13:70:08:
         af:14:9c:a2:68:51:f6:b1:2e:ab:a5:dd:bf:10:25:1f:85:80:
         fb:d0:07:1d:82:74:9c:f0:55:bb:6f:16:dc:4a:00:c6:e1:97:
         7b:47:b9:27:e3:66:fe:d1:2a:7c:1f:af:78:4e:85:e4:21:e2:
         03:d0:6d:6b:f5:95:66:96:3c:07:06:9c:a6:f9:81:90:a8:db:
         ce:98:e8:d7:25:2f:df:2d:16:a7:45:c3:a4:e4:f7:1c:4a:62:
         09:6a:87:8c:37:d6:6a:64:ee:84:17:82:22:66:a2:5b:82:56:
         4e:90:95:36:bf:71:b8:d4:e6:45:fb:0b:a0:ee:98:9c:e8:28:
         94:85:0d:f4:67:44:81:2e:69:86:c1:9b:20:ab:a7:25:90:dd:
         46:07:7c:55:1a:ba:da:2b:ce:37:f9:62:62:28:70:5a:92:85:
         47:16:6f:56:ae:e2:ed:1c:31:e4:aa:e8:d9:b3:72:20:53:1a:
         a2:09:c2:26:0c:16:10:41:f5:11:f3:d4:e9:95:e5:c0:ec:7a:
         bc:66:1e:0f:c4:1d:2e:a5:2a:e3:c6:df:ff:6d:b1:e2:3d:c1:
         8e:6d:c0:94:b2:f5:ed:82:fa:96:6a:26:c0:35:db:65:69:db:
         7c:81:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:15 2025 by rpki-client