Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/05c905c8-792e-345e-843c-6d8fb75cd78d.roa
File:                     05c905c8-792e-345e-843c-6d8fb75cd78d.roa (raw, json)
Hash identifier:          PD4f7KU6MlUWrNLmgGgQBUTM/S5Xq4Snmnwq/1GcJYw=
Subject key identifier:   57:16:58:BE:B8:46:B7:F3:4B:51:C0:52:D5:5D:FD:5C:A4:12:BF:E8
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285849E91FA8A5BE977324B55452C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/05c905c8-792e-345e-843c-6d8fb75cd78d.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     398478
IP address blocks:        107.149.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a8:a5:be:97:73:24:b5:54:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=2e6959ec-32d3-409e-8e51-68a679603070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:d0:f2:75:3e:05:c1:8d:f2:f8:e8:75:1b:
                    df:f6:ba:c4:bc:96:d0:51:3f:63:11:ca:af:c0:dd:
                    85:e1:ff:f9:18:75:34:69:a4:1d:6f:be:6d:0d:6d:
                    5f:98:06:6c:13:cc:51:79:91:23:af:93:d6:e0:af:
                    df:8f:45:bd:e8:2e:e3:b3:b1:86:b6:79:9b:4b:20:
                    fd:e0:5e:1f:5e:29:39:8d:2d:5a:f2:e0:43:39:6b:
                    e2:9c:9f:7d:ea:f0:d0:50:86:36:5d:3e:42:8f:de:
                    db:b1:5a:54:61:22:ad:6b:c7:7c:1c:2b:e9:eb:38:
                    a9:db:06:1e:d0:d2:ac:af:23:d0:ab:81:e1:9d:df:
                    49:79:0d:aa:d4:db:43:38:81:c1:f4:15:69:cd:32:
                    e2:18:86:2d:cb:09:d2:e4:16:b7:f8:ef:47:6b:42:
                    e8:50:11:3a:98:18:9b:2c:e5:76:12:b0:6f:17:0b:
                    57:23:f5:ee:25:9e:9c:78:72:ae:67:3a:63:65:67:
                    e5:b0:59:05:c9:52:f8:91:85:3d:1f:6f:5b:bf:be:
                    55:af:b4:f3:31:f2:eb:e9:f4:30:2e:07:75:3a:d1:
                    dc:07:87:58:eb:ec:d9:c4:dc:e5:ec:d5:3e:b1:74:
                    2c:b9:74:29:8c:6e:ce:23:ba:c8:1e:f6:fc:0f:8c:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:16:58:BE:B8:46:B7:F3:4B:51:C0:52:D5:5D:FD:5C:A4:12:BF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/05c905c8-792e-345e-843c-6d8fb75cd78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:57:1e:d6:0c:42:5b:43:9b:83:20:e2:3e:60:cc:74:15:
         ba:1e:10:e7:5d:7c:20:99:62:b8:4d:fa:a4:37:5f:7b:c0:d7:
         bf:40:1e:86:1b:3c:e5:85:99:23:6f:d6:01:41:4d:72:07:d8:
         06:40:55:b5:d3:b1:11:05:11:63:04:f6:14:ee:4a:ac:19:97:
         da:a7:56:2e:3f:59:15:4f:d6:d2:10:9b:40:21:d6:ad:d0:2c:
         6a:d8:6d:d1:13:59:41:ab:c1:a5:0f:01:f7:88:1c:e0:09:16:
         d7:16:47:77:8c:9a:64:cf:d2:74:ad:48:db:c2:a5:82:0b:18:
         29:f5:61:d5:09:d7:69:98:52:45:c9:d7:8c:3b:84:f5:6f:b3:
         f1:46:18:cf:f5:19:24:5b:7a:e9:90:dd:6d:62:e7:97:87:2d:
         c1:56:82:c0:a1:50:da:3d:65:8b:17:9d:aa:b8:76:08:6c:ef:
         2c:d3:b7:7d:f4:b8:b5:75:90:ea:e4:c9:64:b6:e3:0a:a9:2c:
         70:3c:03:6e:97:68:fa:0d:14:3c:28:52:9e:74:b7:cd:2b:55:
         a8:7c:40:37:11:13:bf:c7:f7:eb:92:5a:03:b6:8b:09:51:06:
         8b:31:32:5c:73:f2:d8:91:de:44:76:75:a5:b9:55:e2:1e:e9:
         34:80:0e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:50:59 2025 by rpki-client