Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa
File:                     23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa (raw, json)
Hash identifier:          O2fkRxm+2pao4u4NKdfHJPGUvnOPn2mChi3cfqtINpU=
Subject key identifier:   54:32:36:F2:67:0C:FC:0F:95:E6:E2:B7:D3:DF:47:D3:41:BF:D3:0F
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285849F7151DA5B9370F8A579C7400
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     398823
IP address blocks:        107.148.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1d:a5:b9:37:0f:8a:57:9c:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=6a5d8b31-39fa-4f92-ae95-7874b1f48cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:78:fc:af:fe:5a:bf:fc:95:70:68:bc:20:
                    20:11:69:ca:f1:7d:c2:00:11:5f:ce:8d:22:a6:49:
                    58:ff:b3:c3:d0:6a:b5:8b:b0:a5:10:7f:e2:1e:93:
                    4e:cd:9a:61:f1:b8:ee:2e:6d:f3:60:5b:e3:b6:04:
                    4b:c3:23:74:19:10:e6:0e:e2:82:0c:e8:82:22:44:
                    d9:6d:89:bc:d1:88:b1:cd:93:7c:ab:6b:4b:3f:cf:
                    f6:8a:f4:d3:a7:82:0b:88:65:03:6a:44:32:fe:0d:
                    43:20:70:0b:de:00:8c:87:41:08:32:92:5e:a6:09:
                    7e:c5:9e:f9:0d:9c:2c:e9:0c:89:47:4b:6e:cd:56:
                    1a:91:c0:83:d3:c6:c2:ca:9c:e0:b4:d9:ee:d2:02:
                    50:9e:39:ee:58:30:17:48:fb:e0:2a:8c:98:ad:c3:
                    b6:b2:9f:61:08:8a:f4:cf:41:cd:8f:8f:8e:65:39:
                    14:ac:ce:01:aa:bb:1d:e2:07:cc:a8:8a:a2:1d:19:
                    74:8b:50:51:f7:e0:8f:d0:20:c0:ff:2f:50:27:27:
                    67:d0:6b:3c:a7:ed:57:eb:02:ae:30:9e:1d:3e:bf:
                    d6:74:b9:63:bb:43:c8:4b:ea:0f:3d:e1:c0:2d:13:
                    8b:d3:ba:ab:3b:87:17:06:3a:68:69:6e:a0:e6:61:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:32:36:F2:67:0C:FC:0F:95:E6:E2:B7:D3:DF:47:D3:41:BF:D3:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:27:74:b8:ba:73:3e:71:31:0e:ae:9d:16:78:2c:79:ab:b6:
         91:e6:ea:3e:70:72:e9:d6:be:9f:d3:cb:ff:8b:66:b1:c1:ed:
         9c:6d:3d:dc:1e:9d:3d:c2:20:bc:18:69:12:28:39:6b:3e:d2:
         08:e6:62:cb:bc:b9:8c:85:67:cd:e4:ee:1d:92:c7:15:8f:78:
         95:3a:9c:c1:3a:ec:6f:4a:a5:6f:3b:34:4e:ac:f2:32:90:46:
         ed:b6:60:0a:b4:4d:cf:e8:b1:1a:2d:35:cb:29:29:a3:a9:d9:
         64:cc:35:96:eb:87:f7:dc:93:6f:a4:bd:89:51:9d:9e:4b:c7:
         3a:13:8c:d3:7a:df:3b:82:7b:fb:2c:1e:75:94:8b:b0:9e:37:
         70:44:25:64:84:05:6e:27:30:75:9e:12:ac:06:8d:57:a1:4e:
         2e:e4:21:dc:3b:32:e6:35:d6:ac:31:95:e3:ec:8a:dd:08:eb:
         6d:63:73:a5:61:6b:6c:83:a7:90:94:27:f2:49:57:79:45:79:
         a2:2e:6c:26:dd:e0:c8:d4:7f:bd:09:21:44:a3:30:80:b1:37:
         e5:f2:2b:f2:2b:30:17:91:5f:0c:0d:e4:e5:a8:a4:b5:01:3c:
         d1:cf:fb:90:8b:2e:b3:df:d0:84:8e:d7:d7:c6:9f:4f:0e:68:
         77:11:71:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FR2luTcPilecdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
NmE1ZDhiMzEtMzlmYS00ZjkyLWFlOTUtNzg3NGIxZjQ4Y2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfB4/K/+Wr/8lXBovCAgEWnK8X3CABFfzo0i
pklY/7PD0Gq1i7ClEH/iHpNOzZph8bjuLm3zYFvjtgRLwyN0GRDmDuKCDOiCIkTZ
bYm80YixzZN8q2tLP8/2ivTTp4ILiGUDakQy/g1DIHAL3gCMh0EIMpJepgl+xZ75
DZws6QyJR0tuzVYakcCD08bCypzgtNnu0gJQnjnuWDAXSPvgKoyYrcO2sp9hCIr0
z0HNj4+OZTkUrM4Bqrsd4gfMqIqiHRl0i1BR9+CP0CDA/y9QJydn0Gs8p+1X6wKu
MJ4dPr/WdLlju0PIS+oPPeHALROL07qrO4cXBjpoaW6g5mHpiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQyNvJnDPwPlebit9PfR9NBv9MPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjM3NjZlMjItODJjYS0z
MDA2LWJiNjctNmY2ZTZiOWFhMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5SEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUndLi6cz5xMQ6unRZ4LHmrtpHm6j5wcunWvp/Ty/+LZrHB7ZxtPdwe
nT3CILwYaRIoOWs+0gjmYsu8uYyFZ83k7h2SxxWPeJU6nME67G9KpW87NE6s8jKQ
Ru22YAq0Tc/osRotNcspKaOp2WTMNZbrh/fck2+kvYlRnZ5LxzoTjNN63zuCe/ss
HnWUi7CeN3BEJWSEBW4nMHWeEqwGjVehTi7kIdw7MuY11qwxlePsit0I621jc6Vh
a2yDp5CUJ/JJV3lFeaIubCbd4MjUf70JIUSjMICxN+XyK/IrMBeRXwwN5OWopLUB
PNHP+5CLLrPf0ISO19fGn08OaHcRcc4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:30:56 2025 by rpki-client