Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa
File:                     6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa (raw, json)
Hash identifier:          0llGBgUq8TzF7YDNcazN1OZM4q42LJ0JVS2QAbxjZiM=
Subject key identifier:   1C:51:F2:F1:9E:4A:54:C3:67:B4:5E:21:CB:4A:24:F2:F2:C1:1C:CA
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285849C4D4CC2A6DC066177387E180
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     398823
IP address blocks:        107.149.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cc:2a:6d:c0:66:17:73:87:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=c1c1f642-fe7c-42b9-8891-3ec1d3a97368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e1:d9:27:85:d4:15:7a:33:8a:ca:41:0d:40:
                    aa:40:d3:e8:67:84:d2:85:99:2b:02:f5:33:80:bb:
                    25:c8:d2:2e:5c:28:45:54:14:03:c3:79:4e:d4:e3:
                    ca:09:56:49:15:c9:45:e1:03:22:8e:87:10:c7:1c:
                    c3:56:96:cd:cd:31:fd:32:41:13:e8:03:0d:f3:84:
                    3d:cf:20:1e:5a:79:a9:cd:69:31:5c:d4:b3:5a:af:
                    03:11:00:ec:bd:b3:43:bc:d3:7e:ad:56:b6:e8:8a:
                    cb:48:d6:91:df:5c:d3:f1:72:da:fa:05:d6:89:82:
                    35:22:99:df:74:16:1e:ad:9d:e1:de:5f:2c:3c:3f:
                    9e:07:1c:35:62:f1:77:e9:e8:0a:e4:78:58:fd:ee:
                    dd:af:43:3e:2b:11:e2:65:0d:82:fc:0a:ac:0b:d5:
                    05:63:a3:1d:55:29:cd:ea:db:3a:84:67:eb:54:2a:
                    37:0d:46:a6:e1:fb:ab:a0:30:db:fb:22:75:be:05:
                    de:61:f3:26:81:7f:04:0c:73:d0:7c:d6:c3:3f:ad:
                    66:2b:9d:9a:22:17:a7:48:af:e2:32:04:d9:12:80:
                    23:87:88:69:1a:e6:88:ac:38:f0:16:98:ed:9c:83:
                    33:23:0d:5e:25:f9:ca:e5:49:32:d5:9e:1d:0b:07:
                    f0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:51:F2:F1:9E:4A:54:C3:67:B4:5E:21:CB:4A:24:F2:F2:C1:1C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:15:df:66:0d:3e:2e:be:e8:60:94:a2:1a:a8:3b:4d:c2:
         cc:8d:e4:7f:3a:fd:83:1b:b2:9e:9b:ce:f4:cd:68:f1:62:05:
         e8:48:56:38:31:84:a8:32:03:de:75:c1:1e:f6:45:ea:a5:08:
         fd:f8:a7:d5:2d:0d:79:7c:ec:b3:b5:53:9e:ac:37:20:f5:92:
         2f:41:ae:20:b4:3b:c5:f9:4c:44:90:1f:18:3a:cb:7b:ab:aa:
         0f:a7:12:d1:a3:bd:59:71:91:e6:f5:bf:31:db:57:61:a0:59:
         59:46:ad:cf:6e:34:bb:6a:26:b3:43:41:e0:ec:01:3e:67:22:
         a0:94:54:b4:56:a4:4b:3b:8b:de:63:95:e2:7c:bc:fe:4b:9f:
         60:d8:3e:e9:30:e7:da:3a:15:67:4c:4c:2c:5f:c7:dd:c5:fb:
         5b:58:b6:7c:e3:40:f9:c2:31:55:cd:30:04:35:ff:29:21:c6:
         2b:8c:e6:d5:cc:f7:0e:46:13:b8:7c:d0:d3:a9:21:fc:bc:b4:
         82:00:f8:74:82:27:d9:f1:7e:b8:f6:95:9b:91:37:d3:d4:c1:
         65:d1:72:06:fd:8f:db:f0:6c:b0:25:ab:6c:c2:0e:fb:ac:fd:
         18:25:f1:ff:de:59:c9:27:a2:f3:56:5c:2e:1d:e4:6f:9d:4a:
         d3:94:79:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:08:12 2025 by rpki-client