Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7773995c-988e-3194-a8aa-012d94fbff59.roa
File:                     7773995c-988e-3194-a8aa-012d94fbff59.roa (raw, json)
Hash identifier:          rqDwRQxOzzzyzwynHsxn0cPOiAlMy6o8zgutrjD5ZEg=
Subject key identifier:   D5:E2:5B:68:DA:28:39:05:57:FB:DC:4E:6C:AE:73:1A:29:C5:9E:D7
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584981D45D7202135C0B9CB019C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7773995c-988e-3194-a8aa-012d94fbff59.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     398478
IP address blocks:        107.148.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:5d:72:02:13:5c:0b:9c:b0:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=3d269afe-650c-426a-81a5-6fa5d51732c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:cd:9f:b2:6b:5f:94:f8:5a:e3:b9:d1:32:
                    ac:99:fd:ac:0a:80:60:69:89:ac:02:38:6a:c3:49:
                    15:65:81:94:5a:f5:53:f0:78:1f:6b:b9:cb:6a:ed:
                    86:83:e9:de:dd:86:69:f4:26:19:aa:72:b7:92:03:
                    cf:2b:9e:22:34:c0:a5:7d:18:09:1c:27:1d:f7:ed:
                    30:b8:4e:15:23:9f:2e:96:38:53:be:69:e6:5b:62:
                    87:0e:ec:5f:ed:77:92:36:de:3b:5c:1b:00:1b:2b:
                    91:7b:e8:aa:ae:5d:fe:8b:87:46:a9:a2:d0:29:41:
                    dd:78:fc:5b:9d:df:31:43:bc:13:99:b7:0d:d4:90:
                    36:67:60:ff:40:95:1a:1a:d1:41:6a:2f:36:5b:db:
                    9e:17:df:05:b9:21:a5:0b:56:9f:de:5a:86:20:d4:
                    99:bc:67:72:b3:c1:67:60:81:83:9f:7f:68:a5:a0:
                    e5:0d:4f:c1:38:04:98:00:a3:15:52:17:4b:a3:c4:
                    da:ca:c1:96:35:87:f5:cd:9c:93:0f:47:95:fc:b0:
                    6d:f2:ec:53:36:93:cd:97:41:23:30:f2:b5:40:20:
                    57:51:a4:33:0f:7f:34:16:d0:0e:7d:8c:50:b6:99:
                    84:64:59:cc:ef:d5:b8:73:68:f6:f8:5e:eb:2e:7e:
                    99:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E2:5B:68:DA:28:39:05:57:FB:DC:4E:6C:AE:73:1A:29:C5:9E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7773995c-988e-3194-a8aa-012d94fbff59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:f6:48:1a:49:c8:e7:d2:6a:b0:30:05:cb:98:4a:f4:4d:
         77:d6:6d:d0:28:87:07:92:55:bb:45:f1:0e:7b:20:75:84:d6:
         2e:7f:04:64:45:dd:d1:ad:92:75:60:9a:16:95:3d:a8:0a:a1:
         5a:d9:f1:c2:5d:99:84:5a:e0:99:bc:15:44:80:6e:3b:54:11:
         d3:18:47:4e:16:2a:16:55:f2:fb:e9:02:c3:ef:5a:c6:75:a7:
         aa:ad:7f:be:11:13:98:76:2e:8a:43:74:31:20:60:6b:91:f0:
         61:1c:86:f7:11:41:23:0f:cb:5f:92:42:ef:0a:e7:30:01:74:
         2b:d9:dd:43:eb:ee:29:3d:0b:74:60:5b:50:66:de:1f:22:1e:
         27:60:81:51:b3:f2:44:ac:8c:8d:b8:dc:a9:5a:10:07:1b:54:
         b8:68:bd:b1:87:3d:f2:f5:2d:69:0e:c9:b2:77:73:05:88:77:
         21:23:28:42:ae:49:82:1a:ea:5f:12:22:8a:30:f7:58:0d:56:
         e1:a9:6a:bb:f7:f2:5b:10:b1:28:4c:50:3b:72:ef:cf:10:88:
         14:c3:e4:1d:d9:d3:d2:61:de:fc:95:c7:d3:cd:51:bb:25:c4:
         7a:5e:2d:0f:4b:98:7d:0e:ef:2f:12:e9:96:dc:db:a8:ab:e3:
         35:65:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:00:52 2025 by rpki-client