Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b17b84aa-67fc-32b6-adf2-35704ee55bdd.roa
File:                     b17b84aa-67fc-32b6-adf2-35704ee55bdd.roa (raw, json)
Hash identifier:          Wq9KyfNS/zi7t/GXyiFflslNF6DqI54PMah/LTyTUXc=
Subject key identifier:   4A:B9:B7:51:E9:E9:8A:D8:06:A8:9C:6E:93:CE:6C:CD:FD:27:C1:C7
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F432858499829D15EC3DF991E537DE780
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b17b84aa-67fc-32b6-adf2-35704ee55bdd.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     394432
IP address blocks:        107.148.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d1:5e:c3:df:99:1e:53:7d:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=dcc988e9-93e4-44d7-b0db-0f37698aefd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:a5:c4:54:5d:64:8d:54:1a:a3:bc:ac:e5:
                    64:ab:0f:12:b4:a9:89:a1:7f:ba:01:a7:c2:5d:26:
                    1b:a6:97:2c:41:db:60:5b:74:4f:20:63:51:56:bb:
                    7d:93:6f:cb:25:a9:21:98:4f:52:63:78:33:45:5e:
                    98:cf:24:b8:2c:3d:71:82:da:8c:8d:18:9d:19:52:
                    7d:5c:9e:3c:52:85:26:b9:fa:cb:6d:65:9d:11:09:
                    cf:83:c4:bd:c0:f6:64:86:18:79:7b:30:5b:69:04:
                    fb:39:67:a9:2e:cc:20:2d:8a:59:8d:b5:43:e6:67:
                    58:6f:50:29:e6:49:2b:2d:d2:9e:24:99:76:a4:55:
                    51:11:af:cc:e4:72:3d:50:fc:c5:96:de:87:7f:10:
                    c2:5e:28:3f:d4:02:07:04:99:8a:4f:9f:b4:5e:ed:
                    97:fb:bd:9e:f7:0e:6f:4a:04:93:df:09:81:d2:7c:
                    7f:66:86:15:30:22:ab:31:fc:29:4c:a9:25:3b:d5:
                    9b:35:00:03:80:42:04:d7:e3:20:08:19:c2:a7:73:
                    af:d5:23:78:09:f0:ea:1f:a6:57:db:66:72:3e:9c:
                    a8:26:1b:e3:41:b5:e4:35:35:8e:7d:60:01:3f:2e:
                    62:c3:0b:1a:2c:3f:80:18:a2:71:bd:7c:1c:85:26:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B9:B7:51:E9:E9:8A:D8:06:A8:9C:6E:93:CE:6C:CD:FD:27:C1:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b17b84aa-67fc-32b6-adf2-35704ee55bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:11:09:00:8b:7d:10:90:5b:e2:ba:e9:0b:fb:fe:5a:6d:72:
         b2:3d:f1:29:61:8f:75:e1:c6:b1:a9:25:5a:74:b0:b6:37:48:
         02:f1:8b:c3:7f:92:b0:ef:5a:8b:ef:92:d0:18:0e:53:e2:db:
         8a:b5:9d:fa:02:31:b1:44:80:36:f8:88:75:a1:bf:59:2d:75:
         b7:ae:86:1a:0d:33:16:af:7b:43:f7:ca:86:16:be:55:f4:61:
         3b:85:96:9b:50:dc:94:d8:f5:8a:39:b8:cd:97:ed:bd:a1:c0:
         6a:2e:cd:a3:0a:f7:cf:03:95:57:f9:5a:c2:2a:fc:14:20:f9:
         f2:7f:fc:41:8e:19:03:99:47:04:c4:b0:22:e7:88:d7:69:ac:
         40:b5:90:d4:eb:db:91:2c:a4:74:64:08:0d:db:c0:f3:5b:4f:
         d5:58:79:3f:a1:02:98:9c:8a:02:08:31:b2:7c:53:70:a2:1d:
         fe:f4:ef:80:17:88:d5:2b:81:cc:76:4d:18:6b:9e:3d:aa:1e:
         78:dc:8f:ea:be:16:bc:ad:5a:f0:fb:f3:e7:86:8e:38:56:6c:
         4b:6b:31:82:51:94:66:07:17:87:9a:90:2d:6c:e4:2f:f1:66:
         a4:17:80:9a:a2:c5:f8:2e:31:a3:83:ec:f2:21:07:74:0d:86:
         65:d4:11:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:57:56 2025 by rpki-client