Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d83dbf62-92eb-3ca5-9f4d-8bdf9a49856f.roa
File:                     d83dbf62-92eb-3ca5-9f4d-8bdf9a49856f.roa (raw, json)
Hash identifier:          M67326M8a1JQNCantBwZUkKd/ON80PYkb/2quZFPWk4=
Subject key identifier:   F1:5C:DC:C6:CE:E4:61:40:5A:54:10:D1:3E:54:07:24:70:BF:8A:4E
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285849D9C4F372BCAB402E9EDA2780
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d83dbf62-92eb-3ca5-9f4d-8bdf9a49856f.roa
Signing time:             Wed 14 May 2025 13:01:03 +0000
ROA not before:           Wed 14 May 2025 13:01:03 +0000
ROA not after:            Tue 12 Aug 2025 13:01:03 +0000
asID:                     394432
IP address blocks:        107.149.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d9:c4:f3:72:bc:ab:40:2e:9e:da:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 14 13:01:03 2025 GMT
            Not After : Aug 12 13:01:03 2025 GMT
        Subject: CN=914c3794-f404-4db1-ba33-c876349cf944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:27:3a:dc:fa:36:2f:8c:c4:31:ce:02:ee:
                    34:46:84:5c:89:8a:72:75:be:e0:fc:00:9a:84:1f:
                    3a:02:57:fc:52:62:89:4a:10:77:41:43:91:26:89:
                    20:0a:20:d8:c1:4d:ee:04:76:46:db:e1:36:f9:f9:
                    1d:b4:85:33:15:18:35:d6:9b:66:cd:55:bb:9a:05:
                    27:b0:96:71:2c:75:a8:b7:bb:12:39:1d:ae:2a:9a:
                    5e:6b:f6:e7:e7:1a:ea:7a:bb:05:17:29:1f:c6:77:
                    8c:ee:bf:c4:f5:c7:91:5c:ef:7a:44:73:a4:73:f3:
                    be:c0:97:d8:06:58:f3:70:a3:5d:70:42:98:cb:dc:
                    d7:0d:24:5f:03:3a:8d:83:7a:00:01:a5:f0:23:c0:
                    87:e5:f0:8d:25:cd:97:e4:5d:be:8a:4b:11:dd:4d:
                    60:e0:31:f2:ed:a5:46:fc:9f:bd:2d:30:93:41:a5:
                    12:26:9c:6a:15:9c:13:1e:c1:92:ae:7d:76:ce:6a:
                    1d:41:40:5e:31:33:cb:77:15:9a:23:b0:61:b6:8c:
                    1c:27:03:0b:d5:28:7a:3f:9e:87:cd:6b:6d:fa:9a:
                    de:fc:97:5a:46:61:43:d4:34:2f:56:f2:95:eb:c1:
                    62:16:17:30:68:f8:19:a7:83:fb:38:48:5b:fa:42:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:DC:C6:CE:E4:61:40:5A:54:10:D1:3E:54:07:24:70:BF:8A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d83dbf62-92eb-3ca5-9f4d-8bdf9a49856f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:43:85:54:8a:b0:e5:a1:ac:12:31:ca:d4:3f:58:52:69:
         2e:11:f1:ba:8e:b7:12:ec:43:3d:30:3b:c9:83:4a:a8:69:99:
         09:68:04:ad:fc:f5:09:9b:91:f1:37:36:00:43:1b:aa:06:87:
         57:99:6d:35:4e:eb:f0:5b:63:12:dc:c8:4e:6d:5c:9e:e5:5a:
         1f:40:79:60:c7:03:ab:74:fa:7f:12:4f:be:7b:5a:d5:ef:94:
         5c:13:1e:0a:79:1f:74:70:da:2e:90:1b:18:90:a9:87:53:56:
         0a:b5:50:fc:cc:75:e5:a6:3d:4b:5b:6e:0b:7f:1e:5f:42:5a:
         d0:44:5b:1c:d1:bb:b0:54:e9:7d:7b:95:25:0b:14:3d:88:cf:
         66:7c:80:c0:e7:f0:3c:87:db:14:4a:0d:8a:2a:24:0b:37:41:
         78:94:c6:a6:43:aa:f0:fd:6c:d0:d1:b8:78:fc:6c:69:d9:62:
         52:61:7a:84:6a:5d:6e:e5:e6:8b:3b:d9:e5:6d:43:a7:15:07:
         86:8a:3f:70:15:76:60:a7:e6:cf:5a:09:5d:02:1c:d1:77:b5:
         d6:89:e6:f0:ef:e5:83:5d:2a:ab:a6:f9:e1:99:a1:b4:09:65:
         b4:49:b5:b2:87:70:9f:f0:da:f7:37:09:b6:fc:6c:12:4e:91:
         4d:61:bd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:00:23 2025 by rpki-client