Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0c5c561b-ff6a-34e3-ad50-51558fc05ca7.roa
File:                     0c5c561b-ff6a-34e3-ad50-51558fc05ca7.roa (raw, json)
Hash identifier:          9NVMpsPY/AadwdVOhOu4Q6IKKobZmYkxV6sS7DDFEjc=
Subject key identifier:   4A:AC:44:1D:27:7C:2C:7B:87:AB:2A:53:AD:05:EB:44:03:86:38:DE
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B6D2CB7FA318F784BA99D2620
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0c5c561b-ff6a-34e3-ad50-51558fc05ca7.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     7018
IP address blocks:        108.144.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:b7:fa:31:8f:78:4b:a9:9d:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=a7724833-198d-4368-9f4e-7515175b9cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:0a:e9:ac:e2:14:7d:bc:bd:73:c1:b9:ed:
                    28:11:00:0c:92:1d:1b:d2:2d:7d:c9:e5:3c:b4:1e:
                    69:06:c4:1b:f5:db:4e:17:fc:9f:10:38:98:63:53:
                    87:c7:1f:65:1d:cf:24:d1:72:7c:c2:0c:6a:dd:77:
                    22:6e:c1:29:4d:43:cb:cb:eb:fd:3d:b1:04:c7:7e:
                    97:1d:42:fb:64:11:03:94:0b:49:70:3f:2d:2c:39:
                    e8:68:c9:86:03:bb:89:0b:91:af:c3:bb:31:63:a7:
                    3c:c8:19:a4:db:03:a1:17:6c:03:c2:9c:86:2c:54:
                    2d:ab:86:8b:4a:a3:0f:34:5c:bd:c4:67:9a:b4:90:
                    2e:e0:73:07:56:03:8f:a1:50:c5:58:4f:0a:0a:4c:
                    28:5a:46:58:7a:e2:a6:14:e3:40:e1:e0:88:6a:78:
                    77:a7:05:a3:e6:34:9f:43:1a:6d:ca:76:ea:35:95:
                    37:a8:99:87:f2:eb:12:1b:89:0e:96:aa:1c:fe:98:
                    9e:03:6e:32:47:0a:79:bd:bc:1d:6f:46:0c:a9:c2:
                    de:7e:2d:ca:9f:83:a2:10:22:9d:b8:c4:4b:7b:32:
                    4e:d7:35:99:73:7c:f4:3a:9e:2d:65:94:74:28:91:
                    0c:05:69:21:60:56:fd:25:8e:c7:8a:86:22:fa:09:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AC:44:1D:27:7C:2C:7B:87:AB:2A:53:AD:05:EB:44:03:86:38:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0c5c561b-ff6a-34e3-ad50-51558fc05ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.144.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:19:75:0f:cd:19:39:c0:f4:1b:c1:ec:a3:94:8d:24:7d:6b:
         76:59:8a:ed:33:2c:45:11:0a:82:e2:8a:19:51:c5:05:e5:af:
         74:aa:82:9f:e7:93:2d:8c:0e:2b:62:27:f1:25:91:bc:6b:0d:
         d8:7a:cc:85:1b:0d:0f:13:19:86:05:19:c6:03:22:c4:9b:e9:
         b3:17:35:52:0a:8b:53:e7:28:f3:74:8d:a1:c0:99:a7:e8:a4:
         b8:41:68:93:41:2d:eb:24:98:26:d7:73:1b:67:8a:b4:2c:74:
         47:3a:fa:62:fe:a4:00:55:d0:97:d8:f0:53:e3:66:08:9b:82:
         c6:6d:76:3e:91:bc:b6:61:ca:9f:93:70:4c:04:1a:e9:1f:fa:
         24:78:2c:c8:24:09:83:fa:95:bf:f9:d4:5b:5b:78:22:b1:d9:
         0f:22:11:ef:81:34:38:fa:aa:ac:3c:d9:3d:05:9c:ba:0b:f1:
         42:35:10:94:cb:8b:39:6d:2b:7c:2a:6e:29:72:05:54:55:6d:
         07:eb:73:0c:19:bb:d0:7f:1d:da:29:18:3a:cc:6d:16:88:75:
         19:5c:f0:47:91:3f:8e:c4:4d:89:2a:7c:95:39:e4:58:e4:fd:
         7d:dd:9a:6b:46:bf:57:84:e1:2e:cb:f7:ef:f6:bb:16:ec:76:
         73:89:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:25:47 2025 by rpki-client