Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/2f777ec5-4c27-3fdd-b0b1-9f051384c987.roa
File:                     2f777ec5-4c27-3fdd-b0b1-9f051384c987.roa (raw, json)
Hash identifier:          w4nb1meFsQJsadv3HzYL4rg1XZaxBMw7AlSxR+FJk9s=
Subject key identifier:   72:7C:CD:92:31:68:B6:49:9B:A1:60:B5:E6:6F:A7:F9:58:62:DE:B2
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B78574AC2E98533B562A65E00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/2f777ec5-4c27-3fdd-b0b1-9f051384c987.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     7287
IP address blocks:        108.144.64.0/24 maxlen: 24
                          108.144.65.0/24 maxlen: 24
                          108.144.66.0/24 maxlen: 24
                          108.144.67.0/24 maxlen: 24
                          108.144.68.0/24 maxlen: 24
                          108.144.69.0/24 maxlen: 24
                          108.144.70.0/24 maxlen: 24
                          108.144.71.0/24 maxlen: 24
                          108.144.81.0/24 maxlen: 24
                          108.144.82.0/24 maxlen: 24
                          108.144.84.0/24 maxlen: 24
                          108.144.85.0/24 maxlen: 24
                          108.144.86.0/24 maxlen: 24
                          108.144.88.0/24 maxlen: 24
                          108.144.89.0/24 maxlen: 24
                          108.144.90.0/24 maxlen: 24
                          108.144.91.0/24 maxlen: 24
                          108.144.92.0/24 maxlen: 24
                          108.144.93.0/24 maxlen: 24
                          108.144.94.0/23 maxlen: 23
                          108.144.96.0/24 maxlen: 24
                          108.144.97.0/24 maxlen: 24
                          108.144.98.0/24 maxlen: 24
                          108.144.106.0/24 maxlen: 24
                          108.144.107.0/24 maxlen: 24
                          108.144.118.0/23 maxlen: 23
                          108.144.120.0/23 maxlen: 23
                          108.144.124.0/23 maxlen: 23
                          108.144.126.0/24 maxlen: 24
                          108.144.127.0/24 maxlen: 24
                          108.145.0.0/21 maxlen: 21
                          108.145.0.0/24 maxlen: 24
                          108.145.1.0/24 maxlen: 24
                          108.145.2.0/24 maxlen: 24
                          108.145.4.0/24 maxlen: 24
                          108.145.5.0/24 maxlen: 24
                          108.145.6.0/24 maxlen: 24
                          108.145.7.0/24 maxlen: 24
                          108.145.8.0/22 maxlen: 22
                          108.145.10.0/24 maxlen: 24
                          108.145.11.0/24 maxlen: 24
                          108.145.15.0/24 maxlen: 24
                          108.145.24.0/21 maxlen: 21
                          108.145.30.0/24 maxlen: 24
                          108.145.31.0/24 maxlen: 24
                          108.145.32.0/20 maxlen: 20
                          108.145.34.0/23 maxlen: 23
                          108.145.36.0/23 maxlen: 23
                          108.145.38.0/23 maxlen: 23
                          108.145.40.0/23 maxlen: 23
                          108.145.45.0/24 maxlen: 24
                          108.145.46.0/24 maxlen: 24
                          108.145.96.0/19 maxlen: 19
                          108.145.116.0/24 maxlen: 24
                          108.145.127.0/24 maxlen: 24
                          108.145.208.0/24 maxlen: 24
                          108.145.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:4a:c2:e9:85:33:b5:62:a6:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=24d3861d-ab78-486a-a659-6e73e9afde1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:b1:38:72:e0:1b:39:22:1e:41:4a:53:65:
                    d7:b9:ea:4d:d4:b8:02:46:8a:e0:99:e1:bc:ed:43:
                    d6:a2:3a:fb:00:3d:03:e7:03:16:a6:81:c2:e8:6c:
                    aa:40:d3:9a:ba:d0:c4:46:f1:8a:15:ff:3a:ab:c8:
                    11:1d:df:3c:4d:ff:1a:e3:fc:53:94:02:05:46:e2:
                    1f:c5:b2:32:73:43:48:c5:d1:df:02:e0:27:a1:09:
                    b5:4b:c8:a7:53:fc:0e:3e:f5:f2:d8:53:29:a6:90:
                    50:fc:54:e0:79:ba:fd:41:35:73:5f:9c:ab:d0:5e:
                    59:f8:8f:a6:78:1e:50:e6:65:0f:59:df:db:3f:b8:
                    bc:c9:31:9f:25:f5:5a:c2:8f:3a:a4:86:30:ee:95:
                    e3:ac:6f:a2:11:80:c7:ff:e7:12:b4:e0:e1:e5:3f:
                    6a:e3:92:7d:73:88:4b:a3:a3:0f:91:58:2e:ef:6f:
                    e9:eb:0a:a7:c1:1d:c4:64:16:cc:14:a1:6d:c2:1d:
                    dc:d7:49:67:84:89:1c:ff:93:fc:00:12:1b:47:80:
                    51:57:53:0e:2b:c7:28:4f:24:e5:af:35:10:eb:9d:
                    db:f1:57:28:b8:d4:c8:ee:ad:50:62:5b:be:57:1d:
                    88:d1:99:fb:57:64:84:36:1c:60:fe:fe:93:2a:9f:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7C:CD:92:31:68:B6:49:9B:A1:60:B5:E6:6F:A7:F9:58:62:DE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/2f777ec5-4c27-3fdd-b0b1-9f051384c987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.144.64.0/21
                  108.144.81.0-108.144.82.255
                  108.144.84.0-108.144.86.255
                  108.144.88.0-108.144.98.255
                  108.144.106.0/23
                  108.144.118.0-108.144.121.255
                  108.144.124.0/22
                  108.145.0.0-108.145.11.255
                  108.145.15.0/24
                  108.145.24.0-108.145.47.255
                  108.145.96.0/19
                  108.145.208.0/24
                  108.145.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:25:05:d1:cc:10:f4:57:d1:be:74:8b:4a:69:16:4b:9d:
         7d:6d:ec:35:88:c4:7c:cb:e8:d8:d8:7d:eb:d9:04:d5:59:94:
         27:28:f2:98:81:cd:e1:a3:9a:99:bf:68:e6:ee:6c:07:21:ab:
         9d:1b:90:10:f4:d0:98:2c:1c:81:80:fe:f4:c7:c8:25:cb:58:
         2b:ce:c2:c3:27:4e:d1:b4:14:cf:e0:0b:d9:c5:fe:08:ea:81:
         07:b9:ef:b6:70:e1:20:75:eb:e3:af:b4:5a:5b:24:27:c9:e6:
         85:8d:ac:6e:ed:86:80:69:1c:71:ea:e6:a5:55:c0:4e:cf:0c:
         77:23:f6:dc:c0:1d:46:f7:02:b6:09:01:f0:a6:06:70:de:a0:
         23:62:3d:7f:6e:d4:c3:88:af:9e:4d:f5:14:eb:7c:a0:ed:f2:
         10:40:a0:eb:5a:cb:f9:53:90:b1:11:c3:a5:15:e5:bf:0a:cb:
         36:fb:38:19:ac:24:9d:a9:c8:4b:f5:80:bf:aa:a7:c9:50:cf:
         c9:f6:6b:b8:19:ba:79:5d:d8:b7:54:12:8b:2a:46:4d:df:a5:
         2d:d6:56:e7:bb:4f:b6:2e:61:f9:53:46:06:6c:22:a6:ac:ef:
         08:73:af:bf:14:21:b7:29:f6:68:81:ca:e9:00:a0:8f:ef:09:
         ef:69:b0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:14 2025 by rpki-client