Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/553d4efa-d1a3-3876-9e8e-d1753e065091.roa
File:                     553d4efa-d1a3-3876-9e8e-d1753e065091.roa (raw, json)
Hash identifier:          iPXuwsrQveqrUarzhwR3u7wv0LAsHBhYhkl/O9lkLUg=
Subject key identifier:   23:E1:39:EF:EF:4B:2E:81:1A:75:98:B3:5D:9D:A0:DB:59:6D:1B:48
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584D386A2A4EA869E7A4C2AC7780
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/553d4efa-d1a3-3876-9e8e-d1753e065091.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     0
IP address blocks:        108.148.0.0/14 maxlen: 14
                          108.153.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:2a:4e:a8:69:e7:a4:c2:ac:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=d514a4a7-9bed-4138-a3a4-da2ab2952b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:41:03:6d:65:27:e6:d2:67:d3:b8:e5:bf:15:
                    44:a1:99:91:c8:c1:dc:84:84:9f:c6:1b:df:d8:89:
                    06:ea:bf:a2:6a:0a:5e:c8:91:2f:0f:05:4d:b6:d4:
                    9e:11:8f:a7:bf:ec:1a:56:43:8f:84:35:1e:eb:52:
                    2d:7c:79:9f:54:d1:bc:42:bd:2d:68:d7:92:31:7e:
                    37:e4:3e:f0:fc:60:3f:af:e1:e5:8a:99:5d:82:72:
                    96:d7:01:6d:70:6e:68:a8:8f:ea:bd:8a:77:90:f7:
                    47:c8:69:3e:2b:0a:88:50:6d:85:aa:8a:cd:21:00:
                    f4:ea:8b:19:fe:83:d0:a7:93:22:e0:1d:4c:4b:79:
                    52:c7:ae:e1:b2:59:44:cf:db:98:88:f5:a1:6e:ae:
                    2c:3a:9a:3a:6d:17:aa:0f:ee:be:f0:ee:4a:b0:62:
                    5a:79:0d:4c:90:9c:b6:6d:01:01:7b:71:03:de:d9:
                    7a:6d:ad:08:3c:db:02:56:a9:25:97:4b:bb:21:84:
                    38:23:ed:0b:78:c6:fa:8f:fb:ab:a2:aa:ac:5f:7d:
                    0b:72:14:72:45:1f:26:76:2c:04:c8:12:28:df:41:
                    1d:07:44:49:01:a7:c7:22:d5:07:e7:4f:5e:72:c2:
                    95:df:d7:d5:9f:69:bf:3f:51:0e:b1:c3:a7:d6:e2:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E1:39:EF:EF:4B:2E:81:1A:75:98:B3:5D:9D:A0:DB:59:6D:1B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/553d4efa-d1a3-3876-9e8e-d1753e065091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.148.0.0/14
                  108.153.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7d:26:48:99:4b:bc:ed:5f:75:d8:17:01:d9:d9:1a:08:ec:
         01:a7:f0:fb:b8:48:df:fe:bc:e5:e2:ae:c9:24:f9:db:54:85:
         9b:5e:c4:af:a9:a1:05:21:51:6f:37:3a:0f:3f:00:f6:3c:38:
         94:12:50:53:e1:4c:28:17:37:0c:ea:ad:89:d8:cf:52:f4:7e:
         d1:37:08:bb:db:62:65:97:b4:99:f8:d8:11:a0:a5:4a:51:40:
         16:79:e3:8a:67:f7:3b:cc:36:d5:24:28:be:db:b4:e5:f7:59:
         c5:6d:76:63:fe:63:67:5b:e2:bd:cf:af:b7:f1:e6:26:28:4f:
         92:5c:c5:d8:73:b9:b5:f7:af:16:e2:61:22:94:07:24:f1:f2:
         13:38:40:39:48:35:58:a8:28:80:e8:be:f0:1f:31:94:d4:27:
         10:1c:87:42:74:df:2c:91:33:6a:fd:d1:ac:ec:36:3d:c1:5c:
         15:b1:46:7f:7e:93:b8:41:51:ca:af:4e:3e:df:7f:24:c0:12:
         58:eb:31:d5:44:48:d2:e8:13:23:e0:23:2b:c9:52:36:a1:dc:
         7e:9e:18:10:6f:3b:b3:30:70:fe:49:71:79:5c:e1:89:e9:82:
         90:86:0e:e3:0a:b1:82:4f:67:91:f1:99:39:35:5b:cd:cf:18:
         a9:b2:69:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:18 2026 by rpki-client