Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/82929a32-9dfc-3178-af45-6711a15f933d.roa
File:                     82929a32-9dfc-3178-af45-6711a15f933d.roa (raw, json)
Hash identifier:          d4WatznOuFO7hR0C4JJa9t8+bzkvnZt5DTOmSof1Prs=
Subject key identifier:   18:EA:9B:13:E3:D6:FB:B6:8B:4D:6F:A4:B4:D4:40:EE:78:CE:2D:D5
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B78574AD5DB2A3B35530A1D20
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/82929a32-9dfc-3178-af45-6711a15f933d.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     20057
IP address blocks:        108.144.128.0/17 maxlen: 24
                          108.146.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:4a:d5:db:2a:3b:35:53:0a:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=269a5d78-3be4-4bff-ab58-435196e5a9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:13:54:0b:3e:5c:a7:ec:8c:c2:ab:3c:df:17:
                    85:6f:f8:88:51:66:f6:8b:d2:c7:14:c3:9d:a8:bb:
                    b2:d5:2e:ef:88:4d:05:ff:5f:59:d4:ba:8d:cd:b0:
                    0a:a2:c4:5c:22:43:e0:2b:b4:1a:7a:df:9b:d0:6a:
                    4a:54:3b:61:96:04:79:74:40:59:7e:40:8b:85:ed:
                    31:66:eb:4a:71:85:21:ba:c5:fe:32:47:19:3f:32:
                    d5:03:ce:60:5f:f0:8f:e9:c6:f0:6e:b3:e7:88:60:
                    94:27:d4:df:73:e0:9a:1a:da:7a:8f:24:76:88:1c:
                    8b:69:77:e9:47:f9:71:c4:02:1e:3f:36:2e:70:23:
                    36:72:ab:5c:bb:82:72:4d:44:7a:a8:6a:32:bf:17:
                    eb:b3:63:58:1b:30:31:2d:c5:1e:e8:7d:22:db:29:
                    dc:ca:53:dd:98:a6:09:01:37:71:45:82:08:4a:5f:
                    19:e7:01:9f:23:c4:9c:be:4c:b8:41:34:5b:c0:98:
                    74:70:b5:13:de:33:ed:b6:63:3b:c9:a4:16:ed:92:
                    cb:34:2f:c2:51:18:03:e9:bb:9d:8b:79:85:8c:07:
                    5b:7f:5b:a1:0d:8c:fd:54:dc:c3:ee:d6:fe:0f:4c:
                    60:8c:91:0b:37:80:d5:33:ab:d1:8f:b0:97:f3:e7:
                    82:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EA:9B:13:E3:D6:FB:B6:8B:4D:6F:A4:B4:D4:40:EE:78:CE:2D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/82929a32-9dfc-3178-af45-6711a15f933d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.144.128.0/17
                  108.146.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:14:94:1a:da:1a:bd:11:0c:2e:0d:5b:86:1d:66:23:0c:
         ef:bf:ed:e2:65:9d:e8:f9:d9:0b:46:a6:5a:2b:98:3c:3b:de:
         fc:9c:99:c1:ab:49:95:80:32:20:29:d1:11:8e:65:98:5b:37:
         89:f6:c2:8a:d5:94:ef:d9:b5:b4:68:b7:34:98:8e:04:4a:cc:
         5e:2b:4c:5b:31:af:fa:63:b1:9f:34:d2:e9:c9:96:77:b7:ea:
         e0:3a:a1:60:1e:07:bc:5e:e4:dc:c9:81:ae:ae:a8:fe:2f:4c:
         e4:73:9a:cc:8d:bf:2a:c0:13:6c:84:a2:f6:d9:6c:fd:18:67:
         f2:95:ca:48:88:2e:c4:7f:09:4e:4f:c6:e8:03:27:1f:d2:17:
         7c:1b:35:39:52:cb:59:11:13:2f:6b:09:8e:e5:13:27:db:30:
         09:ca:38:1a:88:c9:f9:35:40:03:c0:49:25:0d:7a:11:72:c4:
         37:d1:96:89:a1:12:11:c9:59:e4:c8:46:bd:e1:f5:aa:65:94:
         d8:6f:72:f2:8a:cc:c8:25:4f:cd:bb:75:81:e5:37:86:bf:52:
         6b:2c:d0:5d:00:f5:86:c6:36:22:cc:31:ae:d3:39:7e:1f:24:
         30:d5:23:00:9f:0c:ec:34:59:1d:3f:4a:f6:2f:c7:a6:58:3e:
         b1:68:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:15 2025 by rpki-client