Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/c14b27fa-4c85-3f1c-9f9c-fd3d94cf0337.roa
File:                     c14b27fa-4c85-3f1c-9f9c-fd3d94cf0337.roa (raw, json)
Hash identifier:          EEuPQOkWM2/zYwiu81wtryP3nBhbM2dF2Ri0cAGuHS0=
Subject key identifier:   2F:C5:E2:EC:85:C6:1B:99:38:32:B0:EE:C9:2C:15:23:8F:23:85:6F
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B7DECCB895B863873821B5800
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/c14b27fa-4c85-3f1c-9f9c-fd3d94cf0337.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     0
IP address blocks:        108.152.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:cb:89:5b:86:38:73:82:1b:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=224458db-1fda-42e2-8e6e-a7f577d5b551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6c:d5:a5:2a:bd:4b:a7:b4:ea:44:a3:01:16:
                    6b:58:68:14:f2:99:14:47:d4:1a:98:f6:c0:4b:fd:
                    af:d6:b4:e9:4d:75:3c:4f:05:fa:b0:10:4f:17:49:
                    6b:b2:23:03:77:fd:8a:ff:b3:7e:23:78:db:39:bc:
                    c2:b9:dc:bd:73:18:24:22:68:a7:24:09:85:06:3b:
                    29:3d:f2:0f:e6:79:c5:b5:97:20:f5:16:a9:e9:3a:
                    5c:4d:f2:5b:13:50:4d:58:7a:ce:53:17:22:bc:f5:
                    d5:d9:29:b8:8c:22:ca:3d:d8:67:b5:3f:db:70:bc:
                    c3:3c:ac:61:3f:f2:55:52:79:a5:a5:78:1d:67:f9:
                    27:ce:b1:48:22:ea:1a:bc:14:c7:aa:8d:9b:15:86:
                    e8:27:98:30:fe:94:d3:ab:e7:79:83:ed:43:cb:e1:
                    ef:21:9f:1b:6c:8c:6a:2b:bf:9c:39:34:cf:c5:29:
                    89:39:cd:b3:c7:94:64:6c:d9:a2:ba:a7:42:78:eb:
                    2a:ab:f9:51:cf:62:d3:51:ee:10:be:ec:be:6d:3f:
                    a8:23:85:b1:ef:ea:b3:0c:2a:97:8f:61:b9:ae:ec:
                    eb:50:19:bd:70:80:3c:6e:93:b7:0f:a2:72:30:a8:
                    8c:e4:54:68:c4:50:55:47:df:41:9c:ef:f0:c1:85:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C5:E2:EC:85:C6:1B:99:38:32:B0:EE:C9:2C:15:23:8F:23:85:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/c14b27fa-4c85-3f1c-9f9c-fd3d94cf0337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.152.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:b6:65:05:87:03:17:66:3d:8f:e4:f4:ec:f8:1b:14:5d:
         9f:56:c4:df:3c:c8:39:79:45:9b:65:bf:b3:26:b8:23:ed:86:
         0c:5d:fa:bd:2e:92:3b:db:d7:d8:7e:08:7a:dc:7c:b2:62:b0:
         8e:47:03:97:4a:6a:0d:2a:b0:81:97:1c:84:35:3c:5f:f6:62:
         9b:78:27:fc:c8:89:d8:d7:0c:00:06:6c:99:20:91:3c:1d:f9:
         2f:37:1b:48:1e:c4:d3:87:24:88:e1:4f:42:68:40:0e:a4:31:
         58:bc:c8:04:81:38:1c:d6:27:4d:60:5b:04:5e:67:7f:b3:05:
         a5:ec:40:4b:5a:c2:00:5e:8a:ec:9a:7f:42:49:85:1e:00:6b:
         24:24:81:66:5d:89:2d:d5:43:86:f6:be:ba:8f:6c:6a:68:fa:
         0a:20:37:48:3e:6c:24:b7:12:0d:d0:3c:9c:77:39:78:6a:24:
         66:5a:9e:9f:28:4b:e8:49:3b:d1:d5:c8:50:21:34:8b:c9:e6:
         f5:30:7f:5d:b4:31:f6:22:4e:7e:aa:2f:e6:d5:f4:76:33:7f:
         79:82:3d:89:10:57:dd:d3:f9:2d:2f:4a:b2:10:9d:42:ec:1c:
         91:f8:aa:74:b3:f5:9e:35:a1:bd:bf:27:8d:8d:34:36:b9:c5:
         e5:53:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:48:47 2025 by rpki-client