Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc314128-1f24-318c-814b-6b8135679d79.roa
File:                     bc314128-1f24-318c-814b-6b8135679d79.roa (raw, json)
Hash identifier:          qNeCXPJYGJr1s+I0ReWa+k5AVfDNXMzSE7PPInEUrO8=
Subject key identifier:   A9:3B:86:F2:51:E3:11:8B:93:15:1B:03:F8:C0:5F:C2:EB:6D:67:D8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B72C1F1786F920FD995011A4F
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc314128-1f24-318c-814b-6b8135679d79.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     396982
IP address blocks:        104.154.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f1:78:6f:92:0f:d9:95:01:1a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=7a968619-a65d-4cdc-9da7-d1762eff407a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:56:d6:23:ff:7a:a9:f3:8d:cd:bb:16:f5:
                    e7:21:b2:4d:12:0d:61:9f:d0:81:8b:9b:c7:73:36:
                    b5:9a:62:32:54:cc:90:c0:3c:7b:b4:26:12:50:0a:
                    cc:aa:54:49:0b:43:a4:b5:23:45:c6:73:dd:40:6f:
                    19:b0:36:21:4c:4b:bd:c2:6b:1b:46:29:08:f7:4d:
                    5d:9f:15:40:ad:9e:53:4b:19:32:5b:82:e3:c9:f8:
                    24:06:50:d4:74:5c:8c:6c:fb:7e:d8:73:99:8c:f0:
                    de:b2:04:d6:28:96:ed:8d:24:83:84:b7:49:ba:6b:
                    0b:d5:5a:85:25:24:cc:eb:e6:d1:3f:51:01:d8:88:
                    cc:4c:42:49:78:81:88:b1:69:5b:56:3a:da:a1:33:
                    b4:b9:75:6e:e3:01:6e:f7:f0:eb:68:3e:21:34:b3:
                    85:f9:b7:22:cb:42:48:d0:9b:81:4a:99:d2:19:66:
                    13:b6:2d:49:9c:bc:3f:18:f2:4b:be:db:a5:18:a5:
                    43:fc:9a:74:a9:14:a5:a0:ee:12:08:7a:95:56:c4:
                    3a:dd:06:29:f0:92:a4:d2:98:d4:aa:d8:f7:bb:5d:
                    82:f5:d0:43:d9:c1:52:72:93:38:e7:51:17:e0:2e:
                    92:84:bb:85:7b:d9:db:80:43:34:32:0b:de:3f:2b:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3B:86:F2:51:E3:11:8B:93:15:1B:03:F8:C0:5F:C2:EB:6D:67:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc314128-1f24-318c-814b-6b8135679d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:99:8a:5d:67:71:6b:80:f8:27:cd:1a:a3:e5:a9:f4:0a:7e:
         cc:ce:9b:ed:3f:24:36:cc:6a:19:3d:62:e6:b6:38:7b:71:f1:
         7c:45:01:f6:6f:ee:87:ff:e3:37:7d:c9:8c:8f:ec:13:4a:71:
         1b:15:6b:79:70:25:f5:50:5f:1c:7e:2f:77:fc:71:a4:92:46:
         2b:f8:2d:10:a1:4a:48:9e:b9:71:28:cb:9e:92:2a:08:99:e8:
         90:dd:2b:6f:47:ea:5b:7a:33:39:6c:0e:22:f6:32:f5:f2:67:
         bb:a3:04:e5:e1:7f:86:35:98:4a:71:4c:24:02:59:e0:20:05:
         e0:94:0d:a3:50:fb:1a:e0:fa:f9:80:81:7e:6a:94:84:87:05:
         c0:06:c6:00:df:4c:62:f4:89:55:9c:fd:87:31:e6:86:42:68:
         c9:e2:b2:56:62:e4:21:53:6a:36:ae:08:e8:ea:ea:86:83:30:
         36:96:2e:3b:41:c4:16:79:ee:4c:4d:9f:9e:87:f4:f0:f5:c9:
         d5:dc:61:c9:15:15:54:d1:ae:88:d2:49:28:cc:80:61:c1:c2:
         84:19:4e:21:2d:5e:16:63:5c:c2:d1:50:e9:0f:05:14:1b:cc:
         f7:94:14:08:32:73:bf:a3:81:83:17:ca:ab:f9:94:8d:18:40:
         8a:2f:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:31:18 2025 by rpki-client