Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0c5c561b-ff6a-34e3-ad50-51558fc05ca7.roa
File:                     0c5c561b-ff6a-34e3-ad50-51558fc05ca7.roa (raw, json)
Hash identifier:          lYCws6nex6MJp04AgCcXskkcOFGtwQ+nz7w6jWJ/it0=
Subject key identifier:   6F:FB:0D:7D:7E:BC:D3:DB:23:63:87:DB:A0:CC:A2:F0:4D:C8:2C:30
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A98156941E6B163798E647860
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0c5c561b-ff6a-34e3-ad50-51558fc05ca7.roa
Signing time:             Thu 17 Jul 2025 14:09:28 +0000
ROA not before:           Thu 17 Jul 2025 14:09:28 +0000
ROA not after:            Wed 15 Oct 2025 14:09:28 +0000
asID:                     7018
IP address blocks:        108.144.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:98:15:69:41:e6:b1:63:79:8e:64:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jul 17 14:09:28 2025 GMT
            Not After : Oct 15 14:09:28 2025 GMT
        Subject: CN=0b450478-0c32-4271-b39d-f4e901a86f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:75:27:86:53:21:44:4e:92:97:34:43:f7:
                    75:5f:33:51:86:13:bd:d6:bf:e3:39:ef:68:3d:7a:
                    9b:c8:9e:08:48:9c:69:27:4c:7f:99:9f:1a:37:32:
                    52:08:02:40:42:af:96:82:91:42:0f:cb:b2:14:c1:
                    63:94:7d:f1:bb:80:72:f6:cc:48:d9:47:b2:12:f4:
                    e1:af:7d:b6:04:7b:13:f1:82:90:40:42:c5:da:ec:
                    87:17:bb:df:5e:00:82:76:3f:67:87:71:5e:20:d6:
                    f5:b9:cb:80:7d:e0:e1:f8:8e:33:87:30:37:b3:54:
                    70:25:84:73:39:fe:66:05:57:94:e1:23:65:dc:c8:
                    bb:57:f4:de:c7:ba:49:64:e2:94:90:a7:77:fa:2a:
                    2a:02:d0:16:51:42:78:eb:8e:50:82:93:51:2e:f2:
                    47:0c:5e:9c:21:3a:74:dc:67:34:c1:56:9e:cc:1b:
                    6c:6b:b6:3f:1f:02:79:43:1b:fb:4d:16:44:80:28:
                    ec:b0:5c:b0:1c:99:71:e9:70:58:21:e9:38:ae:cd:
                    11:a0:e6:4c:a4:15:8f:2d:3b:a6:7c:b5:92:6d:f3:
                    46:24:d5:90:12:1b:44:b4:84:18:78:63:f2:e5:09:
                    0c:03:69:1e:00:19:b6:18:a0:3c:2f:f0:e8:2e:31:
                    d7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FB:0D:7D:7E:BC:D3:DB:23:63:87:DB:A0:CC:A2:F0:4D:C8:2C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0c5c561b-ff6a-34e3-ad50-51558fc05ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.144.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:b6:67:0f:cf:84:96:b8:b6:35:56:52:30:cb:d1:49:81:
         1a:33:6b:d4:62:68:77:f7:8b:d4:62:26:dc:80:86:59:df:45:
         b4:54:39:a1:02:4a:37:20:ee:81:b8:c4:25:fe:dd:ce:8b:62:
         fc:f4:d9:5e:e6:be:83:c9:87:5f:85:93:f3:a0:20:84:be:8c:
         2e:12:8d:0e:6a:fd:13:f2:b3:dc:6d:1d:fd:45:c4:97:5a:62:
         fb:5b:aa:cc:d6:c8:ac:67:f4:dd:b6:e2:24:4d:dc:da:68:8b:
         2e:c6:9f:02:25:8e:20:5e:6f:86:70:d8:76:af:ed:6c:5d:0d:
         16:c5:4e:14:75:06:21:9a:c2:b4:be:c7:51:43:21:e0:21:8a:
         d8:09:13:76:9c:8c:23:56:4e:cc:dc:41:64:90:93:11:96:fd:
         9b:ee:99:e4:75:79:47:6a:48:ac:28:18:44:f8:08:87:f4:12:
         f0:e3:2a:1b:fa:01:2c:f7:33:c6:2b:73:85:56:64:a5:87:48:
         de:1b:73:18:84:3e:d1:f7:a7:cb:d1:73:bd:7a:7c:4e:c3:5d:
         bd:4e:13:c6:ca:b6:79:43:60:aa:04:c4:07:10:5a:9d:82:b1:
         e1:95:2b:12:74:9c:7d:65:f7:84:6f:9e:c1:3b:81:8e:b6:f0:
         60:45:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:04:48 2025 by rpki-client