Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/8358f286-491a-379e-92f5-a70e719eff4c.roa
File:                     8358f286-491a-379e-92f5-a70e719eff4c.roa (raw, json)
Hash identifier:          cooybRk9YLVsCuE1dsy8rq9OAROYiQ1YFtxNFhs+dz8=
Subject key identifier:   D6:D8:0F:94:EC:EC:1F:84:16:75:D9:92:44:A4:54:73:D8:DA:A8:9B
Certificate issuer:       /CN=0153231e-bade-4c05-b3fd-55b65671daae
Certificate serial:       010D0C9F4328584B609CB6D1FCD799F1CC7C6D60
Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/8358f286-491a-379e-92f5-a70e719eff4c.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     395153
IP address blocks:        107.182.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b6:d1:fc:d7:99:f1:cc:7c:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=86a84fa0-1c65-4cdf-8076-b528732d8491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:22:51:91:48:71:0e:42:63:9d:ea:b4:84:31:
                    76:cb:4a:9e:1e:5d:47:c1:72:69:12:3c:c7:4c:80:
                    32:3c:00:91:b6:85:ab:6e:50:82:af:05:86:5f:4c:
                    1a:08:45:96:47:aa:6b:35:21:74:71:44:22:8e:de:
                    c6:85:31:a0:c2:cf:0e:3a:ab:d8:06:ab:bd:fa:b4:
                    7d:30:08:2e:60:01:8c:2e:4a:0f:ba:d2:6c:e2:9f:
                    c8:7e:46:85:ac:e9:52:1e:72:1f:62:46:e9:6e:b7:
                    ef:26:e4:2a:12:63:85:34:ce:8b:01:d6:1c:68:b7:
                    d8:f1:61:13:be:83:dc:87:32:07:03:7b:ca:89:b7:
                    77:34:4f:b1:c0:b0:de:e5:cd:5e:9d:fd:24:4e:7f:
                    59:af:43:38:1c:3b:f3:28:d5:d4:c2:cc:1b:54:1e:
                    28:e9:6e:f9:e3:4d:a6:88:e8:c3:08:4c:e3:4c:b4:
                    1e:1b:12:58:26:1e:56:ab:23:43:4e:cb:bc:27:00:
                    3d:9d:fc:78:9c:ba:97:a2:4c:30:e8:8e:19:2b:5f:
                    f5:32:9d:be:ac:c8:5f:e2:9a:54:da:d9:6e:c7:3f:
                    41:65:89:00:fc:95:66:9c:8c:eb:b1:74:b4:c1:a5:
                    ac:29:52:0d:19:7e:42:79:3d:67:ac:70:37:25:89:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:0F:94:EC:EC:1F:84:16:75:D9:92:44:A4:54:73:D8:DA:A8:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/8358f286-491a-379e-92f5-a70e719eff4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:69:a0:17:00:03:0f:1d:01:09:43:b5:05:2e:ff:a4:6b:
         95:f3:68:3e:ab:7c:f2:95:55:52:12:70:ba:a0:1c:de:b7:6d:
         5b:e3:a2:60:b0:14:c3:e3:0a:a9:73:71:78:59:d1:20:1e:11:
         c9:60:9d:68:ff:dd:4c:00:40:23:0a:a2:be:b4:78:fd:71:a4:
         8b:8a:88:e5:b8:3b:ad:22:61:9d:bb:48:5f:9a:fe:a0:75:52:
         ad:db:57:b7:22:0b:1b:64:8d:eb:5f:24:fd:59:f9:fa:a7:52:
         de:fa:c2:e0:e3:b7:84:dc:61:cf:e8:a0:fe:20:a1:e2:42:b8:
         14:c4:67:80:e1:a0:68:1e:13:7e:89:fc:b2:f4:41:8e:6a:8a:
         5e:45:1b:bb:db:8b:62:43:70:81:64:49:97:2f:a3:f3:29:a6:
         92:cb:ed:f0:ce:10:5e:f5:f1:72:71:63:ea:44:27:53:a6:5d:
         3f:fc:ff:de:72:b4:df:2f:c4:63:e7:1e:e6:ee:fc:57:52:53:
         9f:37:f8:0b:8d:1b:d1:a3:2b:73:6c:82:ae:f1:bf:3a:e4:1e:
         dd:58:b1:84:aa:45:86:7c:bd:97:97:49:cf:05:c7:53:60:f8:
         20:1f:ca:a2:a4:1d:c3:5c:5f:36:88:16:10:07:3d:45:a4:02:
         17:4f:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:07:45 2025 by rpki-client