Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/553d4efa-d1a3-3876-9e8e-d1753e065091.roa
File:                     553d4efa-d1a3-3876-9e8e-d1753e065091.roa (raw, json)
Hash identifier:          IVk6kPhIyfrjzdw6mZN3uXmKXBaX6Ib8whvvQVesIHo=
Subject key identifier:   4C:EB:6D:93:A6:03:79:D7:98:0E:89:0F:EB:46:B4:58:DE:B7:21:6A
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A9818475486B62265EEE50700
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/553d4efa-d1a3-3876-9e8e-d1753e065091.roa
Signing time:             Mon 21 Jul 2025 17:12:33 +0000
ROA not before:           Mon 21 Jul 2025 17:12:33 +0000
ROA not after:            Sun 19 Oct 2025 17:12:33 +0000
asID:                     0
IP address blocks:        108.148.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:98:18:47:54:86:b6:22:65:ee:e5:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jul 21 17:12:33 2025 GMT
            Not After : Oct 19 17:12:33 2025 GMT
        Subject: CN=2ceac8d0-f3c3-44e4-8eb1-f6cd76574b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7b:a2:9b:ca:c2:0f:34:97:14:4d:1a:eb:ba:
                    67:67:28:34:ee:5f:35:67:1b:6e:87:51:3d:fe:6c:
                    cc:59:f7:2e:32:f0:55:e1:52:ac:78:12:f8:f0:dd:
                    47:aa:35:3e:f9:a1:4d:71:79:81:52:69:a8:fe:0c:
                    78:15:16:4d:48:fb:85:55:5b:9a:98:99:4a:60:56:
                    1b:6d:36:59:df:c3:23:b5:5a:a2:de:fc:c0:c4:26:
                    77:e8:4c:aa:a7:e7:39:b4:27:d0:6f:74:4a:99:43:
                    94:45:ec:72:16:cd:55:5f:1f:e9:99:b1:0a:d7:2a:
                    9d:75:7c:cc:e2:94:43:4f:7c:3b:32:f2:01:18:f4:
                    41:d7:52:32:70:67:72:c8:af:a8:33:37:18:f4:6b:
                    dc:33:8a:f4:b8:0d:fb:b4:26:22:80:cc:b9:e3:55:
                    04:16:17:f6:e6:3b:79:17:08:5a:5c:6d:c0:a1:b3:
                    60:df:35:0c:2d:3b:92:36:8b:2e:33:08:f7:b3:8a:
                    8d:d8:97:2b:38:52:b1:a1:aa:9f:db:af:92:90:e8:
                    b3:fb:7e:21:d1:ad:79:55:58:bb:6a:73:92:39:1f:
                    b1:a3:9b:30:64:87:ac:a2:d0:94:84:a9:53:9d:ef:
                    d8:b2:7a:d9:15:ba:15:21:23:ec:4e:92:06:dd:7f:
                    01:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EB:6D:93:A6:03:79:D7:98:0E:89:0F:EB:46:B4:58:DE:B7:21:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/553d4efa-d1a3-3876-9e8e-d1753e065091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.148.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:95:9b:db:33:79:30:26:9d:4e:84:bd:b4:21:7a:3d:c7:
         21:62:86:0e:99:8e:01:f8:1e:8b:84:2a:f8:71:d7:df:46:f7:
         4a:51:d0:df:af:bc:2c:b6:a2:1a:57:c4:f1:e3:65:6e:7d:da:
         71:5c:92:4a:60:9e:67:d5:cd:29:22:36:13:a5:2e:d7:50:8d:
         18:15:c4:67:fe:ce:0b:71:d5:d3:d9:fd:54:cb:66:d5:d7:f9:
         97:64:00:1f:4b:c7:b0:c1:bb:cd:90:78:49:e9:f7:14:00:2d:
         30:52:bf:2f:f1:37:72:e2:c5:8a:8f:75:ba:7b:4f:80:2f:94:
         dd:5a:ed:54:0b:64:3d:72:47:4e:d2:25:65:ed:af:e6:b0:dd:
         89:7e:a9:d4:92:de:1c:a9:5d:39:36:bb:cb:60:5f:ff:bb:9c:
         fa:a4:7b:fe:ed:b4:e7:7d:37:e5:f7:12:a0:67:2d:1c:7a:cd:
         85:9a:00:0b:f3:e3:d2:a1:3b:7a:3c:15:a7:f8:ad:c5:1f:32:
         b1:5e:fe:c1:0b:20:e3:f9:4e:8d:10:eb:85:2e:2b:80:e5:05:
         ae:88:f9:91:33:48:31:cd:66:2c:71:0c:e1:65:a6:14:56:27:
         46:d5:06:ac:a9:bb:46:03:ac:40:e6:33:a3:cf:d3:23:08:7e:
         7d:b5:1b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:17:19 2025 by rpki-client