Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbac822a-952d-3a3e-9706-340843fcb234.roa
File:                     cbac822a-952d-3a3e-9706-340843fcb234.roa (raw, json)
Hash identifier:          gjB+WgAEGfnGLGAcmLzqSej8tEVsVbOOoP5Rqk1pV3Q=
Subject key identifier:   2B:FD:A7:23:A5:B3:13:C0:11:4F:BA:DF:14:B9:36:84:FC:77:68:AC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B5E27FDCE594B4B00D290A4C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbac822a-952d-3a3e-9706-340843fcb234.roa
Signing time:             Tue 30 Sep 2025 15:54:16 +0000
ROA not before:           Tue 30 Sep 2025 15:54:16 +0000
ROA not after:            Mon 29 Dec 2025 16:54:16 +0000
asID:                     0
IP address blocks:        108.178.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:27:fd:ce:59:4b:4b:00:d2:90:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 30 15:54:16 2025 GMT
            Not After : Dec 29 16:54:16 2025 GMT
        Subject: CN=7f378fc1-3a2a-49f7-91d8-a99ced7bd438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:4c:af:97:60:20:2c:a1:76:d7:b1:c8:22:
                    ea:f0:dd:43:e1:8b:8b:af:37:47:80:11:17:4b:ff:
                    1f:db:34:cb:ad:d3:f6:19:94:84:2c:0f:48:d9:55:
                    c6:a5:20:e9:f9:b6:b2:f4:e5:7f:37:81:c6:2f:65:
                    09:a9:97:de:c0:c2:43:be:92:f8:64:7f:da:5d:61:
                    dc:6d:4c:95:92:c7:f5:a6:f5:1d:85:34:63:2a:88:
                    b9:3d:86:40:21:10:b2:ae:e5:12:af:4a:8f:5e:bb:
                    fd:57:ed:19:b9:9b:04:e9:c4:99:03:90:88:15:28:
                    c5:ab:f5:03:68:b2:06:53:83:ea:be:a6:92:a0:af:
                    c0:7e:4f:8e:b8:00:2c:db:fa:9a:d7:ef:2a:ac:d2:
                    c8:88:d7:dc:78:ea:dd:88:ea:89:c2:b4:02:51:3f:
                    db:66:30:14:a6:83:67:65:08:29:2d:43:d1:08:26:
                    b4:99:87:8f:66:de:fb:38:20:db:1e:30:52:ec:72:
                    c0:08:f4:02:4d:63:53:70:3b:6e:32:4d:b1:58:62:
                    d3:2d:46:dd:af:fc:4c:92:46:63:64:0e:69:a2:e8:
                    ed:ea:87:02:8d:27:92:27:68:57:93:40:a0:6a:f6:
                    25:2c:3e:bc:31:de:9a:3b:45:1c:a5:1e:8a:21:65:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FD:A7:23:A5:B3:13:C0:11:4F:BA:DF:14:B9:36:84:FC:77:68:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbac822a-952d-3a3e-9706-340843fcb234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:82:5c:d4:96:d7:28:12:32:83:86:70:b5:72:f1:a1:02:a3:
         87:17:50:ed:e3:ea:83:50:32:7b:66:2e:c5:c6:3b:80:87:6b:
         18:52:3c:b4:ce:27:2d:4f:cc:43:fc:f9:b7:f7:cc:b3:46:b4:
         3d:e4:09:47:dc:0e:3f:10:24:d3:b7:fd:4b:2f:37:ed:c0:2b:
         68:9b:40:ef:aa:f3:7c:97:3d:53:74:99:a4:6d:fa:32:1c:c8:
         99:64:25:83:d4:6a:92:a6:9a:f4:db:b7:75:59:c2:dc:6d:1b:
         0d:ee:54:0e:0c:b2:0a:9a:e3:99:d8:4d:2b:2b:91:27:4d:8f:
         5a:b3:73:72:6e:53:65:cb:a7:7f:60:2e:e7:a5:dd:a4:6d:36:
         26:53:7e:11:b0:d4:1c:dc:d1:fb:9c:cd:f0:b1:b5:a9:51:f8:
         83:c8:e2:19:9e:99:9c:46:34:d1:af:b3:1c:e2:6b:a5:5a:23:
         0f:60:b2:d1:7d:1b:22:d3:07:67:d0:c7:63:fe:1a:1f:4f:06:
         13:12:55:bc:92:d1:a9:bd:8f:92:d5:65:a8:a7:92:ab:7d:ff:
         c6:67:fe:d0:f2:33:fe:63:67:95:4c:18:ba:fb:6c:78:7b:ee:
         7b:a2:4b:11:7d:ff:f6:42:26:5c:ba:ea:05:67:7b:1a:30:01:
         b8:f9:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:45 2025 by rpki-client