Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa
File:                     d898c3e6-e536-3098-b097-31f14862b8a8.roa (raw, json)
Hash identifier:          qXa1IfunIjjern11m43MmUiUBMKaYM776WxJHAdjYnY=
Subject key identifier:   84:BA:83:FF:49:AE:7B:9C:A1:3B:FB:FB:9A:6E:1D:74:4A:BA:E6:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36DC5BEE6E84ECE18B0100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        108.15.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:dc:5b:ee:6e:84:ec:e1:8b:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=8aa37ec4-b920-4be1-a34c-380ce79e04c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:df:c5:87:5b:76:85:9c:49:36:b2:8d:d9:
                    3b:14:30:8c:5b:af:8d:1f:45:4f:49:f7:4f:10:4c:
                    e7:c1:c7:41:b8:cc:3a:d5:01:a5:41:0e:5c:76:6f:
                    a7:f1:f2:e1:d4:c3:4f:34:b0:54:57:11:97:e6:0f:
                    1c:b1:16:d3:94:ae:8a:65:95:50:33:62:c3:73:2c:
                    f0:90:21:97:cc:02:eb:8d:40:11:c3:5a:14:0d:58:
                    8e:81:52:49:c2:78:b6:51:cb:75:1c:3c:3e:2a:ab:
                    98:8c:0e:7d:ea:07:31:6a:3f:72:e0:c3:e3:22:1f:
                    99:83:2f:a0:1e:ae:9e:32:19:63:6c:a3:b2:f5:af:
                    5c:22:be:3f:b4:ff:bd:85:eb:a7:d6:39:07:42:49:
                    f0:43:55:5e:ef:42:38:f2:c0:84:19:f0:3f:9e:b2:
                    47:cc:58:f5:19:70:90:a3:6c:6a:4f:fd:df:5d:51:
                    dc:2a:47:cd:c8:b3:9b:e2:27:21:da:8d:32:ae:40:
                    28:42:84:50:38:65:1f:68:71:8b:51:8d:a2:40:ca:
                    26:43:ef:d7:11:41:67:1a:5f:a3:c7:8a:ef:67:63:
                    78:ea:c5:3f:74:bb:fc:5e:75:b5:85:51:c2:04:12:
                    10:2a:70:6f:7c:81:13:1d:f0:8e:98:72:fe:d8:73:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BA:83:FF:49:AE:7B:9C:A1:3B:FB:FB:9A:6E:1D:74:4A:BA:E6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.15.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:c2:d3:de:4f:b2:b5:6c:e2:46:ef:6a:c6:e3:25:bd:b6:
         78:9f:97:13:e3:7c:b5:ff:c7:b3:12:9c:5e:7a:b2:54:60:2a:
         90:5c:71:22:ac:fb:59:46:dd:13:3d:cb:d9:1f:b5:3c:d0:96:
         bb:b6:7c:3d:79:d5:76:ec:22:22:7c:6f:ca:df:2a:53:7b:a0:
         0a:53:b9:5b:b7:66:da:14:e4:1f:ff:1c:17:e1:6b:1c:d7:25:
         d3:09:0b:9a:a4:6c:78:32:ac:51:04:d2:83:0a:25:09:04:d0:
         0d:19:af:37:4b:4d:da:2f:18:6f:e9:3f:62:2c:c5:a4:b6:dc:
         f6:9a:2b:31:1b:ba:2c:63:0b:b3:0e:65:98:bf:af:55:5b:fa:
         10:dd:52:28:25:4b:8c:aa:e0:7d:ca:17:2c:bd:c4:08:44:a9:
         34:1a:21:a7:7e:d4:b2:82:43:00:c6:94:e5:e2:fc:66:cb:99:
         be:10:7c:e1:ba:c6:8e:cc:d3:c6:bd:bf:d9:2b:37:d0:a8:d9:
         f4:15:2c:bf:8f:01:da:c3:2a:c4:75:77:3d:65:05:db:f8:19:
         36:da:72:44:c6:f2:cc:3c:a7:64:40:df:46:30:c6:52:35:f4:
         cf:8d:de:a0:72:ea:bf:06:5e:d4:43:1b:4c:4d:87:fe:73:ee:
         76:0f:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:37 2025 by rpki-client