Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08bdf665-870a-3121-bde0-dbf5ebe9896b.roa
File:                     08bdf665-870a-3121-bde0-dbf5ebe9896b.roa (raw, json)
Hash identifier:          2OatULQOh1W507spTRk8uKmeCh/sFieEbdR3GsVUMkQ=
Subject key identifier:   21:B5:40:92:9D:33:69:F9:E9:A4:26:4A:EC:04:29:B5:A4:AE:FB:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68861E8CB04E4241AB4580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08bdf665-870a-3121-bde0-dbf5ebe9896b.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        108.11.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:86:1e:8c:b0:4e:42:41:ab:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=0fd1676a-4fb6-4bda-aae8-30d22687e084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:70:bd:57:13:b6:b0:67:1f:60:20:24:6d:
                    e9:8c:bd:e9:90:21:f7:28:23:4a:a0:f0:96:69:40:
                    81:c3:d4:cf:b3:38:08:7a:09:ff:6f:f5:8e:cb:86:
                    b2:3b:3d:9b:af:41:62:81:7e:80:8a:50:a1:a0:4d:
                    87:85:22:64:b2:f2:19:28:98:ad:d9:93:68:c2:d2:
                    30:f7:e2:e1:82:93:34:23:15:09:56:f1:0c:d4:b8:
                    8a:96:b5:b1:51:af:b1:4d:fd:98:96:9d:f0:77:32:
                    f5:74:55:87:f4:67:8f:34:fd:16:c1:73:51:3a:30:
                    ec:6e:4b:e5:ab:ed:a0:0b:2e:87:0b:23:f2:cc:e5:
                    c0:70:07:47:0e:7d:a0:8f:50:a9:e7:ad:72:83:51:
                    4e:3a:9e:2e:d8:38:5e:84:e3:06:4a:f4:f6:c9:0d:
                    aa:7e:9a:63:f2:58:aa:cc:5f:c7:f8:84:ed:7b:74:
                    ab:84:eb:f1:a0:3f:44:6f:ee:15:df:c6:51:3e:cc:
                    11:88:33:48:1a:f8:14:76:13:97:a8:a9:47:99:65:
                    ed:53:e8:a0:32:b9:93:52:4f:69:25:e4:28:9a:4f:
                    85:64:6d:bd:58:e8:ac:7b:a3:8a:36:2f:01:c1:d5:
                    19:09:45:1d:ea:83:09:95:ae:e9:a3:ed:1b:bd:56:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B5:40:92:9D:33:69:F9:E9:A4:26:4A:EC:04:29:B5:A4:AE:FB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08bdf665-870a-3121-bde0-dbf5ebe9896b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.11.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:47:95:9d:6e:0d:82:0b:2b:d4:2e:18:8e:83:ac:83:d6:7b:
         38:7d:9e:20:34:bc:3d:4b:44:75:87:c6:13:9e:fb:86:b6:c9:
         63:50:dc:c6:2d:5c:68:ba:d0:f2:92:a3:2d:18:bc:72:6d:80:
         24:2f:cc:c8:4b:58:b8:1e:c7:8a:73:d3:01:90:d3:b8:bb:6b:
         bf:e7:c0:f3:be:2e:e5:47:89:9c:ab:f4:e3:f7:40:18:bb:cb:
         e5:f6:2b:26:ce:e2:95:92:8e:cb:57:a1:3e:94:f4:72:fc:38:
         25:dd:b6:50:37:98:ad:43:e8:43:a2:9a:c0:92:39:f3:65:0c:
         33:d5:77:a5:12:71:79:ef:a8:df:a4:46:69:57:8a:9c:f0:aa:
         ed:92:74:e1:f3:23:d6:bc:ac:d1:c7:b8:af:48:0b:dd:4c:b9:
         00:c1:72:71:84:e6:f3:6e:02:3e:86:30:d1:3f:b7:09:c2:8f:
         b3:5f:30:24:9d:28:fc:78:d0:95:d9:25:5c:40:49:36:4a:27:
         5f:b2:0a:34:4a:21:f8:f2:12:13:20:78:4c:52:3e:42:93:e3:
         35:07:8a:a0:b4:05:93:dd:80:ab:1f:30:15:31:69:fe:50:ca:
         67:fa:37:f9:49:88:db:66:a4:ca:d7:81:26:f1:03:c1:b7:f2:
         47:f8:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:52:10 2026 by rpki-client