Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d371579-c0be-34e9-88d4-ca6f993380cf.roa
File:                     0d371579-c0be-34e9-88d4-ca6f993380cf.roa (raw, json)
Hash identifier:          OBpty/1vXtZ+YUHY2fPIAdAMx19RdMSB2/dH5QGyjag=
Subject key identifier:   34:6C:99:89:28:C8:7F:BB:29:44:3B:18:0A:D7:CD:77:7F:28:F7:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A6870BD76B351645A1729D8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d371579-c0be-34e9-88d4-ca6f993380cf.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        108.25.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:70:bd:76:b3:51:64:5a:17:29:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=019faa23-e49c-499a-9fc9-0d5b1f074a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:d3:49:97:c3:ea:64:0a:81:f2:a5:d3:81:
                    7a:1e:df:cd:e8:fa:79:4e:9a:f3:d6:a5:14:cc:5b:
                    c9:bc:24:a6:6a:c6:15:f4:ff:6b:27:b6:fb:af:74:
                    b1:cc:82:79:05:fc:1c:ef:72:68:7c:47:1c:97:7a:
                    a5:65:ee:51:f2:bb:b1:64:cd:a1:03:c4:32:f6:d9:
                    5b:14:62:27:31:8e:35:a0:d8:8a:04:dd:4a:5b:ca:
                    b3:92:0d:28:40:b4:b7:6e:0b:74:46:d1:7f:38:be:
                    4b:52:a0:f4:71:9f:8b:92:b2:a0:aa:37:df:26:96:
                    0c:d7:64:55:a7:f5:eb:56:a8:0a:5e:aa:c8:90:a9:
                    5d:e8:5b:20:1d:39:9b:f7:4d:7c:f7:30:0e:a2:27:
                    e5:64:e1:f2:51:5a:b1:98:30:aa:9c:9e:28:f2:00:
                    56:41:67:c8:f4:26:d3:4b:10:20:bf:e2:b8:58:9b:
                    09:2c:32:20:02:b6:9e:0f:97:b9:12:de:d2:21:19:
                    04:fb:fc:16:83:61:5e:2c:40:b7:eb:77:0a:65:76:
                    dd:15:61:f8:a7:0e:77:ad:2f:8a:52:58:41:f5:7e:
                    18:54:87:09:2a:ed:c7:1a:1c:c6:9f:d9:1c:45:aa:
                    39:26:8e:46:1a:8d:a9:d7:4a:8c:34:e8:6c:bc:f5:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6C:99:89:28:C8:7F:BB:29:44:3B:18:0A:D7:CD:77:7F:28:F7:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d371579-c0be-34e9-88d4-ca6f993380cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.25.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:ea:30:ba:9f:f9:8e:3f:29:63:3a:43:fa:e9:43:30:dd:
         6f:da:06:d1:c0:ca:6a:f4:05:48:e3:8c:a0:67:5d:e5:e4:34:
         b0:60:b1:e8:f8:18:f5:43:65:35:13:26:3d:d5:96:b4:5b:0d:
         93:20:6d:54:60:23:12:c9:1f:2c:b9:10:2d:a1:6c:f4:e3:34:
         d3:a6:48:7c:03:06:d2:6a:f4:e3:d7:e5:16:90:5e:31:b6:bc:
         d1:f0:95:74:f9:44:90:96:a9:78:2e:a8:a7:38:ed:ff:a6:51:
         a6:35:83:d7:e5:28:a1:b8:5b:33:cc:d4:8b:2e:be:e6:81:ed:
         c8:c1:e3:e6:8f:4b:76:94:c1:fe:9e:2a:c5:36:37:ad:88:45:
         86:f4:59:14:1d:f5:a8:92:85:ef:4d:14:07:b5:70:01:e9:8b:
         d2:8b:43:02:1a:82:0e:b8:fc:23:bf:d9:7d:3f:18:0d:ec:9a:
         68:49:9d:2f:1c:cd:be:4e:8b:19:f3:7d:e7:78:4b:7a:8d:e1:
         fa:a6:aa:73:3c:78:87:b7:68:d4:39:60:0e:8c:a6:36:27:26:
         47:d1:1b:87:43:55:3f:28:0a:bd:af:30:b2:0f:03:d4:94:ef:
         68:c4:3e:61:1b:ec:72:99:76:04:f3:5a:3e:62:b4:3f:24:ea:
         40:26:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:59:00 2026 by rpki-client