Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34027a47-a831-381c-89c6-ffb729e6f592.roa
File:                     34027a47-a831-381c-89c6-ffb729e6f592.roa (raw, json)
Hash identifier:          eyiGqbZFn77w4Ze/BxGGHpUZIUirt+k7StcLThYLV7o=
Subject key identifier:   14:1C:F4:56:D3:85:2A:AC:CB:C5:59:23:0D:4F:9A:91:E5:38:B5:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F1800DFB970CCFE43E3C7780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34027a47-a831-381c-89c6-ffb729e6f592.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        108.53.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:0d:fb:97:0c:cf:e4:3e:3c:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=ca71c646-b550-4e61-8396-6749db56005e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:99:43:76:2a:ce:cc:26:66:87:58:59:92:
                    36:7b:54:19:00:18:1a:3e:a0:40:fa:27:4c:e8:48:
                    16:a7:ac:b3:a5:dc:19:51:af:3f:cf:fe:ad:6f:37:
                    04:c0:9d:75:ea:91:31:de:24:cc:2a:33:df:ac:99:
                    6c:8f:f6:53:61:68:e8:4b:f5:82:57:8a:2b:e3:91:
                    66:c1:49:63:88:7c:8d:4e:ef:33:68:89:42:80:01:
                    62:42:38:d9:24:3d:a6:b8:d3:11:f6:10:e4:b0:85:
                    4e:58:78:72:47:99:28:13:fe:71:f5:29:cf:ea:7e:
                    6d:14:82:5c:a8:15:52:32:fd:8a:76:1a:a5:62:6b:
                    91:5d:b9:70:38:f8:11:8e:48:4b:ed:68:32:9f:b0:
                    b6:00:05:e0:50:78:1e:29:cb:21:0e:40:6e:79:86:
                    72:65:d5:a1:f7:65:cf:43:99:c9:cf:a3:aa:02:97:
                    98:01:50:78:5c:59:03:e4:75:af:49:d7:7a:2d:01:
                    d3:63:d7:3f:15:34:ee:7f:ff:17:91:91:2b:58:c1:
                    bb:3e:60:22:d1:8b:fc:b8:53:f7:a8:7e:e1:5d:63:
                    46:6b:62:39:21:d5:20:c4:68:a8:cc:5e:fd:d1:25:
                    bf:34:e0:ce:00:10:0b:87:6f:9f:eb:64:4a:3d:83:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:F4:56:D3:85:2A:AC:CB:C5:59:23:0D:4F:9A:91:E5:38:B5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34027a47-a831-381c-89c6-ffb729e6f592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:88:8f:68:c6:25:72:29:13:a3:21:08:46:80:77:f8:a2:4c:
         0e:c1:0c:b6:07:10:78:5c:b4:8d:6b:01:fd:a7:db:d5:f6:68:
         7d:1e:9b:12:61:e3:76:f4:29:be:fd:e9:ae:bf:13:1a:94:22:
         05:ba:e8:39:28:03:90:ee:18:92:88:7c:32:f2:b6:7c:45:d4:
         cd:60:2a:a0:30:00:dc:bf:03:c2:48:ee:2b:25:cb:a2:b1:32:
         a4:6b:03:1b:51:01:af:2d:fd:73:a4:3d:85:05:5a:c9:e5:f3:
         58:f5:ca:ff:47:ee:7e:0f:89:1c:00:c1:14:10:10:88:f0:0b:
         37:db:71:c8:53:06:95:90:c0:da:9b:d4:06:1d:cb:8f:db:7c:
         39:f0:ed:9d:ae:fb:c0:7e:3f:7d:0a:7d:5b:66:1f:67:bb:02:
         39:11:d1:62:83:e0:35:af:a5:92:00:17:8d:db:38:88:ba:38:
         ff:d8:86:9f:27:e8:cf:81:d3:d5:25:06:47:2f:0a:c8:68:eb:
         94:5f:41:97:52:58:67:d1:77:90:20:cd:f8:cd:cd:53:fb:91:
         32:93:99:7a:71:c8:77:4d:28:95:bd:d5:4a:e1:bf:1e:6a:4b:
         be:a1:90:8f:d2:3e:cf:6b:bd:73:06:a5:74:5a:d5:d0:e5:b2:
         06:38:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:35 2025 by rpki-client