Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
File:                     54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa (raw, json)
Hash identifier:          1OsUqiM1oi+nl8xNAUaVQrdxq3MPbu992wANeWjHlng=
Subject key identifier:   32:42:6B:CB:D9:16:81:01:FA:FC:E9:E9:2E:5C:10:40:60:6C:7E:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A688A16F51123C9B7CA6318
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        108.29.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:8a:16:f5:11:23:c9:b7:ca:63:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=197c3353-bb49-41f5-8d83-528668398f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:c5:37:74:94:38:0a:c2:60:5f:18:5d:a4:
                    9f:b6:99:79:08:ac:a1:81:17:e5:d9:cf:4d:38:7b:
                    ba:82:14:14:6b:e5:eb:5e:26:61:12:5a:9e:95:93:
                    d7:c4:79:6a:10:34:93:e4:52:8c:f0:79:54:14:cc:
                    9c:dd:26:36:ee:b7:7f:29:e7:d8:69:d2:34:de:ba:
                    97:3d:4c:26:1e:f2:5b:9a:1f:f0:4b:64:33:a4:bf:
                    94:c6:d3:7d:d9:54:df:7c:4b:03:91:ee:b9:74:46:
                    cf:a4:87:48:68:70:cb:27:97:ab:f3:ba:07:31:f4:
                    ca:71:5e:f5:87:f7:50:2b:20:e6:01:07:c1:9f:a6:
                    0a:22:10:1d:b9:ad:c0:f2:62:55:76:be:12:c1:e0:
                    72:ba:f8:6a:f8:c5:50:46:5e:0d:7e:2a:c2:f7:3a:
                    0e:6a:45:c3:e5:f2:87:fb:52:96:42:92:d6:ba:74:
                    be:24:49:51:2c:c7:4c:55:9b:22:72:88:78:10:9e:
                    7a:d1:6d:ba:17:20:6d:b2:17:c0:73:4f:4e:f6:db:
                    92:66:15:6a:44:88:0f:b5:e0:70:7b:b3:c7:03:66:
                    bd:07:f5:c3:52:9d:bf:e2:05:e0:6f:94:c4:65:35:
                    f8:5e:41:fa:1a:17:f0:53:50:58:86:70:72:af:5f:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:42:6B:CB:D9:16:81:01:FA:FC:E9:E9:2E:5C:10:40:60:6C:7E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ba:20:7a:14:a9:d1:d9:70:9c:de:75:ea:49:cd:12:d6:ad:
         e8:fa:52:56:e6:f1:a9:98:a9:77:c5:a0:9d:d8:23:17:18:92:
         02:e7:f7:26:35:9f:01:a2:28:e9:9b:88:cf:57:25:de:9d:c6:
         52:27:6f:9c:5c:63:8a:c6:1b:7d:71:7d:07:f4:63:22:aa:a7:
         45:db:60:41:95:5c:0f:0f:d6:44:46:88:46:c1:2c:da:93:6f:
         9e:96:c7:c6:e1:14:1b:bc:df:92:63:b4:72:a0:e3:b6:8d:a3:
         20:5e:76:c2:22:a0:32:81:5b:04:87:b8:f7:cb:31:20:0c:df:
         9f:16:77:80:02:a9:b2:bc:75:9b:b8:34:29:bb:07:6f:df:2c:
         18:f0:b2:db:f8:06:36:91:3a:0b:58:69:67:63:63:35:d3:66:
         b5:47:e3:38:98:57:b0:43:4f:39:a2:04:41:a9:d0:87:67:5f:
         ad:e2:4d:1c:06:e7:e4:b5:57:f7:ba:ac:b9:77:15:52:1d:a5:
         fb:06:e4:82:98:32:a3:21:7a:2b:81:5c:e5:20:07:27:8a:f8:
         9c:0b:b5:86:0e:e5:17:da:8e:3d:0c:62:23:f3:86:3d:4e:97:
         04:2a:6e:1e:77:37:02:63:ab:10:c2:91:c8:01:72:55:ad:0d:
         4d:34:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:57:38 2026 by rpki-client