Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e709d58-b534-32e2-98b2-894a30287ea2.roa
File:                     6e709d58-b534-32e2-98b2-894a30287ea2.roa (raw, json)
Hash identifier:          zCxyzaFMColVBtRc3me2N1o+hMH46aAVchUS625mvCA=
Subject key identifier:   92:A7:59:14:83:84:61:A6:B6:E8:A4:98:0E:9F:A9:5F:48:70:DC:A0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCD3079C80B918F2DD01C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e709d58-b534-32e2-98b2-894a30287ea2.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        172.108.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:d3:07:9c:80:b9:18:f2:dd:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=0f7d70dd-761d-4395-b535-c23d6b14c3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:44:0d:e7:ec:c2:71:cf:62:d6:3b:66:d5:
                    2d:ec:e2:07:2d:6d:01:85:01:e2:5e:6f:56:d1:40:
                    a1:01:88:a4:a8:df:10:8e:64:8f:52:fd:70:76:c2:
                    a9:49:ea:54:5b:6a:d7:36:2c:26:3e:32:cb:01:9a:
                    da:46:82:e6:b6:8b:09:58:d8:34:30:06:04:5e:8e:
                    bb:1e:52:52:68:b1:e6:63:2d:89:a3:85:60:f0:8c:
                    8c:d4:7f:6d:57:55:d3:16:ec:9c:8b:98:09:94:6c:
                    54:07:94:3e:9a:f2:cb:cd:bf:c1:23:a0:55:49:cf:
                    17:94:84:c2:00:05:19:d6:c4:76:20:80:d7:ed:ab:
                    06:68:f0:0a:a1:d2:6a:81:05:cf:f0:03:59:de:62:
                    56:d3:35:c5:fd:ec:45:2c:6e:86:90:69:7c:10:10:
                    f2:20:61:a4:30:48:22:03:23:31:ab:28:55:73:4b:
                    19:20:24:44:b1:58:bf:93:ec:e2:f5:8d:24:e6:34:
                    c3:06:3c:57:fb:dc:70:f8:85:3d:43:1b:fd:b3:e4:
                    f7:60:d7:ae:6f:ad:7e:1e:26:25:c2:47:51:c0:b6:
                    d7:e7:c1:d9:0b:1b:2f:c0:9e:2a:60:05:3e:d1:64:
                    c3:04:a5:cb:ab:b6:b5:5c:5a:93:ec:f1:58:98:d1:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A7:59:14:83:84:61:A6:B6:E8:A4:98:0E:9F:A9:5F:48:70:DC:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e709d58-b534-32e2-98b2-894a30287ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:5f:4d:08:c0:90:d6:38:ab:fa:f2:07:34:65:a7:69:7d:95:
         1c:33:14:df:dc:ee:7e:3d:14:5e:31:a9:cc:3c:04:f9:3a:7e:
         b0:da:06:89:04:60:a9:2c:be:ee:25:56:f7:9f:b5:ee:a1:c6:
         6f:6e:13:da:f9:1d:61:65:4e:cb:2c:45:a8:69:ee:70:79:5e:
         f1:88:36:4a:f5:61:b2:73:19:ae:49:87:2a:02:23:4a:60:d2:
         f9:8a:93:e5:7c:0e:8a:0a:0f:1b:b0:d1:f3:ca:ec:a7:db:5f:
         23:3c:8b:90:37:2d:e1:1c:ec:a2:de:07:c7:d3:bd:2c:83:7b:
         cf:a4:0b:72:89:c2:d4:47:ba:d2:60:b6:23:7e:e7:9a:b2:54:
         9f:86:0e:fa:84:61:8f:c2:69:31:19:5b:31:0c:02:5a:08:c5:
         22:03:e1:a8:6e:6d:e0:82:b9:54:43:90:48:15:8e:5b:e7:c9:
         ec:c2:e7:42:18:ee:ba:9f:dd:9e:96:26:d1:13:e4:b6:37:7a:
         91:b2:fd:ea:c4:a7:dd:39:0a:bd:7a:c8:dd:ff:cd:38:2d:7a:
         34:36:b7:59:bd:92:8f:77:22:ce:d9:98:34:b7:d2:e7:91:2c:
         56:b0:4b:5b:49:47:60:34:f2:e4:06:4e:3e:80:8f:05:ea:a7:
         c7:62:73:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNMHnIC5GPLdAcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
MGY3ZDcwZGQtNzYxZC00Mzk1LWI1MzUtYzIzZDZiMTRjM2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGZEDefswnHPYtY7ZtUt7OIHLW0BhQHiXm9W
0UChAYikqN8QjmSPUv1wdsKpSepUW2rXNiwmPjLLAZraRoLmtosJWNg0MAYEXo67
HlJSaLHmYy2Jo4Vg8IyM1H9tV1XTFuyci5gJlGxUB5Q+mvLLzb/BI6BVSc8XlITC
AAUZ1sR2IIDX7asGaPAKodJqgQXP8ANZ3mJW0zXF/exFLG6GkGl8EBDyIGGkMEgi
AyMxqyhVc0sZICREsVi/k+zi9Y0k5jTDBjxX+9xw+IU9Qxv9s+T3YNeub61+HiYl
wkdRwLbX58HZCxsvwJ4qYAU+0WTDBKXLq7a1XFqT7PFYmNHAnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKnWRSDhGGmtuikmA6fqV9IcNygMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmU3MDlkNTgtYjUzNC0z
MmUyLTk4YjItODk0YTMwMjg3ZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGxqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5fTQjAkNY4q/ryBzRlp2l9lRwzFN/c7n49FF4xqcw8BPk6frDaBokE
YKksvu4lVvefte6hxm9uE9r5HWFlTsssRahp7nB5XvGINkr1YbJzGa5JhyoCI0pg
0vmKk+V8DooKDxuw0fPK7KfbXyM8i5A3LeEc7KLeB8fTvSyDe8+kC3KJwtRHutJg
tiN+55qyVJ+GDvqEYY/CaTEZWzEMAloIxSID4ahubeCCuVRDkEgVjlvnyezC50IY
7rqf3Z6WJtET5LY3epGy/erEp905Cr16yN3/zTgtejQ2t1m9ko93Is7ZmDS30ueR
LFawS1tJR2A08uQGTj6AjwXqp8dic0M=
-----END CERTIFICATE-----
Generated at Thu Aug 27 21:47:21 2026 by rpki-client