Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9f053bf-2466-384c-92a6-d144bcbc8e0d.roa
File:                     b9f053bf-2466-384c-92a6-d144bcbc8e0d.roa (raw, json)
Hash identifier:          r7tWAOamWnRD1AiZUhaTilUCTFd3nkBmhgj/By0Gy50=
Subject key identifier:   73:E5:B7:3E:74:CF:00:AB:3F:C8:93:77:04:5E:5F:90:6E:A5:09:43
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A20CF91D4D272D3C0800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9f053bf-2466-384c-92a6-d144bcbc8e0d.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        108.15.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a2:0c:f9:1d:4d:27:2d:3c:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=ce49f22a-00ba-4c5d-aef7-c59878090bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:02:e4:a4:99:3b:35:23:18:74:b5:6d:de:fc:
                    86:01:c7:25:38:5e:5c:18:ce:27:92:87:dc:11:ce:
                    0c:92:fa:37:2e:f3:2d:b9:da:7e:2f:62:7a:fa:52:
                    cc:4a:b2:1c:90:10:34:7a:ab:55:86:60:f9:ec:17:
                    8c:97:29:c1:7f:68:b0:af:fb:3b:e6:99:ab:90:b4:
                    c5:81:22:a8:16:c6:3c:9b:04:16:12:74:eb:27:1c:
                    16:7f:4c:9f:71:3c:b8:40:03:db:88:07:78:7e:55:
                    9e:90:43:06:c1:7f:3d:bf:62:4d:d5:57:41:a2:b2:
                    25:97:be:fa:35:8f:5c:7f:2a:36:fb:f4:42:de:55:
                    3a:08:07:96:d4:91:22:98:0d:ea:c9:1b:11:e6:fd:
                    f2:ac:96:78:63:f5:79:41:9c:f3:b4:91:56:bf:fd:
                    fb:e1:65:c0:d6:65:61:28:51:c2:81:ad:2f:48:cd:
                    f6:06:88:34:af:3b:99:46:51:b0:57:cd:3a:cf:e5:
                    11:4a:b5:26:de:ae:79:ad:a0:84:05:6f:39:a8:2a:
                    78:83:09:cf:53:7d:92:29:15:44:7c:c3:7d:16:08:
                    06:7c:07:8e:c5:08:23:45:cc:0b:13:7d:5c:44:2e:
                    53:d0:9c:2f:0c:3a:a8:9a:05:50:c0:ff:4e:71:10:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E5:B7:3E:74:CF:00:AB:3F:C8:93:77:04:5E:5F:90:6E:A5:09:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9f053bf-2466-384c-92a6-d144bcbc8e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.15.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1e:1b:ba:65:7d:b4:2c:3f:5e:69:53:fa:c4:36:ba:85:5b:
         10:d2:1a:56:a6:93:a4:cd:cf:8a:bc:bd:7d:7b:22:87:02:a6:
         7e:9e:b0:4e:63:be:4f:ae:fa:73:24:3a:9d:07:a9:9a:aa:4c:
         ae:93:65:80:4b:de:49:77:11:64:fe:e4:90:3d:19:11:84:31:
         b3:11:73:91:42:c1:de:0d:55:28:51:f3:bd:74:e2:9c:62:d2:
         d7:2a:6f:35:c7:65:f5:66:cd:a3:f7:dc:b0:bd:c9:f2:71:5d:
         23:b3:79:ee:0f:ce:d7:3e:9b:67:f7:2f:15:77:4d:b7:8f:ca:
         89:cc:86:7e:bd:d5:20:0a:93:6b:ec:1d:85:a6:c9:7e:e3:9f:
         64:64:24:09:43:47:bb:ae:28:24:fb:04:68:84:c1:14:60:90:
         5f:2c:a2:0f:40:ec:c0:b3:3c:c7:42:aa:8a:0a:78:84:2c:94:
         f2:4c:c1:a8:52:8e:46:d4:e2:74:4c:fe:34:aa:fe:b3:42:76:
         8c:38:14:60:59:cf:82:c7:22:cc:9b:df:04:1b:65:e3:38:85:
         60:f7:f6:47:ae:26:38:62:8e:b0:74:45:1f:39:be:b4:00:71:
         a0:bb:ed:83:2f:02:3f:7f:f5:65:1f:06:34:11:c0:22:b4:06:
         8e:fb:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:39:18 2026 by rpki-client