Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7c8235a-f78d-3f99-ad7c-930afd91cdee.roa
File:                     c7c8235a-f78d-3f99-ad7c-930afd91cdee.roa (raw, json)
Hash identifier:          d5HJJnRnrcIWBpocn/P1+8aJAduEN4+r+C/3YE2/nJ8=
Subject key identifier:   C7:49:D3:24:5E:F1:7A:28:E1:28:B2:E2:C5:DA:E1:30:A9:38:21:A2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717850E88E1BEC51A315D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7c8235a-f78d-3f99-ad7c-930afd91cdee.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        108.14.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:85:0e:88:e1:be:c5:1a:31:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e278ee9d-9b5a-4375-9de4-b476e51d2e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:4c:56:84:b4:b9:fb:b1:e2:28:03:3e:4f:
                    6c:1d:4e:c4:11:35:49:d3:34:84:85:3a:f6:b8:53:
                    bc:3d:e8:8f:10:a4:bc:e3:07:67:c9:58:ee:58:ad:
                    46:70:49:38:3a:e0:d5:e6:16:83:ab:66:f0:9e:63:
                    63:31:e2:0f:eb:8c:da:43:57:03:f2:4c:43:4b:96:
                    8e:d9:0b:4e:f1:4b:8b:0a:4c:14:ca:97:75:1e:69:
                    9e:49:f0:8e:39:63:1d:45:8e:08:48:c0:21:83:e1:
                    ee:67:08:a7:e1:22:ff:1e:5a:77:d2:da:97:a7:c5:
                    d8:7c:b4:01:84:68:6d:5d:4d:02:b6:8d:f8:b4:bb:
                    72:89:91:21:07:d9:5a:7d:35:15:65:53:99:53:1e:
                    19:66:ae:5a:cd:7a:2e:13:ec:85:80:e5:19:ec:20:
                    5a:29:50:e3:5e:50:e4:2b:53:8c:ba:d5:6d:fc:b7:
                    ea:1c:ba:25:e9:9a:8e:8d:60:39:e9:e5:b0:ec:e0:
                    27:83:e7:1e:a0:bf:04:0e:36:e5:75:13:ff:33:e3:
                    46:70:56:f3:0b:a8:5a:09:50:4b:fd:4a:dd:66:ad:
                    ab:d8:e6:b8:21:35:94:b7:87:d9:b8:bf:99:36:8e:
                    83:0c:d0:1a:11:91:d1:6b:0c:e3:fc:c0:6b:11:41:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:49:D3:24:5E:F1:7A:28:E1:28:B2:E2:C5:DA:E1:30:A9:38:21:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7c8235a-f78d-3f99-ad7c-930afd91cdee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:e8:19:99:8f:6d:9c:a9:6a:8e:80:a9:46:c3:eb:2a:5e:f7:
         51:6e:ba:da:ae:7e:f9:cf:79:f9:25:c2:66:49:d1:3e:73:df:
         95:a8:b6:7b:c0:b0:70:16:59:bf:7e:f0:ef:aa:d1:2f:17:5e:
         60:54:9d:b2:cb:d1:fd:85:9d:fb:ff:14:4a:3b:3f:77:f0:19:
         7a:d7:57:5f:49:13:b1:a5:40:20:31:8c:cb:3d:1a:d0:6b:d8:
         80:01:85:68:43:95:a0:a8:c0:5d:f0:f3:a3:01:44:1f:67:27:
         5a:e4:68:84:6f:7c:41:c7:06:95:07:30:aa:60:3c:28:87:0e:
         00:4d:ca:a3:ba:f7:01:42:a1:15:80:2a:93:e7:84:f8:d5:82:
         3e:31:7e:36:ea:92:2c:a8:9c:46:c6:4b:44:0e:cf:bd:19:91:
         5d:99:06:b5:d0:74:67:58:75:e0:73:01:8f:4a:ef:1c:11:6b:
         c9:40:1f:71:1b:0d:b5:40:db:85:37:d9:88:bc:a9:b5:35:58:
         ab:ff:f7:fa:23:f0:d5:3e:40:ec:c2:20:ef:72:36:a0:cf:05:
         30:05:21:39:c9:2c:7f:0b:d1:c9:e4:e9:7a:36:4a:0a:92:19:
         14:46:48:bc:c4:08:61:b4:a0:44:94:35:09:f2:4c:81:50:94:
         a1:37:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:45:52 2026 by rpki-client