Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfc19f30-76db-3f21-be60-470e04317617.roa
File:                     cfc19f30-76db-3f21-be60-470e04317617.roa (raw, json)
Hash identifier:          jsU8mOR4usTkORb4y2HjkGEa53ncfZE/ljUeWoEdzPQ=
Subject key identifier:   32:A7:B3:C7:53:33:FC:8A:98:97:33:ED:EB:EA:60:FE:34:05:58:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF71784EA3AD045095FB04400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfc19f30-76db-3f21-be60-470e04317617.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        108.5.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:84:ea:3a:d0:45:09:5f:b0:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=f542baeb-a478-4752-bd39-cdade633e22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:38:fa:50:12:6a:fe:99:c7:f2:33:15:8b:
                    23:08:99:62:a0:cc:04:08:ac:e9:ff:69:9f:5f:c0:
                    8c:aa:7a:f8:11:49:97:77:4a:38:73:65:62:3b:4c:
                    3c:2e:af:e4:f4:29:a9:8e:c7:33:e0:d3:69:74:81:
                    ac:ab:97:8a:a5:68:6d:7b:88:a5:b8:b7:05:e3:e9:
                    a0:67:fc:48:25:5f:df:91:9f:68:10:2f:fd:c7:f8:
                    a0:9b:f3:56:78:b9:53:88:17:2e:d9:c2:59:44:a2:
                    d8:82:87:96:88:09:a8:77:9d:24:4d:2d:75:c6:18:
                    ba:73:27:53:67:c5:7a:2b:f3:fa:63:5c:07:64:ff:
                    ec:20:40:ff:cd:eb:72:ef:8f:f8:11:4e:32:79:f9:
                    81:90:89:cb:fa:92:bd:a5:76:1b:4c:e7:e8:19:e9:
                    84:e3:f0:72:31:87:c2:d6:0a:62:11:cc:89:8e:fd:
                    69:12:12:e1:7b:ce:3d:03:2e:64:27:f7:f9:8a:c9:
                    44:ca:d2:40:3a:21:6b:c9:83:07:76:cf:c9:f5:17:
                    dc:05:69:08:a6:19:f9:8c:f8:13:f9:4f:65:4e:52:
                    56:e8:e0:c1:6e:78:b7:a0:50:a2:e7:7e:6a:49:be:
                    10:21:8b:13:24:f3:3e:4e:f6:c8:c3:75:c6:ab:7f:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A7:B3:C7:53:33:FC:8A:98:97:33:ED:EB:EA:60:FE:34:05:58:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfc19f30-76db-3f21-be60-470e04317617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:2a:13:a1:d4:dd:6c:68:d4:f0:aa:48:92:15:c3:1f:96:
         da:23:60:25:09:eb:9f:82:0f:02:e5:03:27:05:c1:c3:ef:db:
         41:bc:bb:07:b5:18:79:c4:8f:d0:25:4a:b8:8a:24:b3:ce:96:
         56:b1:3c:2a:21:2f:10:b6:ce:b8:c6:bb:ce:7e:57:c0:b7:6e:
         f2:66:34:92:be:5c:11:83:b6:00:6e:ce:55:22:e0:fb:18:42:
         8f:a4:c3:5d:da:83:dd:20:0e:ff:51:bf:b6:ff:ae:06:88:cc:
         64:b1:b2:2c:d5:7b:67:f0:28:bd:d1:e1:6f:28:23:0d:80:cd:
         50:2e:d1:05:e1:40:20:94:94:0b:88:c0:14:a9:0d:12:e9:ec:
         0e:c8:ca:0f:e7:85:b3:b0:05:43:8d:c7:94:53:2b:25:e1:72:
         6e:86:9f:ce:8e:25:6a:19:1d:30:4a:8c:95:90:a2:f2:22:8c:
         28:68:4c:a0:9e:d4:ba:5f:3c:ad:78:14:85:9a:5f:ae:c1:de:
         be:a8:8e:7f:0c:f0:f9:08:df:67:48:5f:2b:7a:15:cb:ae:b1:
         03:1a:14:81:11:d7:f5:27:f1:8b:61:0b:3b:b9:b4:40:e1:fe:
         aa:af:7a:d4:5c:c8:22:e8:b0:48:61:5a:f7:45:e0:15:b3:e9:
         4f:4b:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:42:53 2026 by rpki-client