Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11788f84-2e91-32ad-8647-02771e551c77.roa
File:                     11788f84-2e91-32ad-8647-02771e551c77.roa (raw, json)
Hash identifier:          Vkm4brk7HyZ2KKI5SVNP8ncC4XGlb1rZmH+Qlm+Wo/I=
Subject key identifier:   11:49:5E:82:28:BF:B8:A5:90:2E:C7:40:1F:46:8C:77:DC:DD:AE:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7E1DB6A847C241A07C280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11788f84-2e91-32ad-8647-02771e551c77.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        108.7.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e1:db:6a:84:7c:24:1a:07:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=a1d8257f-917f-447d-8ebb-60309c46d67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:7d:1c:c3:60:97:7b:32:da:23:ca:f7:fc:
                    e7:98:1b:ee:17:10:74:d6:eb:f9:1a:11:18:0b:23:
                    d6:03:ec:42:b9:44:86:8a:ff:eb:86:5b:c8:a0:30:
                    5f:f3:4b:67:43:79:ec:68:1c:f4:f3:e7:a1:ad:01:
                    80:cd:06:83:f7:4c:23:82:2d:86:9e:1f:7e:8a:2a:
                    7c:7b:eb:f6:92:2f:05:ef:18:60:c3:b2:4f:0a:a8:
                    b3:18:36:2f:8a:9b:7c:4d:af:07:aa:4c:d3:5f:e3:
                    68:b7:47:00:d5:7e:ad:0c:dd:5f:3b:d2:5c:1c:ea:
                    71:da:6d:26:8f:a3:c8:68:be:1c:7f:e2:61:6f:89:
                    29:d6:4a:b2:df:04:b9:9a:5e:15:24:f9:f0:c5:2e:
                    a5:13:bf:0c:22:d0:a2:73:ab:3f:63:ad:3b:87:ce:
                    30:4e:1f:98:d9:94:87:ab:da:aa:5c:c8:08:a3:8f:
                    c9:c3:4e:d0:60:a1:14:39:d3:86:8e:99:e6:fe:37:
                    e2:9b:ea:cc:c4:d3:f5:6e:37:c8:61:f0:78:d9:5f:
                    2e:9f:7a:d1:19:79:76:d7:28:e8:a7:f6:ce:48:2a:
                    5d:85:92:47:64:69:80:b5:bc:fa:77:2b:30:24:5f:
                    a3:1f:96:b7:be:ca:27:b7:00:f8:fe:6e:ac:0f:e7:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:49:5E:82:28:BF:B8:A5:90:2E:C7:40:1F:46:8C:77:DC:DD:AE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11788f84-2e91-32ad-8647-02771e551c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.7.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:67:c5:0a:fb:0f:b3:ec:f6:f2:ee:7a:19:e4:e7:b4:cc:
         f2:eb:6f:0c:61:f1:47:8e:19:c5:d4:45:36:fb:22:25:d1:fa:
         e4:88:c3:16:5d:c0:cf:83:5c:80:97:eb:dd:3a:8a:cc:d2:c9:
         26:d9:a6:45:53:81:c8:44:11:db:11:5d:59:5a:90:b6:92:b9:
         02:b0:ff:e2:94:ad:81:68:07:ef:ec:ec:cd:73:77:d2:74:66:
         b0:02:07:0e:d5:63:24:01:1a:58:8b:ed:5e:d2:35:d9:03:45:
         b2:95:6d:10:e5:16:bf:e9:8c:eb:0b:ee:27:11:6c:f1:4f:a2:
         34:84:95:f8:67:42:3c:cc:20:88:78:12:44:71:e3:95:da:2e:
         62:2e:ff:3a:b6:78:af:ea:f2:a0:8d:cd:14:db:75:fb:18:20:
         ff:c6:c5:b5:64:08:62:a0:2b:2c:d6:f6:35:dc:b4:e2:c2:57:
         8a:94:be:d2:9b:ca:92:2d:fb:21:e2:8c:7f:8b:61:18:06:da:
         64:05:7d:fc:19:9c:e3:16:5c:8e:fa:85:37:25:43:59:1f:5a:
         14:9e:26:75:86:48:13:09:f2:ce:85:30:73:44:f3:11:a8:fd:
         25:73:f0:89:53:9a:cc:b6:b6:66:70:80:d2:b8:23:d1:25:4e:
         ef:0e:38:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:43 2025 by rpki-client