Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa
File:                     341517c8-40ca-31e7-a95a-b1ec05cfca82.roa (raw, json)
Hash identifier:          ugru3abmiCJB/XTaMRimPJUfdcHt3webaBZD3h2C0qs=
Subject key identifier:   94:6B:C1:06:65:FD:C5:5B:A2:27:B1:A4:B9:A2:2F:1C:54:F6:DA:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F80F5CA2A01E4B8616E380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        108.28.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:0f:5c:a2:a0:1e:4b:86:16:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=a2afe8a4-ee52-46d9-a568-b4185f67fad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:45:ec:3a:95:76:ed:07:09:99:fc:af:9f:
                    7b:eb:22:b0:45:9a:e9:cc:b2:43:9a:1d:e6:97:bb:
                    4d:ea:e5:0c:8f:ae:81:0b:cc:f4:97:6f:56:12:36:
                    2e:6a:7e:92:c4:0a:93:a0:21:67:ff:4e:48:e7:3f:
                    ea:32:3b:eb:14:4d:5b:15:2b:17:9b:9a:4c:8f:b3:
                    bc:72:b0:dd:35:40:92:71:dd:6e:19:8e:68:18:50:
                    03:8c:cd:67:25:5e:ec:5e:7d:a9:c7:d5:2e:ce:e2:
                    8b:0e:20:3d:94:83:b0:94:3e:28:ad:ac:7e:07:92:
                    5e:7f:10:da:79:ee:a0:2e:9f:06:4e:3a:69:29:82:
                    3e:a7:d5:0c:0a:05:49:c5:d7:32:d0:3b:69:69:99:
                    ad:58:f6:2e:67:50:ce:46:e3:2a:a0:41:5a:19:84:
                    ee:76:50:ad:bd:aa:ed:1f:6c:a3:57:b7:aa:f5:cb:
                    c4:87:f5:8d:54:b9:e8:e4:43:c5:64:16:56:48:ed:
                    9a:a4:23:f1:31:80:1a:92:95:60:bc:5a:81:9e:c9:
                    bf:e4:37:30:cc:4b:e5:56:15:51:dc:9c:0b:ac:8d:
                    7c:87:99:9a:74:5e:65:41:c5:7f:d8:1e:13:14:5b:
                    56:0e:ea:24:a8:82:97:e7:10:33:7d:0d:17:a5:44:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6B:C1:06:65:FD:C5:5B:A2:27:B1:A4:B9:A2:2F:1C:54:F6:DA:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f1:9b:e6:5a:38:32:47:fc:cf:ac:4c:78:bb:34:65:98:7f:
         14:b6:4c:76:ce:6c:ff:65:ca:fa:fd:52:13:6f:be:37:81:68:
         04:ac:81:12:ff:f9:fb:ee:c3:ed:7b:09:5d:47:c4:9b:fd:27:
         81:2c:96:c7:09:2e:2a:2f:08:a3:a9:b1:1d:ea:3f:d6:f0:a9:
         4b:9d:ed:8b:ff:dc:dd:df:93:84:3b:02:e7:8a:73:4a:2c:0a:
         73:ed:52:27:6c:f3:98:e1:71:64:22:00:8f:58:df:b2:ff:c1:
         70:98:f7:57:1a:38:f8:3b:3b:0c:5e:32:dd:0e:4e:fd:57:41:
         a1:20:e2:4f:b5:72:72:bb:cd:28:6d:4c:6e:7c:6d:c5:e8:30:
         a0:2a:70:54:15:dc:b9:d5:92:ea:9c:f4:f8:2c:e9:ff:0e:c0:
         75:35:84:3c:b1:07:7a:d0:72:37:23:41:e0:46:bf:0d:40:4c:
         03:5b:4e:d6:3f:c5:35:67:20:b5:d6:e5:50:91:e1:f6:cd:c6:
         c6:75:8a:67:fe:8f:b7:1b:14:58:1e:8f:43:78:84:4a:9f:d3:
         69:f4:1a:5a:13:47:92:bb:5b:c6:e9:d1:59:ea:1e:1e:64:db:
         5e:6c:ca:88:b6:fb:e8:80:92:46:9d:1e:2c:9a:ac:b3:df:a4:
         e9:ae:fb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:25 2025 by rpki-client