Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4769a12d-b89f-3ae3-8554-3c7073202c54.roa
File:                     4769a12d-b89f-3ae3-8554-3c7073202c54.roa (raw, json)
Hash identifier:          MPr7+fKWALqVeFRLOGTAulnPNBPwjtm/ZmicAnHMq94=
Subject key identifier:   AB:0E:6F:1A:D5:05:7F:51:77:DF:19:0D:6A:14:D6:28:28:CC:95:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7E21C7A2655F45B96AA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4769a12d-b89f-3ae3-8554-3c7073202c54.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        108.18.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e2:1c:7a:26:55:f4:5b:96:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=82770c1f-edeb-4593-9729-82df381fd588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1d:5a:6a:da:51:db:f5:fd:56:8f:47:20:77:
                    95:e9:d0:a2:32:0f:94:fe:4a:6f:f3:69:28:1e:32:
                    f8:bd:9b:c5:8d:0d:c5:97:27:9b:f2:d2:87:9a:9c:
                    b8:ae:65:fb:52:05:12:f3:ac:98:64:cf:a1:c7:57:
                    80:0a:8a:86:29:07:c1:4f:fe:fc:89:f3:ed:43:04:
                    9e:c3:7e:17:40:34:43:20:88:57:34:4a:f9:56:61:
                    25:6d:62:a6:ca:01:42:79:48:a0:af:de:5b:f1:e9:
                    fa:bb:f0:aa:f9:05:7a:ef:e2:a7:ab:4a:4e:8f:29:
                    b2:bc:42:71:ab:89:40:77:29:e1:43:69:0e:98:0f:
                    05:90:17:3d:a4:2c:c1:20:ec:b4:9c:ee:29:93:d2:
                    19:23:6b:69:29:ef:8e:fb:ce:2d:90:fa:eb:a1:51:
                    2b:9c:6f:7e:0b:57:1b:d7:d4:ff:f2:f7:10:9d:bb:
                    82:9a:85:3d:ff:ec:92:6c:ab:d5:7e:bd:d3:2a:6d:
                    76:4c:d7:bb:f3:cc:29:47:88:b9:29:ca:0d:a9:38:
                    4e:1d:ea:69:d2:25:99:33:c2:f8:ef:b6:af:f1:38:
                    f4:fb:ab:1a:c1:ef:5c:92:0b:69:e0:c3:ca:c6:e2:
                    fd:19:08:15:41:c4:17:c2:5d:61:d5:bd:7f:e8:f0:
                    d6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0E:6F:1A:D5:05:7F:51:77:DF:19:0D:6A:14:D6:28:28:CC:95:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4769a12d-b89f-3ae3-8554-3c7073202c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.18.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9b:1a:79:38:b7:f6:98:24:3c:20:e1:23:7c:2b:c0:e9:1a:
         a3:64:a3:df:45:c8:b0:e4:d1:6c:60:b4:b4:2b:aa:c1:dc:8b:
         8a:bb:26:73:da:ce:c9:e5:d5:4a:16:e4:14:fb:54:81:ac:cf:
         b4:cd:af:4a:44:5d:a8:87:a9:87:da:fe:2a:18:48:ec:66:c5:
         31:b3:da:b8:db:7c:2c:fc:07:b1:3f:99:7a:f6:4a:b6:58:fd:
         f1:fc:7a:25:6e:ce:0d:08:69:27:d5:a5:08:0a:56:2a:fa:9c:
         77:f1:cd:b9:fb:91:5c:28:db:7a:7a:0c:8d:da:c9:83:a0:88:
         13:cd:47:dd:4f:6b:40:f6:de:fe:f7:4a:f1:12:42:cb:64:ed:
         f6:3e:99:67:5f:0b:a0:68:c3:ca:45:9b:13:48:f1:8b:7b:90:
         91:42:e2:7f:de:76:cd:11:eb:c6:7d:1b:e0:59:50:a8:d1:74:
         7c:7a:ad:b7:27:42:29:32:16:e5:cc:4c:c3:a5:35:6c:d3:b9:
         e4:46:2f:b5:b3:bc:3e:00:76:ab:7c:95:a0:71:8c:89:f6:37:
         fc:b1:ce:bb:0c:4c:ad:1f:0a:1d:38:df:b0:c2:01:a3:41:82:
         bb:b3:2b:c4:72:1a:96:3b:3e:49:27:1d:52:da:41:ed:32:bc:
         a3:84:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:09:55 2025 by rpki-client