Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
File:                     54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa (raw, json)
Hash identifier:          rYL1z0k3FkzSL1WAnJMvhqaZL2qLl661p52MD1Zg1X4=
Subject key identifier:   8C:55:5B:A4:50:DB:45:E3:02:93:4E:11:81:C5:97:38:C7:12:58:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE6C6402B2D8DB13D9940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        108.29.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e6:c6:40:2b:2d:8d:b1:3d:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=54524fc6-f147-46ca-948c-950524da9b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:6e:01:1e:9d:bd:5a:93:87:52:de:78:8a:
                    04:be:17:ed:97:4b:2f:b7:9d:c3:5a:d1:f7:d0:e8:
                    b6:32:4f:b7:0b:27:62:92:0a:0f:c3:91:41:54:b4:
                    0d:9b:78:9a:28:db:af:26:d3:64:03:5a:7e:5a:b9:
                    1b:88:a5:5a:70:c4:42:c4:de:b6:42:40:32:f6:70:
                    3b:e9:da:48:bc:9c:c4:37:76:41:05:f2:ed:a1:3d:
                    13:a9:83:63:91:bb:9a:40:65:dd:aa:30:15:93:63:
                    1b:46:26:aa:fe:35:d5:c6:6e:73:fe:ac:0e:f9:59:
                    f2:cd:26:ef:cb:89:5a:88:4f:ef:b2:22:46:29:aa:
                    3a:ea:95:20:5f:6f:c5:5e:3f:1d:24:d7:4e:b6:c7:
                    b3:b5:4e:5f:1a:3e:b9:db:cf:77:f8:fa:79:07:09:
                    a8:9b:c6:03:d4:f8:d1:1e:1b:9f:01:e3:d0:5a:6d:
                    50:86:af:2c:f1:20:a2:27:24:b7:43:37:26:e5:88:
                    f4:09:26:d7:44:ce:6b:fc:46:0a:9e:3e:7f:b0:59:
                    d7:60:a0:e5:13:f6:e2:c2:7c:82:5c:05:5c:71:fa:
                    d8:7a:59:b9:25:c1:d5:c2:f2:ab:96:bc:17:f8:00:
                    67:56:a2:2e:ff:85:91:40:d4:fd:86:d1:a7:7e:94:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:55:5B:A4:50:DB:45:E3:02:93:4E:11:81:C5:97:38:C7:12:58:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:92:de:1a:b5:58:04:6c:03:d3:91:73:4d:33:f9:9c:76:
         b0:ff:dd:0c:ca:4e:ec:ca:1c:a3:ec:4c:40:81:f4:7b:cd:8c:
         30:fb:a2:a5:8c:1f:b6:cb:03:31:1b:bc:3b:46:ee:3a:6d:25:
         23:9e:b9:13:d5:08:c1:92:8e:5b:98:df:09:41:65:0f:83:88:
         0b:ca:cd:ec:be:be:44:73:a6:99:0e:c3:b2:85:03:4d:79:ea:
         8f:bc:ca:0c:03:57:8f:ab:c5:0f:12:3d:08:9e:4f:72:7f:91:
         71:c1:85:c5:7e:2d:f7:5f:54:13:5f:0f:80:31:46:6d:55:8a:
         03:9f:a2:dc:a0:56:4a:e8:00:ca:69:01:d5:ee:b8:84:db:9a:
         a6:0c:bd:ab:5e:13:2b:f6:9d:35:85:8a:35:fe:38:6a:36:9a:
         84:b4:75:06:7c:a8:dd:57:98:5e:a4:0b:45:32:55:13:bc:a2:
         25:73:9e:33:a6:36:bf:15:77:a7:1f:34:63:b7:48:1f:a9:72:
         d5:ed:32:f0:12:10:db:50:be:81:da:ce:5f:d1:ed:f5:94:3d:
         87:dd:f8:ec:ec:a9:6a:50:b9:a5:5d:13:ca:21:8b:69:c6:83:
         e2:de:48:b9:5d:15:d7:54:34:31:99:8a:3a:4d:19:e8:41:d7:
         c8:db:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:12 2026 by rpki-client