Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
File:                     54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa (raw, json)
Hash identifier:          3bE9VrUqXoVQZ1yYXGA2xqpK3lL5Wf3i0DTTULnWC/M=
Subject key identifier:   8F:D9:7F:C5:B4:DD:83:20:4A:4F:BE:FB:E0:DE:96:FA:7B:7C:AD:AB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7E26E4D2D07203A2DF380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        108.29.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e2:6e:4d:2d:07:20:3a:2d:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=ee14efc2-e2a1-43f9-8125-0461ef19550a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:c9:93:83:58:db:5e:a2:30:e8:0e:22:9b:
                    83:a3:2e:0e:b8:2d:a7:8b:f1:f2:35:d2:4c:a7:54:
                    ae:22:8e:c5:05:f7:fb:c1:f5:d7:6d:32:26:5a:0e:
                    d6:9a:94:c6:09:5e:36:df:2a:ce:8d:e6:e5:cb:e5:
                    99:82:90:a2:d2:4a:1a:f1:e3:92:76:18:e4:69:3f:
                    17:28:ec:2f:1e:82:78:30:cc:bf:2d:57:21:2e:ac:
                    69:db:20:e2:fa:b5:ca:cd:3e:82:da:71:2b:47:ce:
                    32:dd:09:c6:7b:64:d8:da:b7:bc:74:25:27:f7:23:
                    8a:67:c7:62:3e:bd:31:34:ed:77:c1:9a:00:65:9e:
                    8c:2d:cf:ea:08:b4:3a:89:3b:29:12:a2:20:22:f0:
                    2a:94:73:63:34:38:fc:10:7c:83:83:4c:4a:3b:3e:
                    30:70:2b:fb:0e:ab:cd:22:3c:2f:f2:9e:38:69:9e:
                    17:ea:f1:30:67:7e:be:7b:6c:ed:aa:b0:03:ff:46:
                    9c:94:70:f0:05:2b:e3:0f:2c:23:27:83:9d:ae:24:
                    7e:45:d6:5a:db:2d:3f:7e:4c:11:8c:2f:39:2c:19:
                    bf:8d:ab:a8:b1:c6:20:f1:84:ba:fd:26:ef:8f:b1:
                    38:6f:31:ff:97:1e:30:bf:a3:15:a8:4a:a5:e4:5c:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D9:7F:C5:B4:DD:83:20:4A:4F:BE:FB:E0:DE:96:FA:7B:7C:AD:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:48:e5:48:a9:61:36:fb:25:55:1a:40:8e:11:15:70:a2:af:
         d0:9b:59:ee:b1:76:f4:94:70:e1:14:b6:38:0f:e6:ca:30:f8:
         31:2e:af:60:46:05:53:cd:95:11:81:58:6a:3e:88:11:c3:44:
         63:d1:7f:8c:77:8b:e9:d0:fd:e5:b0:f7:1e:21:2d:61:c6:00:
         d9:42:43:b0:61:92:ee:49:0a:60:5a:8f:ea:7b:c5:94:e1:51:
         c3:d1:0e:fb:ec:5b:5d:64:d1:d2:6f:90:b6:76:18:65:9c:d0:
         a4:ba:5c:47:23:86:61:d0:e8:70:3d:97:85:45:55:6e:a2:27:
         58:19:32:c6:a7:f0:f1:62:3d:84:ac:1e:3b:3c:a6:60:59:ee:
         96:21:37:12:7b:f5:b0:ba:86:27:65:e0:4e:e1:85:2b:3a:f8:
         e8:19:8a:68:1f:bf:28:44:59:78:a4:13:f6:f8:98:c3:5f:95:
         8a:76:01:be:5a:ef:64:56:b6:de:00:37:fb:5c:18:53:68:6d:
         44:0d:1b:0f:1a:c0:42:9b:a5:6e:5a:18:17:d5:7d:95:d3:97:
         00:c9:a3:6e:b9:5b:24:ed:f1:55:62:cd:ff:5f:5d:5a:57:67:
         8b:6e:14:26:45:00:5c:66:2c:7b:46:ba:41:51:d2:db:c3:5c:
         72:b2:85:a9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy9+JuTS0HIDot84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
ZWUxNGVmYzItZTJhMS00M2Y5LTgxMjUtMDQ2MWVmMTk1NTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4anJk4NY216iMOgOIpuDoy4OuC2ni/HyNdJM
p1SuIo7FBff7wfXXbTImWg7WmpTGCV423yrOjebly+WZgpCi0koa8eOSdhjkaT8X
KOwvHoJ4MMy/LVchLqxp2yDi+rXKzT6C2nErR84y3QnGe2TY2re8dCUn9yOKZ8di
Pr0xNO13wZoAZZ6MLc/qCLQ6iTspEqIgIvAqlHNjNDj8EHyDg0xKOz4wcCv7DqvN
Ijwv8p44aZ4X6vEwZ36+e2ztqrAD/0aclHDwBSvjDywjJ4OdriR+RdZa2y0/fkwR
jC85LBm/jauoscYg8YS6/Sbvj7E4bzH/lx4wv6MVqEql5FwzkwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI/Zf8W03YMgSk++++Delvp7fK2rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTQ0NTNhZGMtODU1OC0z
OTg5LWEyYmQtYmY5MGViYjJmMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbB0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIUjlSKlhNvslVRpAjhEVcKKv0JtZ7rF29JRw4RS2OA/myjD4MS6vYEYF
U82VEYFYaj6IEcNEY9F/jHeL6dD95bD3HiEtYcYA2UJDsGGS7kkKYFqP6nvFlOFR
w9EO++xbXWTR0m+QtnYYZZzQpLpcRyOGYdDocD2XhUVVbqInWBkyxqfw8WI9hKwe
OzymYFnuliE3Env1sLqGJ2XgTuGFKzr46BmKaB+/KERZeKQT9viYw1+VinYBvlrv
ZFa23gA3+1wYU2htRA0bDxrAQpulbloYF9V9ldOXAMmjbrlbJO3xVWLN/19dWldn
i24UJkUAXGYse0a6QVHS28NccrKFqQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:32:21 2025 by rpki-client