Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7716e526-a308-38b7-b021-f36a230563f6.roa
File:                     7716e526-a308-38b7-b021-f36a230563f6.roa (raw, json)
Hash identifier:          H+E3MEN+i1/cFcJNR2EjDNGw4fO1nI7m1CX08SOx1fY=
Subject key identifier:   73:95:43:CA:A3:AF:6B:12:98:DE:CA:EC:50:01:AE:74:C6:9C:3B:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE20A1FFBB003031B3980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7716e526-a308-38b7-b021-f36a230563f6.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        108.4.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e2:0a:1f:fb:b0:03:03:1b:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=3ab54e08-86b6-42d4-8f41-e530c6425b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6f:68:46:4d:b9:e5:5b:fd:4a:44:fa:5a:7c:
                    2e:b3:30:fb:28:2b:0e:01:05:15:52:b9:5b:d8:c6:
                    d3:10:3d:b7:e4:5c:45:42:8a:5b:e4:73:5f:ac:b6:
                    0e:19:a1:ba:3e:91:80:95:cc:b0:c5:19:fd:00:13:
                    cd:40:1b:0e:53:a0:28:c3:f3:ce:e2:a7:21:bc:13:
                    dd:32:05:4c:8e:a5:41:fe:2d:87:9f:27:5e:bf:0e:
                    9f:bd:c9:fb:f0:e8:84:13:10:6f:2a:d8:e4:87:69:
                    d5:b7:81:6e:72:86:e5:f1:8e:e6:00:41:6e:8c:e7:
                    3b:67:8d:b8:c1:93:54:5e:d4:83:a5:46:20:9c:73:
                    64:5b:e2:7e:ba:de:da:13:ec:ca:22:98:e1:fc:9e:
                    f3:a3:9c:99:1c:dc:05:9d:a0:53:6a:af:ef:0e:9b:
                    fc:7c:96:af:56:af:a5:3d:56:d0:92:93:f6:49:1b:
                    c6:f4:32:25:86:65:b5:d4:e8:bf:fe:20:d1:dd:e3:
                    e8:05:e0:43:a2:d8:ca:f0:0b:a3:87:70:e1:ee:2d:
                    49:86:9b:ff:62:42:48:c5:14:c4:33:63:35:2d:8c:
                    9d:15:6b:ae:46:37:bc:7b:11:ae:c9:5a:c6:25:e0:
                    57:e8:4d:ce:03:ba:40:c9:0d:38:dd:14:78:36:4e:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:95:43:CA:A3:AF:6B:12:98:DE:CA:EC:50:01:AE:74:C6:9C:3B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7716e526-a308-38b7-b021-f36a230563f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.4.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:96:57:f9:61:d4:5a:ee:c1:5d:86:aa:f9:57:ec:3e:70:c9:
         c2:0f:80:7d:60:72:47:64:d6:f1:b7:37:a6:4e:a3:84:3c:1c:
         a9:4a:ea:b6:ce:58:f3:59:bf:9f:c7:0c:36:a7:36:1b:d8:1e:
         40:f1:70:d4:7d:ca:f2:0f:da:f4:6e:ef:e8:65:d2:bf:08:61:
         28:50:21:0d:e6:19:b0:0b:85:93:5e:18:08:56:15:23:2f:97:
         f8:89:d0:c3:b9:29:49:f5:c4:15:42:26:b8:27:f3:4a:bf:a3:
         eb:8f:b7:9b:d6:fb:70:76:1a:77:15:ef:c2:52:7b:b3:09:eb:
         1c:75:0f:9a:c4:18:d5:e5:f4:2f:8e:48:d1:c6:d1:f4:c8:aa:
         18:07:b8:04:0a:62:8e:d8:68:2c:fc:c6:7b:a8:5c:72:0e:15:
         ba:78:57:bf:5a:e3:1f:3d:8a:5a:71:e5:e0:b8:1e:7c:ba:ba:
         f3:4d:74:76:0e:82:83:61:8f:c8:5f:13:8d:5d:03:86:ef:09:
         f5:7b:5a:9e:1c:76:ae:b4:3e:e4:1f:b4:52:57:92:a8:37:be:
         6a:a9:03:52:68:c8:64:e8:1c:61:07:08:cf:90:13:06:ad:3d:
         8c:05:16:5e:65:fe:e9:8f:0a:96:fe:d2:9a:25:bb:3c:22:d8:
         75:31:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:02:40 2026 by rpki-client