Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/925c2239-6cc5-3995-ae48-316caf8ec98c.roa
File:                     925c2239-6cc5-3995-ae48-316caf8ec98c.roa (raw, json)
Hash identifier:          u5hp4UK5oHf9fkJ1W2q5KzpVT7XBOq4OeGGYaxbjH5Q=
Subject key identifier:   7F:AF:70:E4:17:C8:3C:A3:6E:D5:8A:07:0D:09:0C:FC:ED:68:2E:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D7470045C7907DFBAD92A6210
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/925c2239-6cc5-3995-ae48-316caf8ec98c.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        108.22.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:04:5c:79:07:df:ba:d9:2a:62:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=7fe13147-d159-4769-bc79-28f5543f5516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:ae:97:68:15:83:37:79:4b:73:a7:a0:e5:
                    dc:09:9c:ba:d7:c2:11:74:de:5a:f3:ba:86:65:79:
                    0f:5f:cf:aa:94:98:e9:cf:36:85:1c:c3:df:43:64:
                    00:d3:9e:76:ac:c3:df:28:a2:55:09:69:96:d2:12:
                    d0:40:89:84:29:df:10:09:ba:16:07:75:60:af:61:
                    59:15:78:79:fb:de:ce:eb:aa:47:a1:70:3d:65:4e:
                    d4:89:c4:c2:30:19:f3:d8:6b:6c:8b:70:5d:c1:9e:
                    8e:bf:ae:c9:50:32:20:81:88:1a:a5:6c:af:4f:bf:
                    47:95:ba:78:57:94:cd:42:02:20:3f:c4:ef:bb:24:
                    54:41:98:fb:ba:c9:bf:92:1a:92:c1:79:90:4e:1d:
                    5e:4c:1d:c3:8c:25:89:68:03:7e:3b:8e:78:ec:92:
                    15:15:79:f5:53:c7:1f:98:86:54:2a:59:28:24:2f:
                    cd:87:e1:eb:50:8b:83:33:fa:7e:49:3c:d5:85:9b:
                    77:4e:5f:73:74:42:d3:cf:53:5a:40:30:ff:e7:52:
                    52:09:63:c3:d9:de:12:90:ac:12:8f:1b:22:1a:23:
                    88:18:fd:ad:41:72:3f:fc:98:dd:91:36:d1:76:76:
                    23:17:78:41:ea:19:fd:b5:e2:e8:3c:8e:85:4d:a5:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AF:70:E4:17:C8:3C:A3:6E:D5:8A:07:0D:09:0C:FC:ED:68:2E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/925c2239-6cc5-3995-ae48-316caf8ec98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.22.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:b1:0b:af:13:13:fc:ff:ff:4b:31:14:c2:c7:36:1a:46:
         3d:cc:53:48:b4:d7:6d:20:c0:03:51:ca:75:16:b6:9c:ac:55:
         70:47:c2:73:2c:c1:34:4e:13:6e:01:4b:69:0f:43:85:d6:25:
         f8:2f:c0:d0:a3:42:49:69:81:8a:3e:fe:df:a5:f0:ff:4e:3c:
         d5:02:89:52:e7:e7:94:bc:e3:cf:63:dd:9e:c0:26:7a:cc:a8:
         34:1a:57:33:85:61:16:42:ec:58:eb:f2:da:bd:29:58:68:b7:
         7a:66:6a:df:ca:52:3b:49:ea:05:1c:84:ba:a3:35:d9:01:00:
         90:6b:ae:d2:a5:5e:c9:79:d8:23:dd:f4:10:35:6e:a7:da:b0:
         46:7a:3a:ef:0d:12:b0:b5:02:61:2d:05:36:95:7c:6b:0b:48:
         30:08:72:c7:b8:e1:64:05:f0:e6:e2:c1:b4:03:28:7d:8e:5d:
         e2:b6:f7:95:02:ef:4f:c5:54:49:6b:b1:99:4b:3d:88:2e:81:
         fd:46:58:e9:cb:ec:b9:53:dd:3f:99:e5:04:1a:5d:96:b4:98:
         03:45:11:5b:99:f2:37:cf:86:0d:69:86:20:41:1c:3e:01:f1:
         0a:8d:a3:a6:fb:46:37:32:2f:d8:50:69:5e:2a:17:30:7c:43:
         f0:f5:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:44 2026 by rpki-client