Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa
File:                     ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa (raw, json)
Hash identifier:          MVfRu0Mm127JQx+nxmBlrvCNJJbaVEU/L3Lp0YEW2I8=
Subject key identifier:   7C:ED:C1:40:CC:E9:2C:34:09:56:48:6F:F5:6D:80:6C:76:84:4B:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D747005F7EE1D0C6A70693C60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        108.39.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:05:f7:ee:1d:0c:6a:70:69:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=27c40fe5-0bb0-4f7c-9dca-32d0bf4461e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:7f:fe:98:fa:23:84:52:0d:12:40:8b:5f:
                    e4:47:61:16:55:da:5a:e4:32:8b:28:e0:2c:06:f4:
                    40:ed:19:cd:91:02:b4:b4:71:bf:a2:e6:5d:4d:02:
                    4e:5d:ec:07:f1:cf:45:a5:74:58:04:f5:ca:f2:41:
                    f3:dd:c8:b6:d8:b8:4d:eb:6c:93:12:54:5f:46:28:
                    da:84:2a:f4:24:d8:4e:f2:da:9f:fb:a6:6a:2d:dd:
                    8f:c9:e4:f7:e8:2f:7b:cf:36:70:d9:c3:84:40:f3:
                    77:9b:aa:60:89:90:86:39:73:f4:57:37:ea:d4:ec:
                    db:56:59:d1:cc:7e:15:e2:36:df:71:4e:d2:3f:5c:
                    c2:96:2a:1d:6e:2e:d7:68:b7:a8:7f:d4:72:9f:14:
                    fd:05:f8:8a:cb:4e:1e:fb:cf:13:58:bd:b7:6a:a6:
                    ad:80:b1:8d:d4:8a:6e:9b:56:11:c7:82:95:a1:dd:
                    6d:de:f6:ac:21:7b:f5:4a:a4:2b:e3:ba:a5:37:b0:
                    b4:3f:3b:6c:7d:32:e5:03:44:e8:4d:e9:01:50:1f:
                    fc:04:42:6c:57:b2:58:a3:ee:b9:fd:dd:a1:08:cc:
                    37:c6:0b:05:69:3d:d8:84:31:2f:3a:3f:d8:37:83:
                    db:fa:52:c0:82:1f:d8:87:3b:d6:bf:69:90:da:40:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:ED:C1:40:CC:E9:2C:34:09:56:48:6F:F5:6D:80:6C:76:84:4B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.39.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:5c:16:96:d4:91:d4:01:d8:95:54:7f:08:7e:38:a2:a4:
         c8:47:4e:3a:b8:49:2d:47:3a:ca:ba:38:fb:56:7e:fb:b0:bb:
         6f:e1:36:fe:dd:8d:d5:e9:e2:9b:19:70:ea:a4:8c:f9:5a:0a:
         be:96:51:af:99:6a:b2:73:15:1d:c9:0c:73:49:5f:44:c6:2f:
         df:81:5e:4d:e7:9b:17:db:33:a8:fc:88:d1:d5:a0:c0:c4:92:
         90:a4:0e:f0:6d:43:22:34:f0:d1:a7:07:6d:c2:9e:d0:58:0b:
         c5:ae:b6:e5:f5:e8:25:a0:6b:30:0f:40:14:52:74:df:6b:a9:
         f6:70:cd:c1:6c:3a:27:25:d1:9a:90:91:6d:84:e9:1b:fa:15:
         5e:39:49:f7:94:f2:ed:af:6e:3a:38:52:78:6a:60:57:a6:c2:
         0a:3a:16:85:79:83:11:d0:d0:c9:4e:95:ab:cc:53:20:f4:a0:
         46:9a:6f:0b:b2:a1:bf:11:7a:e9:c7:f7:ab:b3:a2:0f:0c:93:
         0f:b5:40:fb:03:42:2d:33:50:ff:5b:e3:d1:43:3f:3a:97:66:
         60:b4:41:09:b4:ab:ec:b8:82:97:fb:b3:61:6a:3c:2f:55:6b:
         d9:da:e0:65:b2:0b:c4:f9:6c:ce:37:13:d9:44:eb:f6:56:38:
         81:35:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:04 2026 by rpki-client