Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8bd980b-a454-3cdb-b080-f933dd7f030b.roa
File:                     c8bd980b-a454-3cdb-b080-f933dd7f030b.roa (raw, json)
Hash identifier:          nX9BJibSs7up0Phd4q2I5NdQcS6WKhx3iDZmKVVg7Es=
Subject key identifier:   D5:5B:AD:16:DB:E8:C4:67:1F:09:19:33:40:64:FB:3D:FC:E5:55:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE50A43D5BEBC6771BEC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8bd980b-a454-3cdb-b080-f933dd7f030b.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        108.40.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e5:0a:43:d5:be:bc:67:71:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=6f5c8624-315b-415d-a785-6786f07450df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:d5:46:82:a3:f1:1f:0c:9f:6d:31:20:30:
                    ac:8e:b9:d6:34:9d:26:de:66:20:d8:c8:89:cc:ce:
                    bb:36:69:62:e6:34:fb:e0:b8:12:48:a3:f6:ca:1e:
                    3c:93:a4:66:9f:dc:d2:ff:aa:8d:95:d7:14:6b:42:
                    e3:4e:42:3c:ac:7c:6c:78:1d:12:bd:d7:c1:42:7a:
                    32:05:b6:43:45:e5:9f:15:53:aa:5b:f0:9b:50:09:
                    f6:05:b8:a0:c1:84:e2:4e:b5:e8:65:d9:6f:de:95:
                    a8:d6:ad:47:62:18:b9:6b:e1:1c:dc:90:51:c1:cf:
                    bf:36:b4:5e:34:76:33:3b:91:ff:b1:64:5e:2e:63:
                    ab:74:02:79:e4:07:dc:62:87:b0:b5:ba:6b:40:f6:
                    e5:bd:cd:4e:ef:69:45:f5:a5:79:55:ab:84:f9:d4:
                    fa:dc:30:33:5f:7c:73:3e:74:7a:53:6d:e5:45:1a:
                    87:f3:fa:97:ed:ba:9b:e2:f4:4d:b0:71:08:6f:9d:
                    d4:4f:d3:5f:8d:c7:82:f6:51:d6:92:7c:76:8c:8f:
                    54:ad:0e:bb:60:c7:ef:11:73:79:49:92:21:92:f5:
                    37:ca:35:3e:08:a4:13:72:48:90:30:55:1d:62:ff:
                    35:b9:30:0c:ac:57:38:fe:94:6c:8c:ab:75:82:3b:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5B:AD:16:DB:E8:C4:67:1F:09:19:33:40:64:FB:3D:FC:E5:55:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8bd980b-a454-3cdb-b080-f933dd7f030b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.40.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:6b:33:40:58:e2:bf:08:c9:99:7e:a9:71:b4:4c:38:35:
         e1:1c:ea:eb:6d:ee:10:f9:e9:29:2d:b5:85:f1:1d:81:13:20:
         f9:1e:54:16:45:ee:68:b9:bf:ea:2a:71:d4:be:20:50:5c:a3:
         2a:96:6e:c3:6d:e9:55:84:45:20:88:46:80:10:00:80:b6:a7:
         54:21:04:5c:d6:a5:60:0d:ea:c0:70:8c:21:4b:bc:3b:b3:95:
         14:e7:97:8e:82:0c:8c:82:91:9d:b6:29:5b:31:4f:c8:96:2a:
         b8:0f:62:e4:52:52:89:f2:7c:eb:87:7f:96:f7:d7:3e:69:f9:
         c6:3d:5a:92:b2:e3:52:24:3b:da:88:d2:08:ff:2d:87:70:61:
         34:6b:a3:38:0f:8f:cc:30:e8:a7:75:da:06:40:f7:87:62:80:
         7a:79:20:70:31:49:d1:05:7c:e0:6e:03:69:f7:e9:5b:c2:81:
         69:2d:ea:21:86:95:a6:11:f8:25:fa:9b:a7:b2:5b:e2:ef:81:
         04:f1:75:e4:b1:76:d1:63:8f:a1:39:71:94:40:27:97:41:46:
         82:17:3c:cd:77:66:36:fd:9b:16:55:cd:5e:44:48:c3:86:fd:
         89:12:3f:63:65:52:14:21:34:3a:02:9f:7b:29:a2:c1:e0:f6:
         53:b9:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:08 2026 by rpki-client