Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa
File:                     d898c3e6-e536-3098-b097-31f14862b8a8.roa (raw, json)
Hash identifier:          FqSphyxyAvxyId7MNZWxlB/6cNnSAPkIBSjnZ+REPI0=
Subject key identifier:   91:C7:C4:8C:19:FD:24:C7:96:B5:50:D7:4A:CE:71:8F:DB:4E:79:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A7B9E3BD998C747F5F600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        108.15.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:7b:9e:3b:d9:98:c7:47:f5:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=6944aca1-32b3-4fce-8575-0b5b490d839d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:31:9e:b7:b0:37:80:42:b9:99:e4:d9:6a:fc:
                    2f:86:2f:bb:c1:7e:1f:69:17:e4:55:2d:0a:c5:fe:
                    ff:07:03:89:74:82:13:ea:75:cf:6a:75:e0:e2:ef:
                    35:1c:ce:38:95:e2:94:e5:06:3f:b8:53:b9:22:fd:
                    37:37:df:7c:14:9c:92:03:0d:56:d9:d2:38:52:64:
                    58:3c:7c:e6:90:c1:ee:9f:ef:f1:df:2a:2e:0f:33:
                    f2:d0:17:72:d4:41:6f:8d:6b:1d:80:2d:d3:57:a5:
                    81:21:f7:2c:99:76:c6:ea:11:48:fa:dd:62:30:7c:
                    30:f8:d9:24:ad:2c:5f:5d:e9:a6:91:4c:3b:4e:e8:
                    2d:0c:cb:1e:a4:12:0b:a2:84:1d:41:b2:6d:c8:b4:
                    a3:06:94:91:75:b1:00:7e:3b:e4:0b:22:fe:77:b6:
                    d7:a4:39:37:d2:9f:6a:e0:32:16:54:97:7b:ae:6f:
                    6d:cd:cb:f4:d2:ad:7b:d8:08:af:8f:2f:bc:81:82:
                    fc:c0:45:5d:35:9c:ff:b1:9e:be:42:e8:49:e2:55:
                    18:e9:40:8e:d8:36:4e:46:4b:69:78:9e:17:a6:9e:
                    01:c5:2f:14:5c:6e:57:1b:ae:aa:51:e7:a5:d5:3d:
                    95:e9:7c:e7:21:85:99:0e:d4:ac:6b:08:bd:f5:47:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C7:C4:8C:19:FD:24:C7:96:B5:50:D7:4A:CE:71:8F:DB:4E:79:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.15.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b9:47:25:f7:4f:5d:82:dd:53:85:90:06:dc:d5:a1:62:9b:
         b1:b2:9b:e2:f0:0b:0f:8a:b9:4f:c7:01:9f:9c:8d:88:cd:54:
         ac:b3:91:f2:4a:aa:26:47:4a:6f:31:cc:62:7b:86:2b:dd:cc:
         a6:e0:09:7d:3e:7b:54:e1:35:00:d6:77:5d:64:8a:50:a2:97:
         fb:63:66:cd:c3:d9:a4:a0:3a:2c:9a:21:e4:50:47:4e:b5:4e:
         c9:1f:ec:cf:bc:c3:f0:cc:5c:12:b8:0e:6a:46:c5:7e:cc:d6:
         3a:0d:9e:0a:81:f6:8b:30:d8:3b:35:fb:f3:b3:db:68:44:68:
         f8:a5:d0:57:b5:ec:9d:14:80:a5:8b:23:1c:8b:f5:89:06:52:
         32:37:44:04:17:58:f6:91:17:05:62:fe:9d:4f:cd:f3:71:18:
         1d:53:29:4d:ac:4b:0b:c8:bc:a1:e3:b7:ed:28:89:c2:a7:c7:
         bf:1b:ba:49:9b:a8:c2:7a:1d:66:da:2f:92:57:68:0a:6c:bc:
         08:cf:12:2e:70:e8:ba:2d:52:00:fb:00:87:3b:3b:57:5a:a6:
         83:24:a9:c9:46:49:92:a8:9b:96:b7:c4:c4:64:5d:4c:0d:54:
         8e:20:39:2d:6b:6b:00:09:b8:07:0f:3f:95:3d:c6:0b:d6:05:
         26:b1:16:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnueO9mYx0f19gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
Njk0NGFjYTEtMzJiMy00ZmNlLTg1NzUtMGI1YjQ5MGQ4MzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTGet7A3gEK5meTZavwvhi+7wX4faRfkVS0K
xf7/BwOJdIIT6nXPanXg4u81HM44leKU5QY/uFO5Iv03N998FJySAw1W2dI4UmRY
PHzmkMHun+/x3youDzPy0Bdy1EFvjWsdgC3TV6WBIfcsmXbG6hFI+t1iMHww+Nkk
rSxfXemmkUw7TugtDMsepBILooQdQbJtyLSjBpSRdbEAfjvkCyL+d7bXpDk30p9q
4DIWVJd7rm9tzcv00q172Aivjy+8gYL8wEVdNZz/sZ6+QuhJ4lUY6UCO2DZORktp
eJ4Xpp4BxS8UXG5XG66qUeel1T2V6XznIYWZDtSsawi99Uer6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJHHxIwZ/STHlrVQ10rOcY/bTnnQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg5OGMzZTYtZTUzNi0z
MDk4LWIwOTctMzFmMTQ4NjJiOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbA+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAK5RyX3T12C3VOFkAbc1aFim7Gym+LwCw+KuU/HAZ+cjYjNVKyzkfJK
qiZHSm8xzGJ7hivdzKbgCX0+e1ThNQDWd11kilCil/tjZs3D2aSgOiyaIeRQR061
Tskf7M+8w/DMXBK4DmpGxX7M1joNngqB9osw2Ds1+/Oz22hEaPil0Fe17J0UgKWL
IxyL9YkGUjI3RAQXWPaRFwVi/p1PzfNxGB1TKU2sSwvIvKHjt+0oicKnx78bukmb
qMJ6HWbaL5JXaApsvAjPEi5w6LotUgD7AIc7O1dapoMkqclGSZKom5a3xMRkXUwN
VI4gOS1rawAJuAcPP5U9xgvWBSaxFo4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:07 2026 by rpki-client