Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f045cde5-b751-308c-a230-5e3d40827ed8.roa
File:                     f045cde5-b751-308c-a230-5e3d40827ed8.roa (raw, json)
Hash identifier:          /lABxArNyvOMyopzCyvqrISlyfKizkF7zqxtGSBv7OE=
Subject key identifier:   08:5B:54:DC:B4:80:7C:7F:E1:40:58:D1:A4:B9:71:05:40:81:04:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D7470068EA0A46438969FE678
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f045cde5-b751-308c-a230-5e3d40827ed8.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        108.4.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:06:8e:a0:a4:64:38:96:9f:e6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=b243e5b8-8b27-4698-839d-22b84ae703c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:02:14:26:e2:9e:01:68:4e:50:c3:a7:b1:
                    90:c2:34:19:92:b9:4e:2a:5a:5a:03:32:0d:9d:3f:
                    8b:c4:df:eb:bc:af:6c:e5:e4:46:cb:6f:9f:32:40:
                    10:ad:05:19:55:8f:d9:56:34:ba:9d:ef:01:a8:76:
                    5a:d0:95:95:1f:59:5c:3b:aa:fd:68:54:22:a3:22:
                    22:64:03:a2:3b:54:ee:b8:36:b1:bf:80:44:35:eb:
                    eb:f0:8c:62:ee:88:af:b4:56:1b:6e:55:c5:70:ea:
                    b6:57:45:c5:4d:2f:63:52:bc:d6:2a:8d:de:fc:a8:
                    56:0a:ea:57:26:90:bb:5a:07:26:88:d5:a1:90:b7:
                    58:90:d6:66:f5:33:97:a3:db:c2:15:80:14:47:f2:
                    a2:5b:30:a4:cb:02:29:0e:55:c0:52:e5:da:ca:6e:
                    5e:c6:be:af:2c:99:00:4c:ae:3c:82:54:86:cb:86:
                    67:d0:d5:72:6f:e2:fc:77:1f:1d:4f:bf:78:2d:82:
                    70:59:11:31:66:8e:cc:fb:c4:26:2d:1b:dc:29:c0:
                    0b:69:84:c8:17:52:c4:8e:94:16:91:62:92:af:bf:
                    6f:2c:c1:37:c9:a8:9f:b1:fa:37:75:c6:a0:55:7c:
                    63:89:8a:6a:6b:e9:0c:bb:35:f3:41:9d:5b:13:9c:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5B:54:DC:B4:80:7C:7F:E1:40:58:D1:A4:B9:71:05:40:81:04:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f045cde5-b751-308c-a230-5e3d40827ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.4.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:e2:f9:c9:26:a0:b2:7a:ea:3a:43:11:57:c7:2e:a0:4e:b5:
         95:62:89:63:9b:34:3a:23:28:1d:de:f1:37:cc:a6:ae:44:4f:
         9d:8a:e1:1d:e4:5e:b5:90:e3:e2:63:77:20:0b:c3:b8:80:f9:
         ff:0e:a3:5c:41:9e:3c:89:f0:99:22:6b:ab:55:3c:bc:63:d7:
         7b:f9:37:ed:85:6d:8b:ec:ef:23:c5:16:62:a6:14:da:2a:dc:
         86:2b:2d:f8:3a:cd:cc:02:56:2d:c3:b0:7c:73:13:ee:fe:16:
         8e:d6:0d:96:92:cc:c0:80:5d:79:d2:d5:95:12:85:b3:af:eb:
         f8:bd:aa:de:02:72:17:8b:0b:b7:75:59:81:fd:71:9c:5e:fe:
         22:05:64:80:1b:f3:03:ce:f4:15:64:ed:5d:01:ab:99:ef:29:
         56:04:0f:b3:0a:84:7e:0e:08:f6:94:a3:a0:12:06:e5:86:41:
         b5:6e:04:ec:2c:23:5d:87:b4:ae:b6:05:24:87:84:23:ee:a3:
         c7:81:77:5a:b0:77:b8:e4:d2:ac:36:b2:b3:e4:6b:e3:72:21:
         00:4c:9b:02:ab:8e:43:04:03:f0:33:c5:27:c5:78:49:3d:f3:
         c7:80:7f:cc:cb:ac:a0:4b:bd:80:5a:82:72:b4:44:21:e9:91:
         4a:b3:40:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cAaOoKRkOJaf5ngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
YjI0M2U1YjgtOGIyNy00Njk4LTgzOWQtMjJiODRhZTcwM2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn08CFCbingFoTlDDp7GQwjQZkrlOKlpaAzIN
nT+LxN/rvK9s5eRGy2+fMkAQrQUZVY/ZVjS6ne8BqHZa0JWVH1lcO6r9aFQioyIi
ZAOiO1TuuDaxv4BENevr8Ixi7oivtFYbblXFcOq2V0XFTS9jUrzWKo3e/KhWCupX
JpC7WgcmiNWhkLdYkNZm9TOXo9vCFYAUR/KiWzCkywIpDlXAUuXaym5exr6vLJkA
TK48glSGy4Zn0NVyb+L8dx8dT794LYJwWRExZo7M+8QmLRvcKcALaYTIF1LEjpQW
kWKSr79vLME3yaifsfo3dcagVXxjiYpqa+kMuzXzQZ1bE5zX2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhbVNy0gHx/4UBY0aS5cQVAgQQpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjA0NWNkZTUtYjc1MS0z
MDhjLWEyMzAtNWUzZDQwODI3ZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbAQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALfi+ckmoLJ66jpDEVfHLqBOtZViiWObNDojKB3e8TfMpq5ET52K4R3k
XrWQ4+JjdyALw7iA+f8Oo1xBnjyJ8Jkia6tVPLxj13v5N+2FbYvs7yPFFmKmFNoq
3IYrLfg6zcwCVi3DsHxzE+7+Fo7WDZaSzMCAXXnS1ZUShbOv6/i9qt4CcheLC7d1
WYH9cZxe/iIFZIAb8wPO9BVk7V0Bq5nvKVYED7MKhH4OCPaUo6ASBuWGQbVuBOws
I12HtK62BSSHhCPuo8eBd1qwd7jk0qw2srPka+NyIQBMmwKrjkMEA/AzxSfFeEk9
88eAf8zLrKBLvYBagnK0RCHpkUqzQGY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:52:17 2026 by rpki-client