Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01e06779-fdfc-372f-ac73-94c9945aedb0.roa
File:                     01e06779-fdfc-372f-ac73-94c9945aedb0.roa (raw, json)
Hash identifier:          AgTtfFaHcKj7yyilzVo7JEFcJL4Qy/+6Bzop//9swlg=
Subject key identifier:   9C:85:09:0C:92:40:93:A3:6E:A9:3B:FE:41:E4:39:45:C1:66:83:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BE11A14606F2443AD5200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01e06779-fdfc-372f-ac73-94c9945aedb0.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        108.12.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:e1:1a:14:60:6f:24:43:ad:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=7e92bdad-94f9-4544-a024-bce12809707a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1f:5a:5e:5b:dc:b7:b8:72:3a:da:c3:a9:f3:
                    a8:a1:f1:0f:74:16:71:d4:41:9b:61:f8:c6:85:ea:
                    0b:b9:c2:98:61:7a:d2:39:b8:aa:d2:41:cb:f4:34:
                    cc:39:d4:75:12:ba:d3:19:be:44:7b:30:7a:78:4f:
                    dd:9e:a3:07:17:c6:bd:1a:de:ba:32:fd:8a:4c:a2:
                    8e:52:15:91:f1:69:3d:39:69:33:f4:ba:4c:b5:37:
                    f9:af:91:34:44:33:bb:09:32:61:25:f3:f6:6b:4d:
                    55:4e:c8:b7:d3:32:75:53:94:75:a1:06:eb:ae:93:
                    68:f1:d1:cb:e2:a8:ac:77:38:3e:9f:bc:96:5c:f6:
                    df:6a:72:b3:93:97:23:e0:48:0e:32:1d:ac:5d:1f:
                    fd:5c:c3:42:a5:b4:d8:24:39:ce:0b:ac:39:d1:6f:
                    6f:4c:56:a4:61:af:7f:21:92:e1:53:a7:a1:ef:fa:
                    61:c6:18:b8:90:48:e7:9a:3a:89:dc:4a:40:99:70:
                    66:d7:d4:8c:64:f8:fb:87:8f:2d:fe:e5:d4:11:4b:
                    29:46:39:a2:7b:2a:bd:39:45:da:78:77:ea:42:b0:
                    66:d2:83:91:35:ba:68:bb:69:55:6f:31:c2:98:af:
                    1c:3c:73:8a:cc:8e:cc:a2:43:8e:5c:93:a7:a4:2d:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:85:09:0C:92:40:93:A3:6E:A9:3B:FE:41:E4:39:45:C1:66:83:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01e06779-fdfc-372f-ac73-94c9945aedb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.12.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:53:10:bd:06:c8:6a:5f:ae:26:9e:4c:b2:e6:d0:28:dd:36:
         cf:0e:99:c2:7a:ec:6d:fb:be:47:1d:46:0b:ba:d6:b9:19:df:
         62:8d:70:dd:17:10:3a:01:d9:c2:c6:a8:dd:c1:35:84:2f:c6:
         ac:5d:af:23:53:f2:f3:7d:31:9f:fa:47:45:86:bb:e2:b7:bb:
         94:ca:7d:ee:97:3e:b0:10:8c:2d:12:70:f2:72:ec:62:e2:52:
         39:8c:ac:73:41:fb:b3:b8:78:4c:bc:3a:b6:90:23:82:b9:75:
         84:0e:47:7e:5b:9c:8d:dd:8c:ee:33:39:c4:a5:2f:e8:4c:b9:
         00:48:a0:60:ca:bc:36:70:e9:37:c3:6d:48:7c:c1:d7:24:1c:
         fa:a0:c5:89:c0:0e:b2:9d:84:ef:d5:ec:9c:3e:1d:eb:64:c0:
         41:02:6c:23:f3:3c:91:67:bc:15:55:5b:e9:05:f0:7c:e5:2e:
         89:f6:f6:e4:c6:33:c9:6c:c9:59:3f:4d:37:1e:47:d9:ca:40:
         5c:51:1b:32:d6:c8:e0:08:f6:f3:9a:85:04:86:a8:51:ec:bc:
         69:fc:23:ae:8a:82:2d:5c:95:25:d9:f6:7a:0e:cb:a2:d9:b5:
         a1:88:0f:02:f2:fe:48:9e:1b:56:a5:b7:a7:d2:99:72:d3:ea:
         6e:29:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:47 2025 by rpki-client