Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11788f84-2e91-32ad-8647-02771e551c77.roa
File:                     11788f84-2e91-32ad-8647-02771e551c77.roa (raw, json)
Hash identifier:          0CKFnuIqlt/qCy0fzl31NjyHbwyw1+Br1yL5k8FH9bU=
Subject key identifier:   08:13:F0:5F:30:66:4F:73:5E:35:1D:85:F9:F3:AD:93:3E:5E:49:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E54B4B87672B94ED860737980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11788f84-2e91-32ad-8647-02771e551c77.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        108.7.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:b8:76:72:b9:4e:d8:60:73:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=b7608f18-5575-4fb0-b99a-0c0fa10d1c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:59:c4:8d:2c:9e:31:f5:ff:de:77:b8:74:96:
                    b8:35:de:32:a7:0a:00:ce:c6:e6:50:46:77:4b:c9:
                    19:ab:ac:e5:ab:bf:76:ea:9d:0f:f3:21:86:fe:57:
                    63:e1:ba:40:4d:8e:ba:ae:e8:ef:66:2b:b4:ea:f8:
                    be:25:2e:97:60:74:16:fa:e0:15:38:bb:44:08:5a:
                    9e:14:9f:b1:f9:13:92:3c:dc:93:c7:d7:13:84:58:
                    d0:2d:17:04:cf:9d:8a:75:27:b1:95:b8:10:af:42:
                    31:ff:75:ba:7a:05:5d:57:d6:60:34:32:17:6f:cf:
                    e4:77:fb:a4:04:79:ab:ab:0e:83:63:2f:49:94:e9:
                    30:39:90:0e:15:86:fc:c8:88:89:3f:57:76:57:80:
                    06:43:46:50:ab:e1:70:c2:dd:23:75:64:6a:dc:67:
                    86:54:3b:6c:15:f1:83:3e:97:a3:fe:a1:09:6a:60:
                    e9:e3:6d:12:91:c4:8f:aa:ea:5c:bd:8a:76:7f:1e:
                    a4:d3:4f:de:7e:73:e1:d1:9c:53:3a:21:8f:c4:62:
                    6a:97:47:70:dd:44:a4:c2:6e:3f:3e:db:36:b5:fd:
                    0f:ea:45:0f:2e:f4:2a:22:a6:38:82:b3:b7:71:6f:
                    20:e8:9d:57:f0:ea:e4:45:43:47:33:ee:e1:36:55:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:13:F0:5F:30:66:4F:73:5E:35:1D:85:F9:F3:AD:93:3E:5E:49:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11788f84-2e91-32ad-8647-02771e551c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.7.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:82:62:61:46:9b:0b:3f:ae:19:8d:3f:1f:8b:b7:68:9f:2b:
         1d:e3:d6:ce:5a:d4:ec:68:aa:52:11:ea:0c:54:31:2b:7b:3e:
         47:09:87:21:66:cb:4a:86:7e:8c:bd:b4:c6:66:af:1f:fa:75:
         35:6c:4e:76:8d:a8:b4:ed:b4:0f:26:53:29:43:cd:fe:d8:6f:
         5b:f2:77:ff:ee:ff:f5:01:d5:b4:7a:9c:88:35:fc:67:81:1b:
         8b:6f:d8:25:fd:d2:61:8a:6c:ee:de:20:1b:a3:c4:f5:12:94:
         d1:7d:2c:df:21:3f:e6:81:cf:63:21:7a:62:43:cd:24:00:02:
         6a:e3:96:7e:28:f6:8d:c4:b1:07:5a:25:c7:33:21:20:37:fe:
         f0:e2:ab:ea:f5:49:69:e5:6d:4d:d3:8d:24:fa:a4:b6:98:0d:
         10:02:70:c1:5d:f5:eb:01:8b:45:41:ee:a9:af:b1:fe:ff:d6:
         84:5f:1b:fe:5e:ba:fc:78:cf:30:15:c3:c9:b1:30:28:6d:f4:
         31:91:49:be:75:54:60:c1:55:74:cd:14:85:6f:98:f4:b4:46:
         28:fe:60:99:6c:0d:0b:4d:4c:26:3d:72:be:61:cd:ad:12:39:
         51:9b:fb:ad:90:a6:d7:3e:b2:ca:96:e0:cc:e0:b4:e3:c0:68:
         ad:e9:7a:3f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5UtLh2crlO2GBzeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
Yjc2MDhmMTgtNTU3NS00ZmIwLWI5OWEtMGMwZmExMGQxYzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglnEjSyeMfX/3ne4dJa4Nd4ypwoAzsbmUEZ3
S8kZq6zlq7926p0P8yGG/ldj4bpATY66rujvZiu06vi+JS6XYHQW+uAVOLtECFqe
FJ+x+ROSPNyTx9cThFjQLRcEz52KdSexlbgQr0Ix/3W6egVdV9ZgNDIXb8/kd/uk
BHmrqw6DYy9JlOkwOZAOFYb8yIiJP1d2V4AGQ0ZQq+Fwwt0jdWRq3GeGVDtsFfGD
Ppej/qEJamDp420SkcSPqupcvYp2fx6k00/efnPh0ZxTOiGPxGJql0dw3USkwm4/
Pts2tf0P6kUPLvQqIqY4grO3cW8g6J1X8OrkRUNHM+7hNlVyqQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAgT8F8wZk9zXjUdhfnzrZM+XknpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTE3ODhmODQtMmU5MS0z
MmFkLTg2NDctMDI3NzFlNTUxYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbAcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARYJiYUabCz+uGY0/H4u3aJ8rHePWzlrU7GiqUhHqDFQxK3s+RwmHIWbL
SoZ+jL20xmavH/p1NWxOdo2otO20DyZTKUPN/thvW/J3/+7/9QHVtHqciDX8Z4Eb
i2/YJf3SYYps7t4gG6PE9RKU0X0s3yE/5oHPYyF6YkPNJAACauOWfij2jcSxB1ol
xzMhIDf+8OKr6vVJaeVtTdONJPqktpgNEAJwwV316wGLRUHuqa+x/v/WhF8b/l66
/HjPMBXDybEwKG30MZFJvnVUYMFVdM0UhW+Y9LRGKP5gmWwNC01MJj1yvmHNrRI5
UZv7rZCm1z6yypbgzOC048Borel6Pw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:06:18 2026 by rpki-client