Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/276ddee7-4a91-3a78-94e7-0c9531dafff2.roa
File:                     276ddee7-4a91-3a78-94e7-0c9531dafff2.roa (raw, json)
Hash identifier:          OGCCFfNo79iZ67PjqET5ARpTZFc8FMMESb10cgsZoII=
Subject key identifier:   4E:C9:86:51:F7:D6:9B:62:CD:49:B5:88:E2:BC:0C:E8:DD:34:42:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BDEC903847FEFCCC9A260
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/276ddee7-4a91-3a78-94e7-0c9531dafff2.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        108.12.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:de:c9:03:84:7f:ef:cc:c9:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=d18428e9-6ac3-48b7-bce8-dd9ba2b7300b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5c:94:50:84:a8:41:c0:a7:68:4b:cd:b2:7a:
                    30:25:54:50:6a:93:30:f9:3d:3b:f9:5a:da:76:18:
                    07:77:33:12:f9:ba:87:b0:52:bc:14:af:50:d0:a5:
                    3e:6e:dc:a7:ba:32:56:52:ad:0b:2e:40:c3:fe:e7:
                    2a:cc:df:d5:90:e1:b4:d0:b6:4c:06:71:d8:89:14:
                    a4:9d:43:6b:2c:ae:7a:fc:1c:30:04:8d:70:e3:aa:
                    c3:bf:32:3f:2e:9b:d0:16:82:a0:78:28:c8:de:a5:
                    81:8d:9c:f9:8b:7f:1c:4e:86:72:d3:26:5e:73:c7:
                    25:1d:c7:ca:a5:62:b0:f1:59:24:31:80:8f:ee:b2:
                    0b:93:e0:2f:6e:e8:d7:f8:68:7c:5d:16:e9:62:36:
                    bb:a3:82:e6:08:69:f2:2c:07:34:aa:36:ac:07:db:
                    5b:80:a9:8d:a0:a2:8f:45:18:95:40:1d:67:31:bd:
                    15:d2:af:3a:ad:3a:9d:00:7b:75:7c:08:7e:40:64:
                    0a:e6:63:b1:4c:ad:70:6f:58:74:a8:53:b7:ad:47:
                    94:a5:10:93:24:23:29:dc:a5:9b:36:58:38:e5:d0:
                    d8:dc:3f:9a:ca:57:52:48:7a:da:f1:3e:52:98:c5:
                    e6:44:e5:ef:2b:ba:28:5d:49:ce:29:0c:b8:1c:3e:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C9:86:51:F7:D6:9B:62:CD:49:B5:88:E2:BC:0C:E8:DD:34:42:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/276ddee7-4a91-3a78-94e7-0c9531dafff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.12.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a3:cd:15:7e:f1:e8:00:84:4a:55:3b:7b:10:f5:e2:31:6d:
         36:90:2a:59:9c:03:ab:ad:56:ce:ee:c1:4f:2c:57:9a:44:e5:
         c3:93:ac:19:b9:1b:34:05:9d:0c:e2:ab:09:d4:b6:8e:cf:9d:
         24:bf:c0:eb:e6:fa:67:2f:82:8e:a2:e6:34:f1:f5:69:4a:9d:
         ce:db:e3:dd:56:ff:c3:24:cd:8f:e2:27:39:95:81:05:ec:1e:
         9a:61:b7:17:f9:00:2c:31:c1:7c:73:8e:28:f2:66:a3:89:63:
         f6:13:21:8b:cc:8d:52:b5:5c:01:57:a3:cd:fa:c9:c0:da:fe:
         4b:0a:2b:e5:90:a9:f4:8d:89:00:b9:00:05:55:64:ad:d1:ad:
         7c:9d:b2:8d:de:b5:bf:be:93:23:a9:51:cb:38:18:8c:ae:af:
         73:fe:4a:94:d4:dd:79:ab:a0:a3:34:b1:7c:c0:39:13:2c:c2:
         d1:42:d8:87:a8:a7:cb:9c:b6:ce:b7:1e:3b:0b:ee:2f:18:ec:
         32:28:f9:48:c9:63:31:ef:d0:ae:03:60:b4:6b:a8:40:bd:e1:
         7d:37:15:95:ca:5a:71:c0:66:52:d3:10:9a:1c:ff:c6:f8:7c:
         ff:85:6e:7a:c2:19:43:80:19:e3:9d:fd:3b:e7:53:b8:4a:b4:
         d1:db:37:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:10:00 2025 by rpki-client