Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
File:                     54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa (raw, json)
Hash identifier:          GSWN6GGSD9t7FCrp5jmO2GByI3EgmlRJkDE7G+nH9nQ=
Subject key identifier:   4C:B4:37:74:2E:9C:79:AF:B2:7B:05:FA:DF:A0:4E:43:8E:96:E3:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BE48846CE19A6408CF0C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        108.29.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:e4:88:46:ce:19:a6:40:8c:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=ad773b63-9da9-4fe1-a249-3f53399b9a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9e:37:19:97:c2:69:e7:7b:9d:d9:16:6b:cb:
                    7a:ca:b0:67:23:27:73:49:91:bf:01:16:21:a9:70:
                    34:e1:c4:27:c9:54:81:57:db:7a:4c:9a:65:2c:a3:
                    e0:e0:d0:f8:c7:9e:47:a0:42:9e:33:5c:47:60:92:
                    db:63:f4:0a:c6:c3:6d:e6:61:6d:82:4c:47:29:f6:
                    56:f6:36:0f:90:8f:3e:d1:28:6c:ec:a8:bd:38:f9:
                    03:1e:62:48:cf:d5:91:ad:14:67:7f:20:be:c2:96:
                    36:ff:a6:0a:92:52:d9:e9:53:b1:a5:92:e1:c5:d9:
                    01:17:14:8b:30:dd:6b:77:42:bb:b9:41:01:7d:46:
                    d0:2a:70:2d:89:34:62:cd:f2:5a:ef:25:9c:25:42:
                    ea:ae:9a:a7:bd:6b:2f:46:de:0c:05:04:ff:e2:49:
                    03:5f:3c:c0:0a:af:d4:8c:a2:2c:1c:ff:86:68:0f:
                    bf:2f:0a:20:98:97:02:2d:9a:7c:da:11:23:04:17:
                    7d:80:22:cc:d2:b1:b2:fb:61:37:26:36:51:de:86:
                    24:4f:e6:a7:0d:20:87:50:80:ef:80:0f:d9:9c:90:
                    11:c7:34:90:e1:95:03:5a:0b:41:1b:d3:5e:f6:8c:
                    f5:d2:88:87:45:d5:e9:0a:52:c7:a2:85:c9:47:e8:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B4:37:74:2E:9C:79:AF:B2:7B:05:FA:DF:A0:4E:43:8E:96:E3:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:ab:0a:e3:28:0f:5c:2b:63:8d:69:3d:ac:f5:25:4e:4d:
         c4:a0:9d:1a:fa:7f:53:4b:ec:bc:ab:7d:25:92:17:cb:d1:f9:
         95:f4:4b:fd:b1:96:02:7e:41:a4:39:5a:f8:71:c4:09:29:e5:
         fc:cd:71:89:82:88:b3:75:d4:ec:ac:f8:67:15:95:83:54:08:
         7e:10:e8:67:e7:1f:27:cd:1f:8c:ca:8b:4d:80:fe:5c:4f:ed:
         55:9b:18:0a:50:53:c6:72:4d:f9:a4:89:a0:ef:e6:3d:5a:73:
         13:f9:c0:d1:0e:6b:e4:1e:4f:49:2a:8f:47:27:05:8a:d3:a9:
         ff:16:be:75:5a:71:d1:9a:93:50:7b:97:d2:2a:23:16:9e:a5:
         f3:9e:bf:69:54:4a:b2:d3:24:ec:2f:f4:28:49:fd:cc:0c:6b:
         08:b3:20:50:44:ac:20:58:81:10:60:7d:1f:0d:22:60:2b:d0:
         37:c2:58:02:66:95:11:1f:c2:dc:21:41:f2:b0:c1:b5:c9:f6:
         4d:eb:8f:bd:bd:84:db:46:01:10:27:4f:0f:0b:27:bd:4f:2e:
         50:34:b5:38:0c:cb:57:00:7b:1a:84:c7:72:a0:81:30:51:0f:
         84:2e:93:ad:89:80:3d:d5:7e:de:a6:cd:0f:9b:5b:5b:06:8a:
         6d:34:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:16 2025 by rpki-client