Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
File:                     54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa (raw, json)
Hash identifier:          xmkjIBylbfrM3on5AY8b/51r8/WM/XUus9zAZNzL7GU=
Subject key identifier:   AB:AF:E8:75:CE:F2:A7:70:14:EF:80:BA:DA:EA:38:85:B6:18:F2:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E54B4B8E2DE556F0566E09200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        108.29.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:b8:e2:de:55:6f:05:66:e0:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=fd57b90c-512a-4d12-a003-00903778f6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:42:bb:0e:30:62:a8:25:9c:c3:cd:da:71:
                    b4:da:64:57:e6:7d:1b:26:d6:c3:c5:d2:62:2b:0a:
                    0d:ae:7e:dd:3e:22:b7:c8:20:87:e6:98:f9:ee:eb:
                    da:fb:72:15:bc:03:de:0a:45:02:cd:06:3b:ae:bc:
                    75:ef:df:e8:b2:23:e3:11:b3:a2:1c:45:ab:5b:d8:
                    26:f1:36:7d:6f:b2:4a:54:5d:9a:72:66:80:8e:98:
                    c2:86:0a:5c:66:63:66:64:8c:c1:13:39:8a:e5:b3:
                    e3:fa:ca:82:94:75:c9:38:d6:85:a0:a9:84:2f:f1:
                    87:37:10:f7:2e:0e:58:ed:48:23:14:ef:64:f2:64:
                    14:6c:02:45:ad:c5:1b:e5:8e:7f:ea:bd:42:ee:09:
                    a6:8b:ca:99:3d:03:c9:2a:b2:07:98:53:b6:04:49:
                    4d:61:6d:20:3d:95:ad:05:0e:2d:69:ff:57:52:bc:
                    b0:9a:4c:8b:c2:8c:a6:93:23:eb:43:e2:cf:2f:df:
                    f7:23:1a:f2:5c:62:7d:53:97:71:a4:6c:04:24:b9:
                    48:09:24:c3:a4:a1:42:59:64:6c:dd:3a:6a:10:93:
                    fc:07:1f:8b:18:27:ba:14:81:9f:9e:e8:c5:e4:e3:
                    12:d9:86:63:1e:ef:37:c3:c0:de:55:f2:4a:8a:c2:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AF:E8:75:CE:F2:A7:70:14:EF:80:BA:DA:EA:38:85:B6:18:F2:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ad:0a:9f:dc:ed:ef:9a:40:df:7b:60:af:6f:74:f0:6d:c7:
         76:5a:d4:51:6b:c5:ff:a8:b3:b9:e9:79:e1:a5:3f:2b:83:11:
         ec:e5:e8:da:96:ec:dd:a9:46:44:83:66:bb:62:f2:79:93:be:
         c4:d7:57:a6:e6:f6:31:b4:04:28:ba:85:67:4a:7f:6b:4b:d0:
         18:fd:6d:a1:61:31:47:b4:bc:20:5e:43:e2:b5:ba:d1:87:a9:
         84:2e:39:1f:50:e6:63:dd:c4:c4:fa:e9:05:8b:79:e1:75:85:
         55:6c:ee:0c:39:c4:59:87:3b:5a:93:79:a3:72:bb:02:c2:03:
         c5:bf:5f:92:cc:13:35:2b:9e:7f:15:f2:da:08:56:52:72:d7:
         96:79:fb:61:63:cc:cf:01:a4:23:fa:95:53:44:31:91:6f:98:
         98:15:9a:a0:c2:be:d9:89:2a:2d:6e:40:61:0b:3c:ac:62:85:
         6f:d7:10:96:f2:54:a9:80:f8:df:b1:af:f0:be:2f:27:dc:5b:
         05:63:83:31:9e:68:1e:71:ab:32:cc:3d:91:c9:e7:70:2f:5d:
         17:6e:00:37:0e:29:1f:04:d0:b5:97:66:31:91:f4:2c:8e:eb:
         de:bc:5e:50:0f:22:ee:c3:e3:08:80:9b:b7:d9:5e:80:18:a4:
         cb:9b:58:e6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5UtLji3lVvBWbgkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
ZmQ1N2I5MGMtNTEyYS00ZDEyLWEwMDMtMDA5MDM3NzhmNmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3NCuw4wYqglnMPN2nG02mRX5n0bJtbDxdJi
KwoNrn7dPiK3yCCH5pj57uva+3IVvAPeCkUCzQY7rrx179/osiPjEbOiHEWrW9gm
8TZ9b7JKVF2acmaAjpjChgpcZmNmZIzBEzmK5bPj+sqClHXJONaFoKmEL/GHNxD3
Lg5Y7UgjFO9k8mQUbAJFrcUb5Y5/6r1C7gmmi8qZPQPJKrIHmFO2BElNYW0gPZWt
BQ4taf9XUrywmkyLwoymkyPrQ+LPL9/3IxryXGJ9U5dxpGwEJLlICSTDpKFCWWRs
3TpqEJP8Bx+LGCe6FIGfnujF5OMS2YZjHu83w8DeVfJKisLSzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKuv6HXO8qdwFO+AutrqOIW2GPLNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTQ0NTNhZGMtODU1OC0z
OTg5LWEyYmQtYmY5MGViYjJmMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbB0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAP60Kn9zt75pA33tgr2908G3HdlrUUWvF/6izuel54aU/K4MR7OXo2pbs
3alGRINmu2LyeZO+xNdXpub2MbQEKLqFZ0p/a0vQGP1toWExR7S8IF5D4rW60Yep
hC45H1DmY93ExPrpBYt54XWFVWzuDDnEWYc7WpN5o3K7AsIDxb9fkswTNSuefxXy
2ghWUnLXlnn7YWPMzwGkI/qVU0QxkW+YmBWaoMK+2YkqLW5AYQs8rGKFb9cQlvJU
qYD437Gv8L4vJ9xbBWODMZ5oHnGrMsw9kcnncC9dF24ANw4pHwTQtZdmMZH0LI7r
3rxeUA8i7sPjCICbt9legBiky5tY5g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:56 2026 by rpki-client