Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64c019ba-5a4a-309e-a226-3dfa0ea14d2a.roa
File:                     64c019ba-5a4a-309e-a226-3dfa0ea14d2a.roa (raw, json)
Hash identifier:          i8NaD7+ZlIIxMKjLPFEYN2Iz7y/7/TyC/0LDm7nKMdY=
Subject key identifier:   3D:23:56:7D:A7:67:3F:11:31:FF:FC:FE:2B:2A:4C:B4:7E:1E:F4:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B36DD02D92292A8A21600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64c019ba-5a4a-309e-a226-3dfa0ea14d2a.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        108.22.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:36:dd:02:d9:22:92:a8:a2:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=7d3ea404-5493-4585-8877-06cd58e92da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:ac:92:23:36:e2:96:fb:1e:2a:1d:47:7c:
                    e9:e8:27:5c:54:d5:ba:da:02:80:ad:06:d1:54:6b:
                    30:c2:4f:0d:f3:ba:51:b3:4f:d2:a2:e6:84:3f:d0:
                    b9:6f:d1:23:9a:54:e1:77:d6:15:59:45:cf:e2:b4:
                    4e:66:ab:ab:eb:26:8f:9d:85:4c:c6:1f:dd:9f:a7:
                    dd:d7:c7:53:6c:15:81:73:a6:5c:26:31:a5:96:1a:
                    62:e5:fc:02:d4:6c:1b:0a:a4:36:c1:33:3e:1e:0a:
                    27:2b:2b:03:de:97:eb:41:92:cc:6d:88:0f:d6:5b:
                    36:eb:2d:02:74:46:06:b7:ce:77:7e:de:5f:96:0a:
                    93:75:dd:2c:05:a6:ce:ce:0e:82:d7:93:f7:f5:9f:
                    c9:28:38:9d:87:8f:ba:c4:8a:60:97:2a:3d:8d:fc:
                    8d:1d:f1:92:bd:12:d6:a1:98:bb:60:0b:b3:57:c1:
                    f9:25:df:26:f1:42:3d:af:69:53:6d:23:f9:52:6e:
                    b7:13:18:1a:de:62:a4:f5:08:7a:20:4e:8e:9b:74:
                    36:3a:92:80:2c:19:86:54:13:58:86:dd:9d:6b:ce:
                    fa:c2:58:f4:5e:4b:79:8d:27:ee:36:2a:41:fd:61:
                    46:de:6c:26:5c:4d:b6:50:c3:ea:f0:67:86:5a:4f:
                    b0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:23:56:7D:A7:67:3F:11:31:FF:FC:FE:2B:2A:4C:B4:7E:1E:F4:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64c019ba-5a4a-309e-a226-3dfa0ea14d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.22.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:93:9a:76:3e:72:25:a7:a0:a5:c3:8d:39:f3:f6:e2:05:2e:
         95:9a:08:73:ae:5c:99:f4:c5:3a:4b:00:8c:e7:7a:00:b5:e6:
         14:f8:df:1d:78:ae:cb:87:4d:f3:7c:34:48:e2:65:65:ed:31:
         e9:d1:f8:26:29:dd:b9:76:40:8b:fe:d5:ef:a9:c7:ee:fc:fe:
         7f:2e:6e:1a:cf:d5:2c:19:2e:b4:40:34:d3:3a:7f:20:3a:94:
         b0:0a:48:de:c4:75:27:24:9c:d7:33:83:ca:ee:58:7c:57:65:
         89:d0:97:fc:01:3c:dc:e9:6d:f5:9c:6b:12:ca:f4:e6:b8:61:
         61:5d:2c:6e:d1:68:ee:1a:ec:8f:55:71:75:c4:56:a0:3f:a1:
         74:93:6c:fb:38:17:f2:2f:9e:60:0a:8b:80:66:bc:12:32:60:
         c3:8f:db:10:5c:73:35:13:4c:9d:cb:e9:06:61:c5:0e:06:3b:
         a0:88:96:2f:76:a0:3e:f6:27:63:29:40:69:a5:a9:18:bc:55:
         fe:38:14:38:22:42:d0:f8:ab:41:9f:da:05:4b:2d:a4:c9:2f:
         a5:f3:01:fe:9a:03:1a:8d:a5:48:60:7d:4e:95:ed:74:3e:79:
         1d:79:32:7a:38:8d:ba:47:b8:98:82:60:1f:89:7f:87:ea:58:
         35:2f:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:03:54 2025 by rpki-client