Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab9958bc-a62c-34a6-88e6-04108d50c535.roa
File:                     ab9958bc-a62c-34a6-88e6-04108d50c535.roa (raw, json)
Hash identifier:          ynC5bwAD416DY6ZSCz9cwh2dxLccfZAURU+qk7+Pims=
Subject key identifier:   F1:FD:D5:50:05:A2:6A:DF:AD:21:9D:3D:C3:A9:A5:45:D6:D1:53:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BDED8BCF9BF96F2DA0F60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab9958bc-a62c-34a6-88e6-04108d50c535.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        108.12.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:de:d8:bc:f9:bf:96:f2:da:0f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=0ad417da-e6ee-49c3-aabe-50e381a9a0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:56:ed:69:57:ad:32:04:93:62:84:0a:11:
                    b3:f1:85:a8:28:28:68:2a:5a:17:9a:d5:c9:18:78:
                    ef:dc:70:bf:c7:7d:b6:23:83:5c:e8:79:55:47:13:
                    6a:fe:a2:15:3c:50:df:d7:0a:24:f2:89:6d:c8:53:
                    13:a1:cf:be:73:8b:56:de:7e:40:12:74:c3:b9:8e:
                    07:2b:ed:9f:5e:4d:62:aa:86:8e:2b:f5:6f:a6:12:
                    2a:da:89:67:ef:b5:d9:92:a8:e0:e2:01:22:ae:e4:
                    31:f4:7f:c8:ae:6f:45:18:52:33:67:40:4e:de:52:
                    2d:e0:1c:3a:80:97:0f:b6:85:70:b1:ea:59:ac:be:
                    f1:88:bd:29:1d:37:88:68:4d:df:0f:e1:41:63:24:
                    03:a3:a9:02:08:e6:78:6b:94:38:ab:5a:9c:54:c2:
                    77:2b:96:56:c4:14:53:6d:9d:5a:ca:19:47:2c:cd:
                    06:05:b4:29:b5:82:9d:c8:8d:16:d2:6f:af:61:34:
                    56:eb:b8:e0:dd:93:53:af:cc:32:4c:38:4a:d5:5a:
                    0a:8c:13:65:48:70:70:c6:ed:98:43:dc:f2:42:d2:
                    5a:7e:d0:3a:4a:07:25:25:e2:96:5f:44:50:b0:dc:
                    86:d4:4c:3a:51:c2:44:aa:26:85:a3:73:8f:07:6f:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FD:D5:50:05:A2:6A:DF:AD:21:9D:3D:C3:A9:A5:45:D6:D1:53:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab9958bc-a62c-34a6-88e6-04108d50c535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.12.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:56:cc:d2:45:92:81:59:7c:e2:98:8b:28:c8:7f:66:f9:26:
         a1:4a:bd:96:5e:e3:cf:a9:39:38:56:86:de:9e:a2:ed:28:da:
         d8:8a:c8:3b:7f:1c:97:96:62:ee:a8:26:89:2a:e5:dc:7e:bc:
         68:54:c6:f4:1a:34:7f:99:c2:77:af:40:b3:f1:36:0e:27:bc:
         94:82:cf:30:29:59:73:03:0a:68:94:16:ea:8d:b3:e0:bc:66:
         4e:85:5f:34:39:a2:59:7e:28:c4:81:ee:fc:7f:8e:c8:13:d9:
         20:08:bf:0e:7f:05:d2:cd:8b:71:61:16:45:59:5e:57:23:f9:
         7e:8d:13:1e:93:0a:b3:4f:96:cd:ca:2c:04:3e:62:8a:8e:4f:
         22:69:23:22:a7:a7:ec:f0:79:5a:00:a3:35:80:73:92:fc:43:
         23:9d:cf:b2:bc:58:e4:6e:93:8a:20:c6:ce:68:9c:39:66:38:
         9a:d3:97:d2:77:9c:87:23:e7:d5:24:ca:14:ba:a9:a3:d4:99:
         46:2f:4b:ba:ab:26:da:47:6e:6f:0d:17:12:80:10:fa:d7:b4:
         26:a0:68:25:50:7e:f3:cc:28:c0:f0:78:79:5c:9b:b1:fe:e7:
         fe:f1:13:d7:1a:88:e2:86:d0:db:79:71:92:63:5a:71:76:ac:
         a4:6d:02:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:01:26 2025 by rpki-client