Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b329ce1e-9070-34c6-a13c-ce3f41a44122.roa
File:                     b329ce1e-9070-34c6-a13c-ce3f41a44122.roa (raw, json)
Hash identifier:          OkWTiwvNIWHd4rqqJ+MEfLlH6zPfZfU4ReRAqZFCELA=
Subject key identifier:   BC:7E:B8:46:56:04:AD:FD:D3:DD:96:89:1B:A6:EB:69:E6:2D:FD:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B08226CA67E6CBB1ACD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b329ce1e-9070-34c6-a13c-ce3f41a44122.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        108.22.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:08:22:6c:a6:7e:6c:bb:1a:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=2f19f2bf-06f5-415d-8b31-bb7850f05146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:5a:78:1e:e9:95:65:c9:ca:fe:18:bc:2f:
                    5f:1f:29:53:a6:36:10:eb:21:29:45:3b:12:54:fd:
                    b3:3c:77:37:fc:64:ba:53:90:71:67:77:40:4f:43:
                    64:70:31:fb:94:04:6a:ad:0a:89:4b:8c:14:48:7b:
                    92:75:df:cf:ae:d5:54:c9:4e:1d:8c:88:e4:5d:fd:
                    82:b3:51:4c:58:9c:5e:4c:65:f1:29:6e:57:18:fa:
                    d5:72:bb:82:95:79:36:67:7d:4c:d6:24:10:5e:20:
                    92:40:b9:fa:c3:13:38:32:5e:57:dd:01:c2:e2:1d:
                    6c:c0:19:aa:0c:2b:18:d7:b4:9d:7d:d3:37:c0:99:
                    7e:7f:31:ff:1d:0f:52:e6:fd:04:b3:66:bf:55:ec:
                    2b:d8:2d:27:37:87:50:7a:71:2a:0f:ae:e3:42:7d:
                    ee:a3:3b:61:f9:50:c2:ab:98:a9:0a:b3:8d:90:f0:
                    7d:f4:8f:22:6b:6b:49:0e:22:09:19:73:85:bc:17:
                    f9:63:fb:c0:56:58:61:85:d6:e3:82:82:0b:af:52:
                    b7:5d:ac:e6:7b:04:48:53:72:26:2f:6a:e1:15:16:
                    5b:df:90:72:46:bf:7a:bb:9d:d3:ea:8a:20:3e:6f:
                    b8:6b:16:9e:c0:8f:68:41:f7:d2:16:e9:bd:0f:06:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7E:B8:46:56:04:AD:FD:D3:DD:96:89:1B:A6:EB:69:E6:2D:FD:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b329ce1e-9070-34c6-a13c-ce3f41a44122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.22.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:45:5d:d8:a1:e6:de:87:25:56:44:93:1f:41:5f:b0:aa:92:
         a2:45:74:00:58:d5:d5:68:e7:6c:ec:f9:1e:57:3e:b9:6b:8b:
         2b:ba:1a:87:19:73:05:aa:0c:85:79:0c:bd:f2:1f:37:5e:a6:
         fb:b0:70:2b:38:20:14:01:ed:fe:b0:b7:46:c9:d0:8d:52:83:
         c9:3c:bd:43:69:70:1f:d9:b7:30:04:bd:a6:61:5e:c3:40:c6:
         3e:2c:9f:44:d7:19:d5:54:a8:53:d0:76:16:f7:de:3a:f0:68:
         d6:e8:da:61:fd:0f:72:66:fe:51:59:58:32:41:32:a3:91:80:
         24:98:c1:3c:52:83:20:7c:f4:86:2c:3e:a9:fe:e5:1d:e3:55:
         24:61:48:2a:ef:ac:88:2d:5b:55:12:e1:27:6e:cc:7e:b9:ce:
         8d:7c:75:67:ba:4a:1a:88:bc:90:55:51:6c:71:4c:af:8f:a3:
         15:36:a5:4f:5c:bd:b0:29:d7:8a:0a:11:27:1e:b2:de:85:19:
         e3:6b:fc:97:06:6f:0e:c0:93:08:4f:8e:d3:87:26:86:25:ab:
         ef:0d:77:ef:1b:c7:7f:39:a8:01:11:7e:bb:1b:42:1f:5e:20:
         aa:b5:ab:02:1e:03:dc:68:d7:91:7f:aa:ea:0a:6f:76:c4:69:
         0e:da:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:16:27 2025 by rpki-client