Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8bd980b-a454-3cdb-b080-f933dd7f030b.roa
File:                     c8bd980b-a454-3cdb-b080-f933dd7f030b.roa (raw, json)
Hash identifier:          cyJI2jPKvi1GkQFhVIdFC3u+XahcwZ0wCMvsf3Ii7lU=
Subject key identifier:   02:1B:B5:71:3B:59:3C:85:44:1B:64:96:FD:CC:A1:14:DB:E6:BE:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FE01FDD34864543545980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8bd980b-a454-3cdb-b080-f933dd7f030b.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        108.40.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:e0:1f:dd:34:86:45:43:54:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=82c55395-a598-4554-9c13-6fa7446eabbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:18:24:79:9e:42:9e:aa:81:30:c9:7a:7a:
                    06:c8:a2:28:b9:62:15:d9:9c:e7:1c:ff:09:60:da:
                    7c:47:c5:b3:fa:ee:90:69:f8:83:35:d1:26:45:61:
                    3d:65:a1:0d:8a:e6:01:4e:49:5e:43:2d:e5:d5:8b:
                    d0:ca:5f:86:6c:3e:29:fa:e2:bf:13:37:46:b3:ea:
                    78:fa:80:b1:2a:50:60:5b:95:21:b8:a6:f7:a1:0f:
                    03:d2:83:f2:20:03:1c:20:3d:77:5a:e7:a2:76:30:
                    e8:c5:13:e9:7b:bf:d4:f3:2d:97:4b:32:7e:be:82:
                    26:2c:f4:2f:27:08:73:e8:7e:b3:83:a8:8f:ec:fb:
                    e3:2b:c5:bd:1b:f4:73:e9:a1:a0:0c:d9:12:9d:09:
                    42:10:2a:30:82:8b:21:a9:ca:87:7f:85:1b:a2:f6:
                    2a:b9:97:30:03:ec:5a:a5:fd:61:21:a5:d1:88:b5:
                    33:53:83:51:54:5b:1d:7b:ce:ff:6e:8c:d1:18:79:
                    d3:0d:eb:f6:03:77:f5:f4:06:59:ed:68:8b:44:98:
                    3c:db:e7:f3:53:63:48:3c:af:44:d4:e9:eb:4c:ae:
                    ae:db:98:aa:2c:d6:c6:fb:cf:a0:f2:36:c8:bd:69:
                    91:9e:f3:e1:a6:58:cb:93:0a:b5:51:ff:8d:fe:37:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1B:B5:71:3B:59:3C:85:44:1B:64:96:FD:CC:A1:14:DB:E6:BE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8bd980b-a454-3cdb-b080-f933dd7f030b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.40.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:00:c8:f5:e6:ba:4c:7b:70:62:cd:12:08:6d:a5:d3:4f:fb:
         12:f6:09:9f:af:8e:c0:7f:64:69:54:7d:9c:ed:65:ca:07:60:
         d8:e9:17:f2:85:bf:81:09:02:c9:f5:51:5a:44:16:82:c9:6c:
         55:6e:ae:32:8b:ea:86:07:c2:22:89:6b:58:70:12:8a:98:2f:
         10:b2:41:29:c5:b1:89:4e:95:f2:ac:7e:bb:78:39:15:7e:1c:
         33:3e:29:02:d8:c1:20:f6:d1:05:c5:c0:3b:a9:27:46:86:0b:
         29:ec:7a:23:84:48:d0:de:13:16:9c:94:a3:48:f1:db:fb:9e:
         74:bf:18:4e:ea:98:33:30:e1:36:ae:88:ca:e2:ba:fb:3d:8c:
         c4:ad:86:52:1f:77:80:17:5c:05:56:68:a0:19:8e:6b:ce:ea:
         e0:6b:e0:35:79:fd:b5:98:59:7c:51:65:d8:ee:31:69:9f:1a:
         56:35:09:06:e9:71:a4:99:67:d0:96:6e:ef:f2:67:6a:d1:e4:
         57:55:66:fb:f3:a3:f2:5d:1c:bb:7f:79:6d:92:0b:58:a2:e1:
         b8:47:13:dc:5a:cf:17:21:61:74:c7:4e:0c:b8:32:06:10:64:
         fd:ee:95:f6:35:35:d2:f8:1f:e0:7b:74:3b:76:de:a0:5d:4a:
         7e:91:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:09:45 2025 by rpki-client