Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eec340d7-aad2-33ea-be04-12aba2a04d9f.roa
File:                     eec340d7-aad2-33ea-be04-12aba2a04d9f.roa (raw, json)
Hash identifier:          HNHc3x1pZSg5At93Rp6oRhy7KxjH6Rf+TGao18xa9kU=
Subject key identifier:   4B:10:C9:6D:B3:83:48:B3:3B:26:98:F7:05:47:E3:E2:B9:AB:83:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C1474984FF0272F166A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eec340d7-aad2-33ea-be04-12aba2a04d9f.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        108.35.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:14:74:98:4f:f0:27:2f:16:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=e8a7b510-d1c2-47d1-96f3-e5cbe42feed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:f2:38:56:03:df:06:68:17:7d:35:5e:30:
                    84:2a:95:d3:f3:38:cc:5f:f0:9b:05:53:71:59:fc:
                    ce:b1:43:8a:a9:64:25:55:ff:07:10:e4:51:a3:bd:
                    36:b7:da:6a:b1:99:43:41:6a:15:8f:98:15:2a:ad:
                    82:53:a7:fb:2b:db:49:4a:b8:35:4b:fa:7c:c3:c3:
                    aa:51:76:9a:74:44:2e:08:a9:30:81:5f:78:f9:22:
                    9e:58:a1:57:08:36:c1:59:9a:c9:e6:85:46:00:26:
                    b8:0e:e7:43:72:b8:01:9f:01:e8:d0:17:f5:90:1c:
                    5e:b7:14:89:77:19:62:9b:46:a5:e1:c2:54:f0:53:
                    46:df:1b:34:ec:20:ed:46:79:3d:e7:e5:d4:2e:dd:
                    0a:0b:d4:bc:68:36:83:19:51:b8:89:5d:46:ef:a8:
                    76:12:ae:44:b3:b4:c3:60:46:fe:aa:eb:f9:cf:94:
                    50:38:48:a1:c1:59:79:25:94:b3:6e:1d:eb:bb:6d:
                    1d:f2:62:d0:f3:df:dc:84:5d:1a:df:f9:1b:e9:99:
                    f5:75:e9:53:8b:df:10:df:a0:5b:12:ba:0a:19:23:
                    ff:24:79:a5:4e:2e:b2:60:79:51:bb:cf:3c:46:a8:
                    80:a2:21:8e:8a:24:86:d1:3e:3e:eb:96:fd:50:b7:
                    3d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:10:C9:6D:B3:83:48:B3:3B:26:98:F7:05:47:E3:E2:B9:AB:83:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eec340d7-aad2-33ea-be04-12aba2a04d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:72:00:76:cd:cd:0c:ba:8b:56:89:dd:ab:56:5c:04:4f:62:
         52:55:30:fd:2d:7b:11:ed:d5:b5:c0:3d:00:f3:1b:43:65:57:
         a9:28:c3:ed:ae:f9:d4:6a:63:fd:a4:6c:4f:eb:c4:9f:13:dd:
         01:b3:16:cb:89:7d:ad:0a:b5:8d:11:d6:e7:75:48:57:9f:15:
         ef:4d:32:db:6f:a4:9d:88:ad:0f:1a:19:02:d6:70:9e:ee:db:
         b7:e1:2b:0c:3f:5d:50:23:33:e0:38:8a:74:93:48:f4:3f:9e:
         e4:5e:d0:f2:2f:d5:a6:6e:68:bc:b7:a5:63:10:71:08:8c:80:
         cc:ad:38:19:5e:5c:0d:be:0e:cc:ae:aa:f9:95:31:cc:53:a9:
         13:e2:f4:e0:7c:c4:76:af:e8:ce:65:1d:b2:23:bc:26:9a:39:
         ea:a6:39:90:a2:91:8f:24:b4:82:fb:a5:74:fc:33:22:1c:ce:
         6e:79:de:5f:c5:6a:19:cc:2f:95:4f:bc:38:54:1a:19:4e:99:
         8b:43:f8:a6:98:be:66:b1:32:51:1f:1c:70:02:1e:59:77:33:
         61:be:b8:83:bc:c8:03:51:0b:ca:ba:bb:2e:f9:d8:13:df:31:
         a6:63:8f:bb:88:29:55:47:b1:53:89:4d:42:0a:f7:6a:40:00:
         9b:57:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:37 2025 by rpki-client