Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c0430da-d1de-3aed-bfb7-b320d1946e70.roa
File:                     9c0430da-d1de-3aed-bfb7-b320d1946e70.roa (raw, json)
Hash identifier:          UpZPrH/ePRi9zyvTVhuhpuUwW2Vo+GkJ+ba8M3srSS0=
Subject key identifier:   4B:5E:07:BA:47:D8:2E:21:93:A5:52:9A:DD:33:3E:70:67:48:40:08
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CB551DD78D18C1C50FBB4E120
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c0430da-d1de-3aed-bfb7-b320d1946e70.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     21769
IP address blocks:        103.87.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:dd:78:d1:8c:1c:50:fb:b4:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=df656262-9fff-4a77-8b69-0af0d4d51ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:5c:55:8a:f0:97:ed:6c:fe:4c:94:31:b9:
                    ea:56:f8:ce:19:d5:29:24:90:b3:57:83:bc:72:c9:
                    30:cb:5c:6d:9b:b2:de:7a:12:0c:2c:9c:cb:2d:2d:
                    a6:e1:64:5e:eb:6e:5a:75:2d:01:28:36:89:6e:a5:
                    2e:db:cd:54:d1:3c:2a:57:b3:90:d9:be:6e:9b:48:
                    05:78:9e:45:60:49:8a:ae:19:d8:c9:a7:d2:f0:1c:
                    d3:71:16:cf:51:e6:d8:d2:15:3f:9f:5f:fa:8c:67:
                    30:c4:c4:c0:18:68:d0:16:a2:85:f7:77:6c:d6:ca:
                    2b:61:5f:1b:fa:a4:9d:be:cc:dd:8f:ab:80:fc:a3:
                    5f:41:4b:dd:35:dc:f5:3b:87:f2:f0:f8:ee:9c:d7:
                    3e:83:08:6e:61:8e:9b:7e:81:11:5a:d9:e0:d9:52:
                    21:55:db:04:31:f5:b2:3a:5e:7e:b4:d3:83:df:af:
                    07:38:34:1c:97:c8:a9:8f:50:bc:bf:8f:70:6e:29:
                    92:a9:05:8f:6e:35:70:18:0f:c9:e5:39:ce:64:60:
                    49:cd:fe:64:bf:e8:cc:99:11:de:b1:45:ca:07:b7:
                    cd:c2:92:0f:c3:0c:8b:af:cb:ff:f0:24:f8:3c:93:
                    09:d2:2f:ac:d2:7d:d7:e7:f3:c2:6a:af:ca:87:e7:
                    9f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5E:07:BA:47:D8:2E:21:93:A5:52:9A:DD:33:3E:70:67:48:40:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c0430da-d1de-3aed-bfb7-b320d1946e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:24:38:bd:dc:11:b3:a4:72:e7:fd:15:d4:2f:20:c9:7d:c8:
         93:09:37:ba:a4:1b:a1:19:62:c1:ac:51:c2:42:be:73:4e:37:
         39:8e:1e:57:c6:61:9f:52:d2:1a:d5:11:ad:61:46:fc:aa:c8:
         e6:54:01:ff:96:22:6a:e9:23:c2:c2:6e:62:72:03:92:75:2d:
         46:1d:4c:c3:e1:14:33:70:c7:d1:fb:b4:8e:85:c2:99:fc:58:
         8d:52:7f:7b:82:9d:fc:8d:8a:a0:21:b8:f1:3f:3b:af:18:27:
         4b:84:19:e2:0b:15:18:46:57:b7:72:2c:fc:f8:cd:1f:53:29:
         19:cb:5f:d6:2d:3c:27:3b:f9:02:13:95:f2:c6:e0:72:ab:b4:
         85:31:fc:5b:40:c3:06:f6:e5:62:44:e3:a0:bc:fe:8d:aa:52:
         40:9a:66:25:15:99:08:14:77:23:62:21:6c:dd:4a:a4:0d:7d:
         04:5b:c3:27:62:d6:86:b4:c8:6b:38:fc:a8:5c:f2:90:fa:3d:
         85:19:b0:2c:28:5e:ef:24:5b:6d:20:ec:12:0b:04:56:c2:cb:
         f4:9b:cb:61:74:ff:ae:ac:10:a5:6a:f6:49:a5:df:49:6b:e9:
         81:97:cb:5b:2e:53:b5:6f:cf:9e:fe:84:da:ba:9b:63:fa:48:
         26:5f:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:05 2026 by rpki-client