Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/a30c0ee1-be63-3fb4-8057-ee41aec64921.roa
File:                     a30c0ee1-be63-3fb4-8057-ee41aec64921.roa (raw, json)
Hash identifier:          kkJqmhYfzfgNaQ7nqpEX0GHDA2OLO0aUwAZYL0TOX34=
Subject key identifier:   0D:89:A4:21:70:97:67:8C:FF:2B:59:77:70:DA:80:84:E5:AC:81:AD
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584E0A6FF422BEDAE839B2870B00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/a30c0ee1-be63-3fb4-8057-ee41aec64921.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     55293
IP address blocks:        103.204.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f4:22:be:da:e8:39:b2:87:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=9e1c100e-b9fb-402c-8388-dd151eb3d10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:21:7a:69:ac:2c:0a:79:b6:57:0b:ce:f4:
                    8a:91:23:2d:ea:71:db:82:d8:c6:78:84:02:6c:36:
                    42:b2:09:05:4d:0a:1f:cc:d4:97:47:48:cf:db:ec:
                    f7:4b:60:2a:d3:56:0c:4f:52:0f:d1:84:e7:65:2a:
                    05:2a:a0:84:97:fa:23:76:3d:72:b7:2b:2f:47:9c:
                    27:6c:2d:70:de:d4:1f:ec:08:f9:d1:69:a2:ac:db:
                    55:77:b1:89:66:dc:c8:93:18:3d:92:50:5a:0b:aa:
                    c3:7a:51:d9:87:94:05:c2:17:4b:ab:7c:a5:99:74:
                    4d:a4:da:99:22:f8:ec:57:32:85:94:cb:0e:8b:48:
                    5d:11:67:62:fc:48:27:0b:f1:27:ff:37:dd:84:f9:
                    35:77:b8:6d:ba:97:da:76:c3:95:f2:ba:ef:20:9f:
                    77:73:6b:68:15:48:4a:13:a3:55:55:fc:26:88:48:
                    dd:d6:54:45:6a:9f:cd:5a:e8:61:3c:bd:a3:9e:a8:
                    0b:f7:67:94:8a:0c:6a:d6:c9:c6:9a:bd:35:03:e4:
                    87:d8:b2:7f:ef:85:4a:2d:80:5e:4a:12:91:9d:7d:
                    38:1a:98:61:32:ae:a9:9e:fb:90:a6:2d:d3:d8:ea:
                    7e:03:53:1e:74:f2:aa:db:c9:2f:87:58:0c:a9:41:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:A4:21:70:97:67:8C:FF:2B:59:77:70:DA:80:84:E5:AC:81:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/a30c0ee1-be63-3fb4-8057-ee41aec64921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:de:a4:3f:96:55:4c:36:0e:3c:80:de:df:0e:4a:ec:14:2a:
         3f:1a:77:8f:be:13:ae:30:9d:5c:be:f3:b3:cf:14:44:79:95:
         06:b5:25:0a:2e:35:63:25:25:9d:57:ed:5e:9d:e3:0e:79:f4:
         54:a5:93:df:7b:78:fa:30:5c:01:34:69:45:f1:8e:48:bd:e4:
         fb:db:73:ae:56:52:48:83:17:06:e2:33:c9:8b:90:25:fd:46:
         a6:64:36:d8:dd:da:c4:9c:94:52:84:a8:ab:cf:7d:bf:65:32:
         d1:5e:df:c5:23:73:b1:36:e1:42:82:c2:12:2b:8c:16:4d:56:
         99:02:77:f6:eb:45:ad:34:86:4a:90:4b:b7:be:fb:a0:e6:db:
         a0:a2:60:0c:3d:ae:b4:87:5a:3c:af:d3:60:c1:fe:40:b2:39:
         20:d6:b9:6c:a2:f5:2d:e8:84:ea:e2:eb:dc:0b:ec:60:95:e9:
         b5:f6:61:07:ef:ab:2e:d1:d0:a1:f2:e1:bd:22:fe:5b:f9:79:
         0b:84:1d:e4:d3:96:69:a6:02:54:46:b5:44:3b:29:80:7b:b2:
         83:f2:62:a0:2f:ba:dd:89:13:7e:3c:24:8d:a5:74:98:6c:0a:
         de:58:f2:50:9e:2d:03:64:b5:d7:49:46:f2:ce:e8:80:87:75:
         29:ac:f2:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/QivtroObKHCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
OWUxYzEwMGUtYjlmYi00MDJjLTgzODgtZGQxNTFlYjNkMTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8EhemmsLAp5tlcLzvSKkSMt6nHbgtjGeIQC
bDZCsgkFTQofzNSXR0jP2+z3S2Aq01YMT1IP0YTnZSoFKqCEl/ojdj1ytysvR5wn
bC1w3tQf7Aj50WmirNtVd7GJZtzIkxg9klBaC6rDelHZh5QFwhdLq3ylmXRNpNqZ
IvjsVzKFlMsOi0hdEWdi/EgnC/En/zfdhPk1d7htupfadsOV8rrvIJ93c2toFUhK
E6NVVfwmiEjd1lRFap/NWuhhPL2jnqgL92eUigxq1snGmr01A+SH2LJ/74VKLYBe
ShKRnX04GphhMq6pnvuQpi3T2Op+A1MedPKq28kvh1gMqUFtaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2JpCFwl2eM/ytZd3DagITlrIGtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYTMwYzBlZTEtYmU2My0z
ZmI0LTgwNTctZWU0MWFlYzY0OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8yAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnepD+WVUw2DjyA3t8OSuwUKj8ad4++E64wnVy+87PPFER5lQa1JQou
NWMlJZ1X7V6d4w559FSlk997ePowXAE0aUXxjki95Pvbc65WUkiDFwbiM8mLkCX9
RqZkNtjd2sSclFKEqKvPfb9lMtFe38Ujc7E24UKCwhIrjBZNVpkCd/brRa00hkqQ
S7e++6Dm26CiYAw9rrSHWjyv02DB/kCyOSDWuWyi9S3ohOri69wL7GCV6bX2YQfv
qy7R0KHy4b0i/lv5eQuEHeTTlmmmAlRGtUQ7KYB7soPyYqAvut2JE348JI2ldJhs
Ct5Y8lCeLQNktddJRvLO6ICHdSms8tw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:50:10 2026 by rpki-client