Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/63a01b69-25df-375e-98fe-76fb0bb62a79.roa
File:                     63a01b69-25df-375e-98fe-76fb0bb62a79.roa (raw, json)
Hash identifier:          DMaWhhRniva+B1IXVKlsQQf5p+GQnD/kjPwjkO4Rda4=
Subject key identifier:   0F:3D:EF:4A:34:27:CC:38:AF:A4:7A:0F:1A:E0:3B:60:B5:61:5E:AB
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584F2C2259358DF7B5989549A800
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/63a01b69-25df-375e-98fe-76fb0bb62a79.roa
Signing time:             Mon 14 Sep 2026 13:00:12 +0000
ROA not before:           Mon 14 Sep 2026 13:00:12 +0000
ROA not after:            Sun 13 Dec 2026 14:00:12 +0000
asID:                     64013
IP address blocks:        43.225.124.0/22 maxlen: 32
                          43.229.112.0/22 maxlen: 32
                          43.240.236.0/22 maxlen: 32
                          43.243.188.0/22 maxlen: 32
                          45.114.104.0/22 maxlen: 32
                          103.37.0.0/22 maxlen: 32
                          103.39.16.0/22 maxlen: 32
                          103.44.88.0/22 maxlen: 32
                          103.48.132.0/22 maxlen: 32
                          103.54.60.0/22 maxlen: 32
                          103.199.100.0/22 maxlen: 32
                          137.59.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:22:59:35:8d:f7:b5:98:95:49:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Sep 14 13:00:12 2026 GMT
            Not After : Dec 13 14:00:12 2026 GMT
        Subject: CN=d8bf5fe8-7794-43f8-8e5a-e037c67d6d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:1a:3d:eb:09:28:08:b2:01:7c:ff:b6:86:
                    e2:d8:35:33:3d:fa:0e:87:b9:ec:84:35:98:9a:ad:
                    04:49:9e:71:df:17:90:c6:a2:c3:2e:aa:28:24:4e:
                    71:4f:94:ef:05:3a:a8:16:2e:28:22:47:db:71:44:
                    7f:81:b4:60:96:fc:cc:98:4e:d7:f1:49:e3:08:bb:
                    16:fe:8c:ea:40:ac:bd:49:f9:df:40:ee:aa:3d:f5:
                    1c:df:af:f0:16:2e:35:0c:60:87:bd:14:8a:18:98:
                    3f:83:1c:24:03:56:13:30:e8:ed:5b:e5:c8:fb:12:
                    16:f5:c0:4a:39:47:96:57:3e:a4:c1:ad:bd:d2:6d:
                    75:b9:ab:8f:f0:74:16:d3:58:86:57:af:be:e8:b1:
                    dd:52:d1:73:51:b3:0b:a9:a5:99:c0:e3:c4:1e:d4:
                    72:3e:7b:60:f8:b0:e9:36:7d:61:0f:b9:a7:34:48:
                    a0:42:e3:db:7e:93:a9:d1:8a:66:bf:79:9a:2c:39:
                    98:6d:2d:65:98:d3:df:32:d7:6c:60:97:15:36:5f:
                    4e:72:bc:07:43:94:1e:c6:62:ca:bf:fe:59:d9:47:
                    84:93:9f:b9:75:a3:4a:3f:fb:d2:44:d7:29:a0:f8:
                    3c:4e:db:7d:c4:3e:61:31:ce:95:30:56:40:b3:fd:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3D:EF:4A:34:27:CC:38:AF:A4:7A:0F:1A:E0:3B:60:B5:61:5E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/63a01b69-25df-375e-98fe-76fb0bb62a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.124.0/22
                  43.229.112.0/22
                  43.240.236.0/22
                  43.243.188.0/22
                  45.114.104.0/22
                  103.37.0.0/22
                  103.39.16.0/22
                  103.44.88.0/22
                  103.48.132.0/22
                  103.54.60.0/22
                  103.199.100.0/22
                  137.59.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:26:f6:5e:6c:61:7f:44:3a:2d:4d:46:37:eb:71:f7:c2:
         75:92:67:71:42:c9:5a:f8:e0:3f:6d:d3:4f:29:42:6f:cf:4c:
         cc:3c:e2:c7:ac:15:18:78:e3:6c:e5:8a:28:32:61:6d:28:58:
         a8:4c:e8:20:ed:28:f5:03:c8:7d:55:a6:83:b9:d1:15:cd:b4:
         54:2e:e8:56:8a:d0:b0:c4:0e:68:02:36:87:93:17:96:7e:56:
         4b:80:b3:a6:47:73:3c:bc:63:c7:b2:d7:40:1a:d8:37:d1:a1:
         9e:bd:49:9a:c0:0f:96:f4:1e:7e:dd:5e:28:dd:34:c4:59:47:
         4e:66:37:05:49:dc:98:4e:89:23:26:3f:5d:4c:5f:df:bb:98:
         db:3d:3d:3d:41:1c:28:d1:13:4c:87:44:fe:7d:73:bb:dc:8f:
         4a:fc:ce:1b:3c:c8:7a:3b:b0:5e:fc:93:8c:80:c6:af:ce:c4:
         4e:fd:cf:33:19:59:e9:6d:05:0f:ef:9d:5e:e9:fc:70:04:b9:
         d3:37:7c:85:1c:bb:0f:72:4f:e9:25:ba:f9:83:b7:f7:73:35:
         ef:7e:88:d8:18:f2:b6:f7:2e:f3:98:44:4a:e2:19:b8:ba:c3:
         bc:e6:28:11:32:50:a6:ed:76:1d:f0:0c:21:11:1a:95:5a:d1:
         86:20:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:22:16 2026 by rpki-client