Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa
File:                     a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa (raw, json)
Hash identifier:          ceL53PwWmBRB23MydYW5vzeQQJm6+1n1WVB7SrFRtZk=
Subject key identifier:   02:E1:DD:D3:32:9E:A3:E3:8A:A3:D5:47:04:9D:36:3A:F1:7D:68:D2
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584CC8DC920E27D2CDCA07360400
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     138415
IP address blocks:        43.225.124.0/22 maxlen: 32
                          43.229.112.0/22 maxlen: 32
                          43.240.236.0/22 maxlen: 32
                          43.243.188.0/22 maxlen: 32
                          45.114.104.0/22 maxlen: 32
                          103.37.0.0/22 maxlen: 32
                          103.39.16.0/22 maxlen: 32
                          103.44.88.0/22 maxlen: 32
                          103.48.132.0/22 maxlen: 32
                          103.54.60.0/22 maxlen: 32
                          103.199.100.0/22 maxlen: 32
                          137.59.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:92:0e:27:d2:cd:ca:07:36:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=db1b06c9-8dd5-4900-ad36-6fcb1c9b2680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:9d:36:48:ba:5d:92:5f:5e:22:c0:a8:27:
                    ed:9e:df:d1:12:83:18:50:96:b3:f0:3b:5e:20:f2:
                    a4:4f:25:61:ff:a0:fd:87:2d:04:2f:a7:78:70:f8:
                    6f:fa:3b:43:3f:24:a1:8a:e5:e2:a1:e1:06:22:95:
                    1d:8f:c7:f5:39:d9:7a:c6:8d:25:1e:85:17:59:d6:
                    f4:f5:fa:f8:49:f3:45:65:aa:9f:cd:ee:05:97:0a:
                    18:fe:f6:2a:aa:ff:1c:09:a6:28:ae:11:8a:17:be:
                    32:3c:ad:b7:67:87:5b:fb:ce:e3:1a:e1:4a:51:e7:
                    8e:62:c1:78:23:dc:c6:81:3e:cc:6a:5b:30:dc:66:
                    3b:ea:59:ab:62:64:75:fc:e9:12:8e:ca:49:cb:2f:
                    4d:f8:e6:25:02:d9:62:a2:e5:04:43:f7:8b:a5:94:
                    fc:97:97:c2:61:bf:33:41:2f:68:fa:16:10:db:33:
                    fd:91:42:51:62:be:c0:3f:bd:cc:c2:41:f1:09:68:
                    4d:40:81:0b:c5:ae:1d:ce:6b:ae:52:73:24:7e:8f:
                    59:b8:00:cc:90:5b:23:ba:7c:1d:c3:74:47:94:bf:
                    0c:ba:b7:d8:ff:13:03:f6:67:60:23:c6:72:bd:9d:
                    0e:7b:af:ff:98:a9:8c:a4:d0:22:d4:2c:ab:95:d6:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:DD:D3:32:9E:A3:E3:8A:A3:D5:47:04:9D:36:3A:F1:7D:68:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.124.0/22
                  43.229.112.0/22
                  43.240.236.0/22
                  43.243.188.0/22
                  45.114.104.0/22
                  103.37.0.0/22
                  103.39.16.0/22
                  103.44.88.0/22
                  103.48.132.0/22
                  103.54.60.0/22
                  103.199.100.0/22
                  137.59.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:2b:38:8b:36:d6:37:68:7a:fb:56:2a:29:07:2f:40:34:
         5e:18:dc:f7:3e:77:37:ba:d3:04:2c:eb:63:39:9f:f6:0c:14:
         61:a9:c5:c9:6f:fa:1f:93:c5:19:22:d5:10:b4:65:e3:fb:99:
         89:e7:15:be:fe:c1:ed:aa:cf:e1:99:1f:75:eb:fa:01:d9:b1:
         76:f6:9f:0d:0a:70:bc:8d:ef:b4:59:68:6b:d0:66:b2:74:28:
         c3:b3:bc:32:62:a3:a1:de:10:a1:6b:d8:44:fc:a8:66:e5:0f:
         91:81:73:b6:36:77:d3:12:27:32:8a:21:3d:a8:a9:73:64:71:
         28:93:f6:a9:7c:f9:64:f5:0d:8a:1b:19:34:07:ea:28:93:35:
         c4:b5:71:53:8d:00:f0:06:6e:da:d2:21:ce:3f:18:11:e9:d0:
         b1:e5:27:a2:bc:c1:26:80:f9:95:6c:cd:9e:4c:7a:0f:8a:ab:
         59:ae:53:f7:46:d9:d0:9b:5a:73:c7:eb:1f:b4:8d:59:70:91:
         15:9e:cb:a2:85:d0:63:86:35:77:cd:41:fc:3b:53:37:a4:3e:
         6a:67:c1:f3:69:a1:98:34:f4:2e:cf:83:f9:53:3e:82:f8:0b:
         2a:59:e8:eb:db:2f:0d:03:87:86:77:1b:07:a1:59:fa:64:b0:
         ad:21:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:30 2026 by rpki-client