Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1f1f3449-352b-33b4-b2d2-2d8371e938b2.roa
File:                     1f1f3449-352b-33b4-b2d2-2d8371e938b2.roa (raw, json)
Hash identifier:          nSwZwSlE0PR1FWvHUFgSAF4Ay1flycDoW/1DDNWCwp8=
Subject key identifier:   07:DB:D4:DB:52:0F:21:C0:FB:06:EA:88:21:C1:81:A6:B8:8C:40:FF
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F4328584E15E44CF0237144B76CCBAE00
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1f1f3449-352b-33b4-b2d2-2d8371e938b2.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     54054
IP address blocks:        103.219.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:4c:f0:23:71:44:b7:6c:cb:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=096fc92e-0ce0-4d53-a954-1a3da74c3b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:eb:ff:8a:84:7a:67:3a:4a:15:96:46:c2:
                    66:e6:fe:fb:83:cb:0e:bb:02:e9:02:0b:d0:2e:60:
                    8f:4f:2a:b1:08:c2:ba:4c:08:a9:75:cf:d6:28:e1:
                    7d:e5:9f:0b:50:2a:7a:41:62:2e:37:ea:57:c5:cb:
                    25:44:95:56:4b:be:a0:bb:b6:50:f6:cc:b8:0e:e3:
                    63:52:ae:4f:9c:e6:b0:b2:bc:25:8d:0e:06:bd:a4:
                    6e:13:82:fa:da:11:86:43:7a:68:d0:f0:d0:18:ca:
                    cc:dd:d9:11:fc:ad:fa:9f:0a:4b:ff:ee:b5:e4:82:
                    14:45:2d:dc:f2:d3:75:e6:d2:a3:5e:95:39:c0:e6:
                    be:17:0f:c2:7d:4a:9d:73:43:9e:a7:83:fa:30:5a:
                    d5:2f:28:7d:48:ac:a1:e2:99:1f:db:72:07:f7:4d:
                    98:37:c5:8f:d2:f3:bc:f4:2d:a5:03:55:ba:45:84:
                    54:a7:23:43:08:24:1a:42:a3:c9:3f:d2:5d:ea:72:
                    a5:c9:19:16:2b:d7:4a:de:7e:9b:02:5f:ca:03:b0:
                    61:07:7d:57:11:5a:a9:94:4b:f4:5c:6f:6d:f0:b9:
                    eb:50:7b:b1:f3:e2:28:a9:b9:5b:ac:db:61:df:a2:
                    2b:75:b8:b5:54:5b:45:f7:99:8c:e5:d1:c3:3c:66:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DB:D4:DB:52:0F:21:C0:FB:06:EA:88:21:C1:81:A6:B8:8C:40:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1f1f3449-352b-33b4-b2d2-2d8371e938b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:0b:82:59:9a:ce:0c:8e:e7:2e:b5:90:cd:d8:3d:c2:03:
         ce:df:5f:55:9d:4c:1b:3d:c9:5f:f2:14:d8:b1:36:88:10:27:
         21:57:00:5e:25:57:2c:00:fd:23:73:16:c4:79:3c:aa:8c:a2:
         9d:91:cf:45:95:89:56:d6:bd:f0:20:35:90:47:2d:2b:96:0e:
         ae:e3:ac:84:13:62:e4:ff:2d:a4:88:e3:75:d4:87:5d:51:44:
         2e:01:62:d5:3f:0d:e0:b3:ac:f5:d9:2a:f0:16:dc:13:99:c3:
         8d:3c:fa:57:10:b6:ff:d7:6e:19:a6:3e:2e:2b:b5:0b:8d:b6:
         76:97:eb:19:65:66:8e:28:86:b4:d5:aa:6a:3e:c9:43:b2:e9:
         e3:1c:72:6e:36:e1:6c:ab:40:f8:a1:c8:64:ff:e3:09:42:e7:
         1e:af:66:cd:30:4c:2a:69:3c:c5:55:0b:bc:95:bf:b5:1b:ab:
         e7:bc:88:1f:3e:39:88:16:69:5d:f5:21:7b:b0:d2:ba:e7:09:
         8d:5f:d8:c7:67:3c:af:aa:80:b3:10:f1:ee:73:0e:c8:38:75:
         18:98:1a:65:90:57:3a:be:da:be:03:0d:fd:3f:d4:49:25:60:
         86:8d:34:6e:39:48:53:39:65:cb:b5:5a:9c:47:70:60:bd:79:
         4f:b7:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:44 2026 by rpki-client