Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
File:                     c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa (raw, json)
Hash identifier:          64TEifIoeTloAj1CvdsMiBj1iMTJktpugCfoFb2iMfw=
Subject key identifier:   6C:37:24:FC:04:29:17:89:3A:8C:9A:C8:88:57:78:D1:1A:30:EF:01
Certificate issuer:       /CN=69dba5e3-26fb-440c-884d-525d04a32b0f
Certificate serial:       010D0C9F4328584D773A71342F87484A74151300
Authority key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     17034
IP address blocks:        103.229.152.0/23 maxlen: 23
                          103.229.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:71:34:2f:87:48:4a:74:15:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dba5e3-26fb-440c-884d-525d04a32b0f
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=c0d86b20-5704-4329-a1a4-5a0885a55db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:53:89:a7:99:a2:71:ab:ec:72:83:fd:d8:
                    4b:02:8e:4b:6e:62:ba:84:be:14:b9:9e:fa:61:24:
                    9d:7a:d7:7f:a5:a4:83:1f:74:8f:00:a5:86:75:f0:
                    ee:b1:4a:dd:f9:5a:0d:44:04:90:0c:9d:f3:03:3e:
                    39:96:a3:a5:15:d4:1f:f8:2c:af:da:8e:63:11:5a:
                    e8:e4:4d:e7:40:ff:55:ab:d2:83:69:1f:ae:00:77:
                    8f:35:06:37:1b:b6:d3:bd:75:55:47:d3:db:e6:f1:
                    f3:7c:21:f2:47:97:48:16:ef:17:b3:0c:2e:30:12:
                    44:a5:17:1f:5f:02:8a:7a:69:cb:a6:e1:33:f0:5c:
                    f8:3e:9d:c0:86:22:e7:69:6d:f3:f3:10:17:7b:23:
                    38:eb:47:75:91:a1:63:d7:33:78:f8:02:28:70:3e:
                    be:b5:ab:60:6f:fb:23:fe:23:14:bf:54:a1:2d:81:
                    7f:ec:70:0d:bd:9e:58:65:e7:e8:46:33:00:98:57:
                    bd:8a:de:48:d5:90:ba:a3:b5:72:e0:3b:e3:ec:ab:
                    bf:4e:26:70:2b:ec:32:8a:eb:c1:32:24:dd:04:e6:
                    74:9f:96:e8:06:3c:19:fb:c8:89:74:a3:2c:d2:f8:
                    58:98:22:7a:0c:33:ba:dd:e7:66:09:7f:64:4d:02:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:37:24:FC:04:29:17:89:3A:8C:9A:C8:88:57:78:D1:1A:30:EF:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:9e:01:03:ba:06:d0:3a:4c:2d:e9:b9:6a:93:a1:51:24:
         d0:a8:06:cf:38:84:8b:f2:da:22:44:48:0c:6a:bd:ed:d8:91:
         ca:c8:e2:98:7c:73:b7:ca:a5:ae:92:20:63:b4:85:80:d9:d4:
         68:50:3e:26:9e:7a:25:bb:13:0c:b1:22:3c:a0:40:9e:35:99:
         85:0d:93:47:9f:a1:a3:57:ea:7b:56:f6:58:19:82:52:8e:7f:
         bf:05:cf:88:a0:38:74:f5:d0:18:45:91:9a:c8:13:0c:92:f0:
         ce:7d:5b:5c:f1:30:f5:c9:1b:7e:b0:18:00:db:81:3b:ef:83:
         c5:8c:64:46:69:37:7d:e3:97:1e:d4:e7:47:52:57:e6:ff:5a:
         c0:4e:00:42:3b:22:bc:ad:06:37:30:5a:5f:e0:fb:35:c6:95:
         2f:ab:55:07:62:a8:cb:7a:13:24:44:ad:a8:22:06:07:18:80:
         2f:22:59:00:c9:01:92:8a:f6:7f:3e:4f:07:d2:bf:c5:2c:1c:
         39:61:52:1b:26:9d:fa:cc:32:c5:f2:d3:8e:1b:3b:bf:5b:f3:
         b3:1e:1a:fd:a8:88:e7:c2:6c:0d:d4:c6:18:0a:b9:cf:17:ee:
         05:b9:81:98:c4:0d:c0:36:14:fa:23:d4:27:12:f3:a3:66:d2:
         df:7d:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:30 2026 by rpki-client