Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/66cae280-6153-3b99-b55c-2a8bb2b5aaf9.roa
File:                     66cae280-6153-3b99-b55c-2a8bb2b5aaf9.roa (raw, json)
Hash identifier:          qUJPlz0JuuvqpF24SqfJgALdAIrdZHEUlu1EE3LBPWc=
Subject key identifier:   15:48:1A:CF:D7:97:79:B2:CA:99:C2:9E:9C:08:48:E3:1D:AB:D1:E5
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584CFDE7A21ECE9F5B63C1A7E460
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/66cae280-6153-3b99-b55c-2a8bb2b5aaf9.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        103.246.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:a2:1e:ce:9f:5b:63:c1:a7:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=0967c445-25b0-431c-9305-aab57338b593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:02:59:ad:cf:6b:b3:b4:57:75:24:e2:81:
                    16:73:cb:07:37:28:b6:55:56:89:75:37:2c:2f:22:
                    d5:90:00:a7:92:76:16:b6:38:9f:f2:f7:6b:44:7c:
                    a9:93:70:cf:6b:6a:83:f5:1a:66:ce:85:67:18:3b:
                    73:46:9a:bd:b4:ae:1d:22:5f:38:f9:fb:7c:d6:5e:
                    bd:df:f7:e3:df:9d:e0:01:f1:b7:48:de:70:e5:77:
                    04:f9:1c:b0:5a:23:64:f9:50:30:5c:c8:6a:fc:c3:
                    f0:10:f0:59:25:f8:f5:73:e9:66:4e:45:54:27:66:
                    56:53:a5:5c:c0:6a:23:03:39:4a:3c:5c:e0:17:16:
                    37:b0:84:08:72:20:06:84:3e:ca:bb:f2:fd:6b:79:
                    17:4e:19:29:a2:61:c7:58:fd:b1:ae:54:36:6e:d8:
                    23:4e:83:e8:64:7e:45:61:47:0e:d1:b1:fc:22:c3:
                    81:64:a7:56:b7:60:95:c3:47:ad:15:a2:3c:f8:59:
                    98:61:99:5b:4a:42:94:be:51:2f:78:fd:f2:a4:d4:
                    c4:ba:eb:ce:66:e4:aa:dd:f5:f4:c6:fe:5a:52:6a:
                    ea:6e:62:be:a2:ee:f2:12:0f:ee:82:c6:4e:0f:05:
                    a2:57:5e:f8:0a:d1:c0:08:dc:3d:78:fc:22:8b:a0:
                    27:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:1A:CF:D7:97:79:B2:CA:99:C2:9E:9C:08:48:E3:1D:AB:D1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/66cae280-6153-3b99-b55c-2a8bb2b5aaf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ea:70:a9:75:33:4f:60:54:06:30:28:d1:c1:3e:b6:80:29:
         5a:75:f7:c0:c8:88:f5:70:b4:f0:7d:51:33:ee:f5:3a:e1:9b:
         3b:3b:c6:c2:18:f1:38:29:07:d1:77:8f:07:d0:60:09:bc:5c:
         f2:3c:db:6e:c6:ec:b5:0b:83:92:6b:74:31:eb:01:9f:3f:74:
         6d:2e:f9:59:e3:bf:2e:57:8c:78:e9:28:09:17:7d:91:0c:9c:
         a1:ca:43:80:30:02:c4:df:20:6a:59:f4:65:5c:bb:48:cb:29:
         99:4c:0d:7a:4f:c5:bb:2f:1a:8e:23:19:d0:4e:aa:49:93:07:
         95:91:19:c4:d2:7a:7c:a1:74:45:44:fa:2b:c2:55:11:fb:e8:
         12:ff:0a:f1:8a:47:78:89:3f:ea:54:4c:a5:51:e5:d0:f0:ef:
         49:b9:70:b3:fa:33:18:52:06:d8:32:77:ae:d5:7a:d5:2b:33:
         50:45:a0:47:8c:4b:c7:c8:a6:bc:00:75:d6:99:c1:cd:00:b2:
         77:ef:be:5c:ff:6c:c1:c2:c3:ab:3c:b0:f8:b4:16:cd:85:36:
         ee:eb:02:d0:7d:b3:3e:9d:bb:26:46:e2:66:25:96:8a:b8:a3:
         9e:07:d2:e7:fd:37:e7:17:1d:6b:22:3c:ca:67:23:3e:65:fa:
         5e:ec:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:06 2026 by rpki-client