Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/30ee6b89-17e1-3634-8d95-599f5b72da1b.roa
File:                     30ee6b89-17e1-3634-8d95-599f5b72da1b.roa (raw, json)
Hash identifier:          bAj69Fk/KnO3qC2HGjfVruWIfxxEuAUNdzCN0cxc/hw=
Subject key identifier:   65:A8:1C:B0:5A:D0:CF:76:76:E0:FF:A8:BE:D5:7D:E4:29:4A:FD:70
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584F78E82CBBD61A572ECB325090
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/30ee6b89-17e1-3634-8d95-599f5b72da1b.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     6079
IP address blocks:        103.126.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:2c:bb:d6:1a:57:2e:cb:32:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=da5dce32-6844-4e52-9d5d-60121be35e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:57:e9:be:31:ea:1c:59:07:53:94:58:f8:
                    c9:f5:65:75:a3:9e:bd:b3:f7:12:51:e3:92:31:4f:
                    75:85:e2:a6:2b:21:df:a4:23:e8:4a:16:9b:cc:15:
                    34:a7:f2:73:29:3b:9e:79:1f:7f:e9:db:86:61:01:
                    04:77:a7:90:70:00:0c:79:14:0e:43:57:e7:14:50:
                    09:e1:20:05:39:09:c6:85:9b:0d:c7:19:9a:0d:c6:
                    4c:71:5e:01:d8:12:d0:29:d7:96:ad:10:4e:04:e0:
                    8b:d8:1d:b2:74:77:24:bf:ba:f7:d0:10:21:14:a2:
                    c2:3b:f6:cf:26:29:35:84:09:a4:b4:2f:9e:35:c7:
                    c5:2f:d4:6f:69:76:db:7d:10:ac:09:f9:1f:0b:17:
                    b8:a0:41:3a:bb:98:7b:f5:1e:e4:59:c4:46:ec:76:
                    1a:74:ea:8a:75:46:34:38:ab:d0:f5:ca:1c:25:ef:
                    86:c5:16:53:da:b4:84:3c:35:09:f3:94:bc:6d:90:
                    87:8f:3d:99:b4:19:9a:44:0f:0d:a9:71:79:80:78:
                    e7:2f:21:05:7c:31:cb:96:44:e3:46:7a:bf:47:9f:
                    62:2d:02:df:65:db:d5:1d:fd:0f:09:7f:d3:f1:d3:
                    44:0e:9a:21:7f:eb:aa:e7:34:e0:b8:cc:69:00:98:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A8:1C:B0:5A:D0:CF:76:76:E0:FF:A8:BE:D5:7D:E4:29:4A:FD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/30ee6b89-17e1-3634-8d95-599f5b72da1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:26:a9:72:73:2b:4d:69:c6:77:78:d9:85:62:16:26:0c:
         2e:2f:2b:45:23:d2:84:f1:cd:d9:f9:2b:7c:fb:2f:7c:48:a4:
         ca:6c:a2:f2:c5:5a:a1:02:6b:93:09:9b:a7:1e:5c:da:4d:b3:
         2d:c1:f7:f8:c6:c7:ca:a8:60:ed:c9:48:ee:f2:b3:47:fe:8c:
         18:dc:5e:12:8e:6a:97:b9:1c:c5:9c:25:13:bb:5c:d3:50:37:
         01:09:95:6f:07:60:f0:96:de:a1:05:e8:08:38:04:4a:e3:2e:
         8c:24:70:9d:be:4c:44:1a:bb:7b:d5:d9:5e:9b:09:39:68:31:
         65:0d:e4:ca:81:28:64:83:ab:2b:33:b6:28:1f:be:62:6f:1d:
         ef:bb:f0:a2:3e:52:69:4a:51:47:65:e6:07:54:3d:e4:b1:f6:
         d7:b6:ec:35:03:c0:77:22:b3:d6:a7:7a:a6:1a:23:ce:ff:4c:
         9f:18:b5:eb:66:db:77:aa:d9:e3:50:10:9b:bf:0a:d8:36:c2:
         ed:0f:08:bf:c0:3d:4c:90:c1:44:81:c9:ea:d7:04:d1:2e:35:
         fb:db:ce:2d:df:63:09:3f:b8:3a:ff:b5:d2:ee:1b:0a:08:ab:
         17:7e:e1:d6:d2:bd:47:c9:49:e5:5b:df:97:a2:f3:c5:ab:bc:
         02:ae:41:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:56:34 2026 by rpki-client