Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa
File:                     0205037e-c076-3912-81ad-0a7baa3802d8.roa (raw, json)
Hash identifier:          zMMqlt3omflRcnB38C6Y7ib9KVzWFwxVXrWHdioL3VI=
Subject key identifier:   F9:97:F8:CF:99:F0:6A:09:86:C8:AF:C9:41:77:60:E4:A2:2A:B7:3B
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584E54B4B06B868C81F72507C640
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     38047
IP address blocks:        103.106.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:b0:6b:86:8c:81:f7:25:07:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=a92981fa-e56f-490b-ab21-5374ffead1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:3a:cb:a8:f0:3a:00:39:64:e1:9a:9b:32:
                    86:09:da:87:22:e5:86:98:60:c7:7c:94:b2:aa:7d:
                    5a:a4:00:44:ec:74:7c:ec:34:42:78:75:1c:2d:4d:
                    3e:67:ba:64:63:cf:30:2c:2c:0b:96:59:6d:85:32:
                    68:68:19:57:92:ee:bc:f1:bf:cc:81:fc:a4:e5:60:
                    31:c6:1e:ea:64:9f:0f:87:ba:f3:37:ef:8c:52:3f:
                    1a:1b:4a:8e:da:fe:e0:06:56:3f:63:b2:c1:94:dd:
                    7d:c9:3c:fa:fe:2f:82:47:87:d6:c3:f9:95:f0:e3:
                    ca:02:a0:f0:fd:a7:3a:a3:d7:0d:7a:b8:64:3e:22:
                    f9:4f:4c:2a:45:30:59:85:4a:d5:e7:6c:d8:11:df:
                    8d:04:68:ca:52:0f:dd:fc:f7:f0:09:9b:b1:b6:6b:
                    b4:3a:d1:58:66:d9:82:8f:00:80:30:d2:66:e4:b7:
                    43:13:f7:aa:8d:81:b0:33:a6:77:8d:93:60:ac:0a:
                    b5:f2:37:a0:21:f2:2e:1c:6d:cd:1d:d8:ea:cf:51:
                    eb:e6:a5:a9:69:49:2b:29:62:07:39:54:1d:e0:eb:
                    20:b0:06:92:50:6c:3a:5d:10:d2:c8:3e:23:f7:9f:
                    e0:fb:fd:38:1a:ed:9e:1c:ee:17:73:7f:0f:87:04:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:97:F8:CF:99:F0:6A:09:86:C8:AF:C9:41:77:60:E4:A2:2A:B7:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7b:b5:95:cc:f1:3c:38:f2:e3:84:67:87:ef:ab:2b:1d:1a:
         00:d8:59:d6:a0:0e:b3:5c:bb:f3:c5:59:b9:cb:bd:03:7f:1c:
         08:0d:ed:2f:4b:c3:bb:97:66:19:72:3f:67:66:e3:66:60:5e:
         31:1c:8e:a3:c3:9f:de:7f:8b:ad:90:a3:9e:8e:f0:f1:17:f5:
         3b:e9:13:5c:58:ba:ef:ef:ee:81:92:8c:96:65:50:82:bb:41:
         56:96:e5:46:9a:97:be:46:a7:99:15:e4:e8:87:7e:98:a7:b6:
         70:9e:8c:66:85:d7:3f:14:93:e5:31:cc:3a:85:1c:27:20:8a:
         90:b3:cf:10:1a:f6:9e:19:2f:40:d2:cc:11:5e:ef:9c:70:29:
         86:1d:be:52:71:e2:fb:a1:09:00:cd:14:3b:b1:fd:9e:c5:64:
         8e:33:b6:9a:59:d4:99:12:26:5b:ac:f2:9a:fa:e6:9a:8a:47:
         3a:6b:24:16:5f:3c:e0:fc:5c:49:fe:3a:12:c6:65:9c:96:05:
         eb:60:37:6e:a6:f5:56:77:93:41:60:2a:26:ba:c5:4c:ac:f0:
         77:c5:fd:fa:a6:54:c0:67:92:86:87:f4:5d:4c:d2:a8:bf:60:
         8d:03:37:e3:71:80:a3:d8:31:ba:b7:00:42:fa:6c:a1:dd:0a:
         a4:ad:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:10:20 2026 by rpki-client