Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa
File:                     a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa (raw, json)
Hash identifier:          syjhNfE9B/mcSu1jvW16H7Fv7yOGAAAzn7/k9zhScd0=
Subject key identifier:   58:57:E3:4C:DF:95:AB:A3:2B:C4:8C:5B:FC:05:1E:9B:F0:D8:1E:06
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F4328584EA788BE24E79FEA5AC02F0410
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399250
IP address blocks:        103.120.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:be:24:e7:9f:ea:5a:c0:2f:04:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99002dae-d366-4b25-a050-c49caccae082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a2:d3:da:5b:ee:f7:92:76:dc:b0:96:6d:f3:
                    95:35:8e:d8:4a:ae:cd:65:17:2d:4e:3a:4f:7c:d4:
                    64:89:67:ff:38:46:4e:ff:b9:ac:ef:fa:80:29:ea:
                    1d:5e:e7:a6:ba:a2:3f:60:76:cc:0c:52:0d:30:18:
                    30:6f:bc:89:b3:9a:c1:43:3c:96:d0:3c:a2:56:d8:
                    09:a4:b8:74:c1:c2:23:2e:83:0b:dd:1f:b7:7b:50:
                    14:c0:c3:7e:4e:88:36:c3:5a:c8:a0:12:d4:35:a5:
                    95:37:5c:25:f5:91:76:69:35:fa:95:6b:d9:9c:f4:
                    d1:82:fc:9b:88:e6:de:52:4f:1d:c3:d4:76:2c:a6:
                    5e:e1:a9:7c:c7:60:f1:bd:1b:b0:b4:1e:06:1e:aa:
                    b3:b6:cc:af:cd:37:65:a3:53:e5:23:a2:92:13:4f:
                    a2:af:ff:cc:1d:cb:d5:02:01:a9:f3:1f:03:17:79:
                    2e:12:6a:d5:fc:6b:a6:80:85:b4:aa:42:cd:3f:7c:
                    51:76:8b:97:0c:c6:b0:38:0f:6f:ce:98:46:88:7f:
                    ba:d6:39:79:47:99:ad:e1:9a:58:f4:52:56:01:0f:
                    54:c2:41:a3:ed:0e:e8:7a:a2:1c:3e:fd:54:04:2f:
                    c5:bb:f3:20:83:d5:0b:4c:d2:91:a8:e5:c1:08:27:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:57:E3:4C:DF:95:AB:A3:2B:C4:8C:5B:FC:05:1E:9B:F0:D8:1E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0a:c0:e6:6e:17:f4:d9:47:ee:ce:83:97:a3:21:51:d6:37:
         ff:63:07:da:58:11:82:b0:97:4a:6e:c0:76:33:06:25:88:cd:
         b5:74:2e:c1:07:5d:a9:74:a6:55:77:23:0a:18:24:85:2a:77:
         8a:e0:7b:fe:15:1e:1b:6b:37:d3:fb:82:12:61:48:38:ed:34:
         fa:47:f2:70:d3:36:6a:d5:5b:10:f3:4f:84:ea:2a:70:75:6c:
         82:42:77:95:6a:d0:5c:2a:ff:77:11:a8:42:97:33:b2:b4:0a:
         78:f2:1d:e9:67:01:9f:60:ac:f8:f9:68:e8:4b:5f:26:f1:bd:
         40:84:8a:86:36:e9:5d:9f:0c:42:ca:48:0c:5f:48:fd:f4:7c:
         c6:cd:e5:31:7c:90:0f:df:97:47:30:61:2e:4a:0e:64:db:14:
         59:2c:b9:c3:30:2f:a3:3d:7e:94:d2:1e:9d:3d:fa:c7:f1:af:
         30:67:77:74:13:87:d6:24:ce:37:c4:0f:25:1a:1c:9a:dd:a0:
         50:7f:32:84:32:1c:b9:ca:9c:1a:8a:96:72:2e:71:89:9c:87:
         c7:4d:7a:4a:96:f9:5c:56:13:47:fe:2e:82:87:21:4c:0f:c3:
         4c:53:53:24:4d:63:e7:23:e6:c3:52:50:4e:08:00:30:c7:12:
         34:2c:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 23:23:57 2026 by rpki-client