Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fef14402-f27e-3060-8f41-ab82044fdabe.roa
File:                     fef14402-f27e-3060-8f41-ab82044fdabe.roa (raw, json)
Hash identifier:          XCiIlp5fQqUqI+BijBoaUOAeuWy+ssWXR1NlD3eqiLs=
Subject key identifier:   8D:8F:DF:20:BB:55:78:77:9B:A7:36:F7:51:B5:9B:3F:F7:80:E7:8C
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584E4559F1641446D93C5AA351C0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fef14402-f27e-3060-8f41-ab82044fdabe.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     19905
IP address blocks:        103.72.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:f1:64:14:46:d9:3c:5a:a3:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=8ca0cef6-94da-4fe1-b5ab-664cd6411f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:f3:70:45:54:c7:9c:10:93:60:5f:7a:fc:
                    32:87:ff:2d:43:2b:21:99:44:4b:fb:d6:39:51:b0:
                    19:1c:a1:e8:c7:71:6e:e9:c4:a5:8e:22:94:69:e5:
                    29:c9:27:42:d0:d4:36:6e:04:5c:30:5d:08:50:91:
                    4d:ce:16:5f:f1:2e:c4:96:87:45:4f:0a:01:04:2c:
                    d7:3f:ac:b1:e8:42:b6:7e:00:b8:cc:ec:fd:5d:7e:
                    ec:da:39:f8:f2:5b:d7:af:26:44:8f:f6:3a:61:8d:
                    5c:4e:2c:65:58:66:41:05:c4:78:ec:08:c9:58:95:
                    5a:5c:72:b0:ac:b4:93:8b:2a:ed:86:9e:b2:e3:ef:
                    3c:94:ca:43:12:53:1d:ab:fd:1a:62:d7:0b:da:03:
                    72:ba:4c:80:b0:f2:00:9e:59:17:cf:03:f3:c4:6c:
                    d4:0f:03:03:12:0a:a7:e9:16:cc:8b:11:f4:0d:25:
                    e6:c2:13:7e:39:59:9f:c6:c4:f0:85:34:30:ab:b8:
                    9d:2c:55:f1:b8:ce:4d:11:f4:1b:78:40:d2:db:0c:
                    4c:38:3b:e4:1d:14:2a:6c:54:a8:74:b0:2d:63:95:
                    f7:38:e3:df:90:a6:11:bb:27:80:ab:49:0e:86:24:
                    46:21:34:29:1d:da:df:c2:68:fe:99:cd:cb:01:2d:
                    a0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8F:DF:20:BB:55:78:77:9B:A7:36:F7:51:B5:9B:3F:F7:80:E7:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fef14402-f27e-3060-8f41-ab82044fdabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a8:11:07:1f:89:b5:41:02:51:0a:18:86:6f:d4:9d:a2:e3:
         2e:1f:20:9c:fd:f2:c2:41:b9:0d:f5:32:a4:21:86:2b:29:8a:
         31:42:23:36:60:11:d0:4b:47:2e:ba:6d:8a:f6:33:c8:52:41:
         46:ca:4c:19:1f:fa:32:7a:c5:7b:25:60:11:77:ed:7a:f2:d5:
         dd:69:74:e1:e2:3c:be:53:51:b5:ba:3f:dc:7a:0c:77:30:16:
         8e:63:42:12:ea:d0:bd:44:85:2b:4f:b1:fe:6a:bb:83:18:f4:
         32:44:6c:92:fe:72:fc:7e:e3:76:9a:b9:7a:dd:81:9f:83:ee:
         72:35:b9:e8:c7:41:ea:82:44:b9:d9:10:d1:d2:eb:bf:66:00:
         51:4e:fc:e2:40:24:5d:e1:5b:ba:e4:7a:22:40:be:18:3e:03:
         e9:bb:7d:6e:68:eb:2f:b5:ba:9c:f1:01:ff:3c:fa:69:22:f5:
         6c:48:74:d9:0b:d9:3e:95:f3:89:85:62:72:42:b5:2c:6b:8c:
         40:79:1f:6f:7b:3c:77:58:cb:f1:77:c7:48:8a:bd:46:70:88:
         76:11:89:bd:48:c8:bf:8c:77:41:38:d8:c4:79:b4:23:a1:83:
         e8:a6:68:cc:85:7c:79:8d:1c:a2:7c:03:ce:28:1b:2a:05:1b:
         b9:08:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:08:15 2026 by rpki-client