Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa
File:                     3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa (raw, json)
Hash identifier:          1pliypzFwaFClXQBz1hgtk1teAiOtmSA3qnhvffAbmw=
Subject key identifier:   D4:66:12:19:24:54:E1:CE:C2:BD:6C:3F:FA:5B:1D:07:5C:FA:06:EB
Certificate issuer:       /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec
Certificate serial:       010D0C9F4328584EA7885D408D7CD903100DA5C0
Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        103.66.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:5d:40:8d:7c:d9:03:10:0d:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2e06b938-8036-4f09-91cc-ff3277f1f357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:e3:d7:28:f0:92:4a:1c:f2:28:b7:6b:22:
                    e5:9a:10:2d:20:4b:ba:b0:93:f1:38:52:59:d9:09:
                    c5:c8:a5:e0:b9:97:8c:56:c4:29:c0:4f:0d:4d:4c:
                    19:dd:6b:71:1b:4a:fa:2a:3b:d7:fe:bd:5b:ef:aa:
                    48:75:fe:f9:74:7f:8a:a1:91:f4:22:be:a6:58:3b:
                    5a:67:97:95:a6:f0:76:4b:39:53:85:af:38:68:d7:
                    2f:fb:e4:3b:41:97:a3:c6:59:73:50:15:e8:d3:e4:
                    f1:22:e2:95:02:db:3f:3b:39:b4:01:ca:15:f4:07:
                    57:1b:b8:25:0c:5f:27:c0:d2:0a:2a:7c:2f:43:86:
                    f2:10:c1:c9:74:66:c4:0d:86:a1:5b:6d:67:68:0a:
                    6d:1d:14:39:e0:eb:3e:be:4d:0d:c4:1a:17:96:ec:
                    fb:f7:e0:74:f9:9a:25:e3:c2:c7:bf:95:01:2b:53:
                    0d:25:e1:a4:ce:0d:45:dc:e4:db:d0:57:f0:ed:25:
                    9e:af:78:c4:84:70:96:5e:77:dd:28:fa:40:55:65:
                    82:93:fc:cc:d0:b4:2a:81:7f:b8:61:df:17:7f:d8:
                    80:31:d7:72:e2:33:50:9a:92:5a:d2:63:16:57:b1:
                    11:9d:22:72:f4:df:7d:dc:2e:c7:3b:8c:93:46:5b:
                    bd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:66:12:19:24:54:E1:CE:C2:BD:6C:3F:FA:5B:1D:07:5C:FA:06:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl

            X509v3 Authority Key Identifier:
                keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:39:d9:f2:12:1d:eb:eb:dd:e2:80:68:1d:d2:01:44:8d:29:
         9c:ce:f1:28:cf:60:5d:32:e1:7b:d9:0b:21:2c:68:9f:44:7a:
         63:2a:e0:76:d7:77:46:cf:11:15:56:be:66:85:9c:36:85:29:
         00:71:c9:ca:7c:8e:f1:55:21:b4:a0:2b:06:ef:09:e4:58:6d:
         74:f9:8e:8e:13:40:0e:cb:4e:90:d7:61:2b:83:d2:b4:1e:6a:
         6b:5a:9d:86:2d:be:7c:fe:04:59:eb:58:e8:c5:c5:59:24:2c:
         5d:91:f0:7d:8c:44:08:56:b0:eb:1a:54:be:fe:b9:e7:eb:51:
         d1:94:4c:6b:b8:b5:fb:c4:a2:e7:b1:b3:0b:e8:6c:4d:79:38:
         7d:bd:d3:56:54:0a:c8:bb:f8:cf:18:4b:74:72:2e:ae:a7:8b:
         5e:af:5c:5a:ea:ee:d6:b3:b3:d4:a2:2f:f9:8d:b3:07:a0:11:
         ea:c6:3a:86:3e:ea:26:b9:56:dc:e6:5b:a5:fe:47:b4:ae:6e:
         5f:34:b8:73:54:d9:b0:7a:03:ea:a2:cb:49:ad:b5:23:cc:37:
         fd:5c:97:84:46:52:82:c1:3f:6f:2f:43:26:25:0a:8c:9d:82:
         71:e2:db:8e:79:9a:e9:07:33:ed:e8:cb:39:53:71:89:e9:b6:
         20:8d:78:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niF1AjXzZAxANpcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi
NWVjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmUwNmI5MzgtODAzNi00ZjA5LTkxY2MtZmYzMjc3ZjFmMzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCPj1yjwkkoc8ii3ayLlmhAtIEu6sJPxOFJZ
2QnFyKXguZeMVsQpwE8NTUwZ3WtxG0r6KjvX/r1b76pIdf75dH+KoZH0Ir6mWDta
Z5eVpvB2SzlTha84aNcv++Q7QZejxllzUBXo0+TxIuKVAts/Ozm0AcoV9AdXG7gl
DF8nwNIKKnwvQ4byEMHJdGbEDYahW21naAptHRQ54Os+vk0NxBoXluz79+B0+Zol
48LHv5UBK1MNJeGkzg1F3OTb0Ffw7SWer3jEhHCWXnfdKPpAVWWCk/zM0LQqgX+4
Yd8Xf9iAMddy4jNQmpJa0mMWV7ERnSJy9N993C7HO4yTRlu9IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRmEhkkVOHOwr1sP/pbHQdc+gbrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4
ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvMzM1OGRkN2EtZWE1NS0z
MTA3LWI3ZjctZWQyM2UyNzI5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1
MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4
YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk
NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0IcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQ52fISHevr3eKAaB3SAUSNKZzO8SjPYF0y4XvZCyEsaJ9EemMq4HbX
d0bPERVWvmaFnDaFKQBxycp8jvFVIbSgKwbvCeRYbXT5jo4TQA7LTpDXYSuD0rQe
amtanYYtvnz+BFnrWOjFxVkkLF2R8H2MRAhWsOsaVL7+uefrUdGUTGu4tfvEouex
swvobE15OH2901ZUCsi7+M8YS3RyLq6ni16vXFrq7tazs9SiL/mNswegEerGOoY+
6ia5VtzmW6X+R7Subl80uHNU2bB6A+qiy0mttSPMN/1cl4RGUoLBP28vQyYlCoyd
gnHi2455mukHM+3oyzlTcYnptiCNeDs=
-----END CERTIFICATE-----
Generated at Sat Aug 22 21:11:35 2026 by rpki-client