Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
File:                     c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa (raw, json)
Hash identifier:          aTTRdgcShQNdZKUn5EUQa/z9442bgd2IsWLzDSUQDbM=
Subject key identifier:   C3:B0:21:50:83:2C:F7:61:EB:55:23:98:46:DC:E2:17:13:02:09:65
Certificate issuer:       /CN=69dba5e3-26fb-440c-884d-525d04a32b0f
Certificate serial:       010D0C9F4328584E577F47F2E5FD52E162C35960
Authority key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     17034
IP address blocks:        103.229.152.0/23 maxlen: 23
                          103.229.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:47:f2:e5:fd:52:e1:62:c3:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dba5e3-26fb-440c-884d-525d04a32b0f
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=4c21dfff-1d6a-4865-afc4-767242949537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:c4:c5:ec:c5:b9:9f:36:ec:1e:92:1d:f3:
                    6b:96:af:8b:c0:38:45:6a:db:14:bf:b2:1c:f7:64:
                    3c:e1:3a:8e:7d:ef:f6:18:83:86:e5:a8:e5:dd:7f:
                    6c:da:c2:be:6c:0f:3f:52:36:60:4f:06:c2:9d:d1:
                    42:34:ca:15:9b:6d:b5:cb:3f:d7:6c:a3:31:0d:fb:
                    71:81:43:2a:25:93:a6:53:27:2e:a4:cc:4b:47:af:
                    2c:0d:1a:0d:51:29:4b:da:50:24:37:ea:5b:1f:80:
                    1c:73:33:c3:23:4d:04:68:10:66:3f:db:e1:05:68:
                    49:6b:f4:50:9a:14:fb:76:22:a2:e1:79:28:44:ae:
                    5b:4e:dc:d3:97:8d:fa:9f:72:ea:50:7a:3d:78:50:
                    e6:d7:bf:e8:d0:06:87:c9:d5:ed:2f:41:c0:08:80:
                    92:8f:0b:35:4e:18:5d:18:5e:a7:9c:ea:c3:56:ab:
                    00:94:c3:30:3c:72:84:95:32:8c:c6:12:0c:24:0a:
                    18:c9:bf:57:58:20:c7:11:dd:9a:e5:a3:d6:cf:cf:
                    34:95:2f:e1:2a:40:f5:1c:6f:d8:49:5d:d3:2b:e8:
                    50:a5:d9:6f:4d:58:33:88:23:b7:9d:58:9b:07:09:
                    b7:15:0f:c7:f7:57:12:36:3d:42:bc:0c:84:fb:52:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B0:21:50:83:2C:F7:61:EB:55:23:98:46:DC:E2:17:13:02:09:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:a7:d7:c8:ac:77:17:89:e4:f0:0c:46:1c:fd:54:bc:b8:5e:
         78:5e:ec:d1:a0:49:8d:9e:d0:fd:79:c7:94:82:51:0b:fc:1d:
         2d:66:cf:8f:32:9b:e0:d5:8b:05:56:cc:56:7c:9c:ef:fd:6c:
         e3:7a:d1:24:24:95:81:8b:b0:64:1a:20:b6:0e:ed:fe:eb:7f:
         e5:3b:f0:c5:65:82:68:90:ea:c7:51:51:68:4b:83:47:c2:e2:
         fd:44:f8:50:c0:12:76:54:ae:29:72:09:7f:82:7c:75:ef:42:
         66:52:33:4e:e0:1c:3b:9c:4d:21:4c:c1:4f:1b:89:76:5e:5a:
         45:47:c5:b6:34:46:54:60:9a:51:7f:ee:f2:49:98:12:e5:1a:
         9b:c9:17:3e:5c:0f:3a:1f:d0:59:78:9b:9d:e9:d7:da:4d:89:
         fa:39:66:a4:98:80:45:ec:d0:a0:90:c3:af:ba:f9:7d:07:00:
         5d:46:23:cc:0c:2b:c4:ad:6a:08:1a:7e:4f:81:7f:a1:33:ca:
         ce:1e:f9:19:ef:97:6d:ab:08:15:c9:30:28:20:b5:35:67:dd:
         a0:ad:66:e4:2c:43:00:49:b0:53:63:0a:6a:2e:2f:fb:55:f6:
         3b:0d:dd:b4:ce:00:48:0e:8c:88:5a:c5:8f:9d:37:9f:f9:b2:
         be:06:76:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0fy5f1S4WLDWWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlkYmE1ZTMtMjZmYi00NDBjLTg4NGQtNTI1ZDA0YTMy
YjBmMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk
NGMyMWRmZmYtMWQ2YS00ODY1LWFmYzQtNzY3MjQyOTQ5NTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFvExezFuZ827B6SHfNrlq+LwDhFatsUv7Ic
92Q84TqOfe/2GIOG5ajl3X9s2sK+bA8/UjZgTwbCndFCNMoVm221yz/XbKMxDftx
gUMqJZOmUycupMxLR68sDRoNUSlL2lAkN+pbH4AcczPDI00EaBBmP9vhBWhJa/RQ
mhT7diKi4XkoRK5bTtzTl436n3LqUHo9eFDm17/o0AaHydXtL0HACICSjws1Thhd
GF6nnOrDVqsAlMMwPHKElTKMxhIMJAoYyb9XWCDHEd2a5aPWz880lS/hKkD1HG/Y
SV3TK+hQpdlvTVgziCO3nVibBwm3FQ/H91cSNj1CvAyE+1JqEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOwIVCDLPdh61UjmEbc4hcTAgllMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82OWRi
YTVlMy0yNmZiLTQ0MGMtODg0ZC01MjVkMDRhMzJiMGYvYzgwNTQ0NzktM2U2Zi0z
YWY0LWJiOTUtOTFlNzU1ZjBjYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjlkYmE1ZTMtMjZmYi00NDBjLTg4
NGQtNTI1ZDA0YTMyYjBmLzY5ZGJhNWUzLTI2ZmItNDQwYy04ODRkLTUyNWQwNGEz
MmIwZi5jcmwwHwYDVR0jBBgwFoAU1EB7b6cWWk8D4U58WQnzRuULjqYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82OWRiYTVlMy0yNmZiLTQ0MGMtODg0ZC01MjVk
MDRhMzJiMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+WYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALGn18isdxeJ5PAMRhz9VLy4Xnhe7NGgSY2e0P15x5SCUQv8HS1mz48y
m+DViwVWzFZ8nO/9bON60SQklYGLsGQaILYO7f7rf+U78MVlgmiQ6sdRUWhLg0fC
4v1E+FDAEnZUrilyCX+CfHXvQmZSM07gHDucTSFMwU8biXZeWkVHxbY0RlRgmlF/
7vJJmBLlGpvJFz5cDzof0Fl4m53p19pNifo5ZqSYgEXs0KCQw6+6+X0HAF1GI8wM
K8Staggafk+Bf6Ezys4e+Rnvl22rCBXJMCggtTVn3aCtZuQsQwBJsFNjCmouL/tV
9jsN3bTOAEgOjIhaxY+dN5/5sr4Gdtw=
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:05:29 2026 by rpki-client