Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2e83ed1c-f3cd-3340-bb05-ba349f93a397.roa
File:                     2e83ed1c-f3cd-3340-bb05-ba349f93a397.roa (raw, json)
Hash identifier:          JxLqMfI17B21IVT1FyyvrhzxTRD8Cmefurriabs+SCQ=
Subject key identifier:   32:2B:A9:BB:26:62:8E:54:4F:FF:68:23:33:85:B3:37:25:A1:78:68
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584DC29AF4077CF013244265D100
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2e83ed1c-f3cd-3340-bb05-ba349f93a397.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     396948
IP address blocks:        103.98.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f4:07:7c:f0:13:24:42:65:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=0dd308c4-f596-4aa8-9fea-a8c87cad9f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:89:aa:f9:95:9f:44:a7:bb:a0:3a:47:2b:b8:
                    10:b9:46:7d:f2:fb:42:be:2d:26:56:cf:4a:3d:e8:
                    1a:ea:a4:b5:a4:2d:12:31:31:0b:6f:77:75:43:ea:
                    32:d2:7b:03:a1:9c:f3:8a:08:cf:71:f4:1f:90:0d:
                    0d:18:b5:fd:5b:f0:61:f6:ac:ca:9f:7b:91:e8:c0:
                    7d:8d:2e:f5:47:e6:2a:e3:b5:30:02:cb:0d:22:1d:
                    4b:29:c7:78:30:0e:b0:58:0c:11:e1:f6:81:b2:ab:
                    a6:0f:c5:e6:5e:57:f7:a0:a0:d5:a9:0a:a4:19:86:
                    e7:77:2d:fe:4d:da:00:29:ce:3a:ef:ed:78:31:ac:
                    12:d2:b0:78:d6:db:dd:f8:67:68:26:e8:2d:d5:31:
                    0d:f5:86:db:5e:ae:43:75:1c:70:7c:ca:79:1b:53:
                    fd:b6:23:64:21:62:2f:4e:07:cd:b7:f4:26:1f:81:
                    d2:39:48:7b:d4:dc:86:28:fb:bc:58:47:42:60:dc:
                    20:f0:8b:5d:4b:27:b8:a7:a2:73:66:47:e7:6d:f0:
                    f8:38:65:4e:e1:cf:9d:59:3d:cd:5f:99:5e:fe:fa:
                    eb:b6:35:64:2c:93:a2:a0:66:6d:bd:2c:f1:b5:48:
                    e5:58:05:9a:6f:b2:ce:4b:fc:4a:6f:fd:a2:60:13:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2B:A9:BB:26:62:8E:54:4F:FF:68:23:33:85:B3:37:25:A1:78:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2e83ed1c-f3cd-3340-bb05-ba349f93a397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:27:11:aa:b5:84:89:c3:9f:7d:23:9b:a2:1c:fb:68:a9:
         11:5a:cd:a5:18:4f:d5:dc:2d:c9:4a:ed:17:10:61:00:3e:a9:
         13:13:c3:05:60:22:19:3f:1d:c7:81:e8:4f:77:5a:56:77:1a:
         f5:00:15:7d:76:2d:6d:38:bf:dc:50:0c:39:be:a4:cd:4b:9c:
         16:7d:a4:46:1b:12:ef:ac:09:db:2a:58:f2:b2:8b:25:41:bd:
         cd:91:90:61:6d:c1:1b:f6:ac:38:17:cd:b6:fa:8a:4a:b5:87:
         72:bc:80:b2:47:37:b9:9a:f8:4d:16:48:14:1b:99:70:f8:90:
         e3:cd:36:64:82:d5:a3:ed:1a:08:d3:c5:17:4f:a1:26:48:54:
         ca:89:67:4e:91:74:bf:ec:dd:48:19:d3:e4:39:14:70:ff:54:
         8a:23:a3:18:93:83:ab:49:16:07:f6:58:8c:49:07:82:49:22:
         ea:3d:48:aa:7f:e7:c4:2d:1c:2b:cc:58:25:ed:cc:b3:74:ac:
         5b:bb:d3:8e:2b:dc:c4:43:52:bf:6c:5a:40:31:ea:fc:5e:06:
         ff:21:11:c0:6e:fc:d0:70:80:6e:25:ab:70:19:ed:9e:f5:b7:
         1d:21:5a:2f:01:37:92:2f:7d:58:7d:2d:58:a7:a3:a0:59:18:
         b3:3d:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:39:03 2026 by rpki-client