Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81af97aa-6776-4603-a2e1-754275041e6e/4c5fbd6d-acdd-35bc-a053-693a500e309d.roa
File:                     4c5fbd6d-acdd-35bc-a053-693a500e309d.roa (raw, json)
Hash identifier:          yPDnIoPEVWEH41/ydX4gMEBRvwxgxg9H6OJkhqOH8Gk=
Subject key identifier:   F7:6D:A1:0C:55:05:FF:D3:B0:55:62:BD:01:10:11:C8:8A:80:9F:69
Certificate issuer:       /CN=81af97aa-6776-4603-a2e1-754275041e6e
Certificate serial:       010D0C9F4328584F2ABD04ACBBD76FBCB501CAC0
Authority key identifier: 3F:79:0D:9A:B6:AA:37:A2:98:08:A0:B0:35:D3:D1:83:62:F1:E0:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81af97aa-6776-4603-a2e1-754275041e6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81af97aa-6776-4603-a2e1-754275041e6e/4c5fbd6d-acdd-35bc-a053-693a500e309d.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     401138
IP address blocks:        103.221.82.0/23 maxlen: 24
                          2605:2bc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81af97aa-6776-4603-a2e1-754275041e6e/81af97aa-6776-4603-a2e1-754275041e6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81af97aa-6776-4603-a2e1-754275041e6e/81af97aa-6776-4603-a2e1-754275041e6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81af97aa-6776-4603-a2e1-754275041e6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:04:ac:bb:d7:6f:bc:b5:01:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81af97aa-6776-4603-a2e1-754275041e6e
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=36d814e6-39a8-44aa-a8b7-955b3f6ec245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:17:1c:05:99:a0:f3:31:cc:e0:44:44:55:
                    f1:09:f3:c1:22:20:40:44:ee:29:ba:f3:8b:31:22:
                    7d:f5:2a:fc:ea:ed:1a:56:be:12:2b:9c:22:22:57:
                    9c:1f:a0:0e:26:ec:d8:e3:ba:e1:eb:f8:b1:94:2f:
                    2b:b3:65:64:92:9b:6c:f1:21:d2:1d:f5:f5:fe:ff:
                    71:48:da:41:6d:68:47:15:97:c6:3a:f6:1a:6f:43:
                    84:9c:62:47:48:8c:02:aa:7e:23:9e:9a:b8:5d:7d:
                    40:a0:ec:93:78:b9:0c:10:de:53:59:f1:ef:51:aa:
                    2b:25:40:fe:a8:9d:65:6c:b7:3b:18:0a:a6:06:a1:
                    19:af:e1:77:d9:13:f3:a4:87:b9:c5:bb:69:92:0a:
                    f3:3d:f9:05:32:d0:1d:19:7a:c1:6c:c7:8a:73:c9:
                    8e:bf:a0:49:c1:9e:02:2f:bd:c4:ab:3f:d3:41:0b:
                    d7:c1:1a:21:a9:e6:7c:bc:7c:1e:cc:38:e7:d9:3c:
                    61:76:5c:24:86:e0:12:ac:54:b7:0b:13:61:2c:b8:
                    63:e8:a7:73:25:46:86:cc:bb:12:44:df:90:3e:9c:
                    8b:9e:cb:de:4c:51:27:43:68:4c:4b:c6:be:70:c4:
                    f6:0d:29:a3:63:7d:c9:99:dd:9e:f4:38:ca:94:78:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6D:A1:0C:55:05:FF:D3:B0:55:62:BD:01:10:11:C8:8A:80:9F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81af97aa-6776-4603-a2e1-754275041e6e/4c5fbd6d-acdd-35bc-a053-693a500e309d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81af97aa-6776-4603-a2e1-754275041e6e/81af97aa-6776-4603-a2e1-754275041e6e.crl

            X509v3 Authority Key Identifier:
                keyid:3F:79:0D:9A:B6:AA:37:A2:98:08:A0:B0:35:D3:D1:83:62:F1:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81af97aa-6776-4603-a2e1-754275041e6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.82.0/23
                IPv6:
                  2605:2bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:90:59:03:64:3f:f2:f9:61:0c:23:15:53:de:7e:6c:44:
         1a:d7:3a:60:01:94:f5:d1:86:b9:91:9b:42:78:78:6d:4c:37:
         c8:b9:9f:67:5f:ef:30:19:03:14:6d:a2:b0:85:ca:11:83:bf:
         b5:da:f8:2f:41:40:af:00:bd:9b:c4:0c:4c:e2:ae:21:d4:ae:
         56:58:95:e5:9e:ec:bf:4b:63:37:3b:89:ac:9a:fe:5d:36:ae:
         d9:60:ca:28:77:0e:8b:79:e1:85:7e:23:00:9d:8b:e7:df:2f:
         54:da:97:b4:a6:fb:8d:11:d4:14:9d:29:ec:1a:17:fc:72:17:
         a7:23:58:9c:e2:8a:51:53:b6:08:f4:b2:96:b6:4c:0d:d1:b7:
         3e:1b:28:94:0f:3e:a7:93:df:b5:ed:0d:4c:75:e1:ee:9f:47:
         86:3a:96:72:6b:f9:01:cf:57:46:d4:2e:bc:99:2b:9c:78:f4:
         37:9b:be:3e:45:6b:74:6e:f5:45:e1:ca:a8:de:35:68:fa:86:
         40:3b:00:65:1d:51:27:b5:66:79:1b:3c:7f:fe:dd:c7:92:e0:
         b3:b5:25:2b:8c:cf:5b:a3:65:04:96:76:3a:09:fd:78:60:c7:
         dd:3e:c8:93:17:9e:b9:a5:db:f0:ee:0f:2a:30:eb:bb:9f:a9:
         7b:f3:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:13:09 2026 by rpki-client