Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa
File:                     0205037e-c076-3912-81ad-0a7baa3802d8.roa (raw, json)
Hash identifier:          2+3/C4+fkG9sC6mwLtgVgrQFlz1olOQXaZPA54B8mUg=
Subject key identifier:   44:0F:93:8E:03:E5:59:E1:CE:72:5B:C4:3F:67:19:F6:6A:D3:A3:A8
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584AD23BD85D5E9F411EFE58C540
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     38047
IP address blocks:        103.106.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d8:5d:5e:9f:41:1e:fe:58:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=448b2971-da7e-4ba5-acfe-c6c426465da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:47:bd:d6:1e:6d:6f:d6:6a:57:1f:dd:a7:
                    34:93:da:65:7b:a3:02:17:3e:5b:2d:61:14:9b:bf:
                    c0:3a:58:10:3c:e0:37:ff:39:42:77:58:86:38:1f:
                    ba:ee:43:4d:37:99:53:92:f3:26:ca:e0:55:cb:d2:
                    9c:99:eb:27:cd:2b:ff:61:d2:e2:e4:fe:d5:cb:80:
                    95:c8:85:e9:11:24:01:e3:be:ed:ff:84:bf:16:fb:
                    33:8e:a9:71:df:02:55:e0:10:d1:67:6a:c1:66:32:
                    4e:5b:81:fb:55:0a:f6:11:8c:fb:49:b9:3a:f6:f0:
                    9d:40:4b:fa:0e:1a:2d:3f:10:f1:11:e9:e7:ea:f0:
                    ae:75:b8:38:f9:ce:42:7d:72:c0:66:d3:25:a3:48:
                    d5:93:67:c9:db:23:07:b6:c9:7b:a6:1d:51:9d:12:
                    3f:9a:3f:22:a0:fa:6d:16:59:34:c9:e4:8d:4b:af:
                    64:a2:2e:25:4f:77:3d:f3:b8:5f:2d:ad:9e:04:a7:
                    0e:53:76:bb:0b:c6:2b:0e:b4:1a:af:cb:78:69:a5:
                    f3:a8:2a:4a:61:6e:e4:7d:29:fc:24:c7:40:8d:30:
                    10:f0:0e:54:00:d4:28:47:97:6b:a3:8d:9e:e6:9d:
                    b5:97:a7:17:0d:93:7a:6e:f2:bb:4e:83:66:2f:60:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0F:93:8E:03:E5:59:E1:CE:72:5B:C4:3F:67:19:F6:6A:D3:A3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3d:3f:b6:c3:13:49:59:b7:60:1a:24:51:78:5f:bd:54:a9:
         fc:3b:9c:7b:04:e9:80:c0:97:68:d2:3c:86:0c:d4:7f:ef:ea:
         30:86:4f:89:aa:ef:67:58:a9:79:2f:10:e6:26:c3:0b:50:4c:
         b5:c8:51:39:d6:b2:c3:12:7b:a8:64:78:4e:47:27:c0:21:ad:
         b0:c6:d3:98:a1:30:41:91:88:60:56:9b:1b:ea:30:64:f2:ff:
         46:dd:0d:6b:e2:da:c4:62:2c:0c:52:27:df:98:22:88:0d:bf:
         ab:53:05:9c:2c:0a:d7:0c:3b:c0:67:79:32:62:7a:d9:a1:1f:
         50:f6:fa:61:9b:39:60:d1:fc:c8:be:8f:d1:77:33:68:45:93:
         33:62:e6:d5:38:1f:05:e8:17:93:62:21:3b:6e:fd:7c:81:48:
         8d:6f:fd:24:9a:8d:26:90:1d:1e:8f:70:1c:53:39:f8:ba:00:
         8f:9a:d4:00:e1:30:9a:27:5a:0d:ca:77:38:d8:99:5f:68:13:
         eb:f5:75:48:ee:58:d1:65:df:8c:72:b9:18:0e:dc:2c:0b:d7:
         3d:7c:79:29:54:67:04:2e:a3:60:2c:03:d1:9d:48:ff:98:66:
         08:da:0e:87:37:00:b6:d7:46:76:66:30:5e:ce:16:b9:95:a9:
         dd:4a:68:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9hdXp9BHv5YxUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk
MjYxMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
NDQ4YjI5NzEtZGE3ZS00YmE1LWFjZmUtYzZjNDI2NDY1ZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkslHvdYebW/Walcf3ac0k9ple6MCFz5bLWEU
m7/AOlgQPOA3/zlCd1iGOB+67kNNN5lTkvMmyuBVy9KcmesnzSv/YdLi5P7Vy4CV
yIXpESQB477t/4S/Fvszjqlx3wJV4BDRZ2rBZjJOW4H7VQr2EYz7Sbk69vCdQEv6
DhotPxDxEenn6vCudbg4+c5CfXLAZtMlo0jVk2fJ2yMHtsl7ph1RnRI/mj8ioPpt
Flk0yeSNS69koi4lT3c987hfLa2eBKcOU3a7C8YrDrQar8t4aaXzqCpKYW7kfSn8
JMdAjTAQ8A5UANQoR5dro42e5p21l6cXDZN6bvK7ToNmL2D78QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEQPk44D5VnhznJbxD9nGfZq06OoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4
YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvMDIwNTAzN2UtYzA3Ni0z
OTEyLTgxYWQtMGE3YmFhMzgwMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1
YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk
ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm
MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2o0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHY9P7bDE0lZt2AaJFF4X71Uqfw7nHsE6YDAl2jSPIYM1H/v6jCGT4mq
72dYqXkvEOYmwwtQTLXIUTnWssMSe6hkeE5HJ8AhrbDG05ihMEGRiGBWmxvqMGTy
/0bdDWvi2sRiLAxSJ9+YIogNv6tTBZwsCtcMO8BneTJietmhH1D2+mGbOWDR/Mi+
j9F3M2hFkzNi5tU4HwXoF5NiITtu/XyBSI1v/SSajSaQHR6PcBxTOfi6AI+a1ADh
MJonWg3KdzjYmV9oE+v1dUjuWNFl34xyuRgO3CwL1z18eSlUZwQuo2AsA9GdSP+Y
ZgjaDoc3ALbXRnZmMF7OFrmVqd1KaAI=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:29:46 2025 by rpki-client