Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/f1608494-39eb-3321-bf56-a3c86cb5bdac.roa
File:                     f1608494-39eb-3321-bf56-a3c86cb5bdac.roa (raw, json)
Hash identifier:          PauS2qdZRZW1E5xd9sDum0+s+vzt3di6QaskLknFvmo=
Subject key identifier:   D6:96:D3:01:68:C0:47:52:50:08:CC:1C:8D:AD:96:1A:3A:26:B3:1A
Certificate issuer:       /CN=732c950f-c9c5-4d32-956b-e779bdb13479
Certificate serial:       010D0C9F4328584D4A8F85DEF3CA355BE34D4580
Authority key identifier: 3F:26:18:BE:C1:2B:E9:07:47:FE:F4:9E:AC:2F:6B:79:59:CD:58:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/f1608494-39eb-3321-bf56-a3c86cb5bdac.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     396507
IP address blocks:        103.232.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/732c950f-c9c5-4d32-956b-e779bdb13479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/732c950f-c9c5-4d32-956b-e779bdb13479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:85:de:f3:ca:35:5b:e3:4d:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732c950f-c9c5-4d32-956b-e779bdb13479
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=c2f6f77a-9d79-49a3-91ec-e18a99ac8e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:c8:a9:02:f1:68:de:7a:89:a5:da:35:62:
                    67:53:ce:33:8a:ec:9c:57:61:46:2f:61:8c:f1:15:
                    f4:24:f0:5b:8d:8f:6c:15:8c:02:3f:d8:a7:39:2d:
                    c6:bc:77:32:bc:83:c2:e4:6b:01:bc:bb:73:d2:91:
                    f2:d2:ba:3a:d1:e9:6f:1a:fe:e2:a6:e6:ee:b1:d6:
                    cf:18:07:4b:99:cc:76:f5:db:26:7c:b3:7a:e5:38:
                    ae:80:b7:7b:1d:a2:77:b9:2b:90:72:a5:d1:f5:c0:
                    ed:39:9a:f2:fc:0b:63:2d:48:6c:86:73:a4:23:61:
                    59:6a:a4:65:2b:7b:f9:7f:9e:24:d7:52:6c:51:37:
                    92:1b:09:82:51:fe:6a:84:b9:8b:c4:3d:83:32:62:
                    73:30:c5:50:db:02:54:24:1c:d0:c3:99:f9:3e:30:
                    a4:51:49:ce:b4:a1:4a:1e:0e:6a:3a:11:ff:58:10:
                    d6:e6:02:6b:06:de:ce:d6:f8:21:4d:fa:3c:4a:c8:
                    e3:c6:8b:ff:bf:1d:0e:ff:8f:a2:b1:76:9e:5a:2a:
                    af:9c:e8:9e:bf:fc:b3:91:d7:e8:04:c5:f2:7a:f8:
                    34:2f:61:7b:fd:36:87:47:49:90:aa:ad:37:7d:6b:
                    87:70:ad:c7:f2:86:b6:fa:4e:66:32:b8:50:90:23:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:96:D3:01:68:C0:47:52:50:08:CC:1C:8D:AD:96:1A:3A:26:B3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/f1608494-39eb-3321-bf56-a3c86cb5bdac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/732c950f-c9c5-4d32-956b-e779bdb13479.crl

            X509v3 Authority Key Identifier:
                keyid:3F:26:18:BE:C1:2B:E9:07:47:FE:F4:9E:AC:2F:6B:79:59:CD:58:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:72:fa:36:ab:63:59:1a:d2:81:40:aa:33:18:09:c1:d4:bf:
         eb:d7:97:20:cd:e6:3d:5c:30:47:73:24:68:93:89:7c:dc:b3:
         c7:a2:fc:db:ce:65:58:a2:e4:ef:ad:bb:a3:b8:9c:4d:d3:06:
         f6:f4:42:7f:20:04:c5:d0:85:bf:db:be:dc:df:06:60:14:61:
         33:dd:61:c7:1a:21:f2:ff:21:66:52:0e:b1:43:30:c7:b2:d3:
         91:76:c2:e7:e6:7c:35:78:a0:2f:7a:39:f7:2f:bc:6f:bc:9d:
         2d:3d:6c:c8:e3:ab:bf:1a:02:f0:16:ac:b2:37:20:e3:ac:66:
         40:a1:f6:54:85:57:de:8b:19:b4:9d:a6:a4:c1:a3:fd:20:c4:
         19:a9:99:1c:81:df:4c:c4:92:23:1d:ab:44:82:7e:85:a2:7b:
         39:32:4e:c3:f0:75:de:fb:5c:d2:91:8b:b4:c2:48:fd:28:ff:
         d3:7b:8b:37:72:0d:56:d0:bc:e6:25:51:b9:45:00:2f:03:3f:
         c1:85:fc:5c:14:b3:ab:0b:fa:e4:91:36:13:23:7d:95:e1:a5:
         25:78:61:a1:d2:db:cc:86:eb:cc:98:ad:00:5f:80:ba:ba:ac:
         66:7a:ed:a8:83:59:4f:90:91:af:d8:b0:cc:be:28:7e:5a:b5:
         9d:f6:fb:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4Xe88o1W+NNRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyYzk1MGYtYzljNS00ZDMyLTk1NmItZTc3OWJkYjEz
NDc5MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
YzJmNmY3N2EtOWQ3OS00OWEzLTkxZWMtZTE4YTk5YWM4ZTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBLIqQLxaN56iaXaNWJnU84ziuycV2FGL2GM
8RX0JPBbjY9sFYwCP9inOS3GvHcyvIPC5GsBvLtz0pHy0ro60elvGv7ipubusdbP
GAdLmcx29dsmfLN65TiugLd7HaJ3uSuQcqXR9cDtOZry/AtjLUhshnOkI2FZaqRl
K3v5f54k11JsUTeSGwmCUf5qhLmLxD2DMmJzMMVQ2wJUJBzQw5n5PjCkUUnOtKFK
Hg5qOhH/WBDW5gJrBt7O1vghTfo8Ssjjxov/vx0O/4+isXaeWiqvnOiev/yzkdfo
BMXyevg0L2F7/TaHR0mQqq03fWuHcK3H8oa2+k5mMrhQkCMOmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNaW0wFowEdSUAjMHI2tlho6JrMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MzJj
OTUwZi1jOWM1LTRkMzItOTU2Yi1lNzc5YmRiMTM0NzkvZjE2MDg0OTQtMzllYi0z
MzIxLWJmNTYtYTNjODZjYjViZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzMyYzk1MGYtYzljNS00ZDMyLTk1
NmItZTc3OWJkYjEzNDc5LzczMmM5NTBmLWM5YzUtNGQzMi05NTZiLWU3NzliZGIx
MzQ3OS5jcmwwHwYDVR0jBBgwFoAUPyYYvsEr6QdH/vSerC9reVnNWBkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MzJjOTUwZi1jOWM1LTRkMzItOTU2Yi1lNzc5
YmRiMTM0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+jOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdy+jarY1ka0oFAqjMYCcHUv+vXlyDN5j1cMEdzJGiTiXzcs8ei/NvO
ZVii5O+tu6O4nE3TBvb0Qn8gBMXQhb/bvtzfBmAUYTPdYccaIfL/IWZSDrFDMMey
05F2wufmfDV4oC96OfcvvG+8nS09bMjjq78aAvAWrLI3IOOsZkCh9lSFV96LGbSd
pqTBo/0gxBmpmRyB30zEkiMdq0SCfoWiezkyTsPwdd77XNKRi7TCSP0o/9N7izdy
DVbQvOYlUblFAC8DP8GF/FwUs6sL+uSRNhMjfZXhpSV4YaHS28yG68yYrQBfgLq6
rGZ67aiDWU+Qka/YsMy+KH5atZ32+/c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:10 2026 by rpki-client