Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/63a01b69-25df-375e-98fe-76fb0bb62a79.roa
File:                     63a01b69-25df-375e-98fe-76fb0bb62a79.roa (raw, json)
Hash identifier:          ESYszxMEd9oUcYmfWyabB1CqLc6SKEwmEk9Ow2TOpgg=
Subject key identifier:   88:F0:07:36:19:2B:26:88:48:C8:26:B2:B9:BA:70:4F:2F:30:D8:97
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584DA97AB3647362D1A49A0D3AE0
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/63a01b69-25df-375e-98fe-76fb0bb62a79.roa
Signing time:             Wed 29 Apr 2026 01:00:23 +0000
ROA not before:           Wed 29 Apr 2026 01:00:23 +0000
ROA not after:            Tue 28 Jul 2026 01:00:23 +0000
asID:                     64013
IP address blocks:        43.225.124.0/22 maxlen: 32
                          43.229.112.0/22 maxlen: 32
                          43.240.236.0/22 maxlen: 32
                          43.243.188.0/22 maxlen: 32
                          45.114.104.0/22 maxlen: 32
                          103.37.0.0/22 maxlen: 32
                          103.39.16.0/22 maxlen: 32
                          103.44.88.0/22 maxlen: 32
                          103.48.132.0/22 maxlen: 32
                          103.54.60.0/22 maxlen: 32
                          103.199.100.0/22 maxlen: 32
                          137.59.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:7a:b3:64:73:62:d1:a4:9a:0d:3a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Apr 29 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=ea14c763-c549-4f20-891d-157e299c0603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:88:55:73:ca:1a:df:15:ba:95:b6:61:e3:
                    21:11:6a:76:f7:a8:1c:b8:6f:99:74:a1:b7:36:8d:
                    a7:93:52:60:02:0d:1b:88:48:f2:da:0a:dd:ee:32:
                    b3:fd:c1:6f:5b:7c:1d:47:ea:75:4f:d5:4b:4c:da:
                    6f:37:15:11:c7:31:38:f7:23:c1:8c:b5:33:12:41:
                    eb:ef:9c:b9:5d:b7:04:82:64:61:a9:c8:d3:d5:ac:
                    b1:34:18:6f:84:e9:b1:bc:04:05:d7:0d:29:35:a3:
                    e9:33:e1:f5:55:ad:98:42:fe:23:89:a3:fb:ab:47:
                    52:7b:2e:6e:41:8f:61:e0:1e:a1:5d:9a:c2:24:d0:
                    32:63:c4:1a:40:7a:e0:2a:cc:ac:18:e9:f8:75:88:
                    9c:8a:33:26:17:81:f3:79:e2:92:2b:d5:2c:32:6e:
                    8a:8c:5a:f0:8f:6c:d7:cc:c9:68:73:75:95:9b:14:
                    82:c5:14:6f:b5:0d:c7:a2:90:86:1d:11:47:e8:ae:
                    5a:6b:97:d6:03:5f:19:19:e7:9f:84:54:5f:97:1f:
                    70:74:6b:89:2e:57:ad:34:0e:3f:1b:ad:ce:77:68:
                    d6:84:26:da:c0:16:92:ba:43:b7:bd:17:67:17:3a:
                    1f:79:6d:50:85:e0:cf:55:31:b2:6f:95:8f:4f:73:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F0:07:36:19:2B:26:88:48:C8:26:B2:B9:BA:70:4F:2F:30:D8:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/63a01b69-25df-375e-98fe-76fb0bb62a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.124.0/22
                  43.229.112.0/22
                  43.240.236.0/22
                  43.243.188.0/22
                  45.114.104.0/22
                  103.37.0.0/22
                  103.39.16.0/22
                  103.44.88.0/22
                  103.48.132.0/22
                  103.54.60.0/22
                  103.199.100.0/22
                  137.59.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:69:1a:d8:54:f2:62:42:59:2a:9f:f4:83:d2:1a:09:32:c2:
         c4:95:66:e9:75:ac:dd:08:0d:e9:01:04:8e:b8:94:4a:c8:0e:
         23:27:0c:51:31:98:e6:20:0a:b3:73:56:4e:2c:61:b3:7b:b2:
         2f:83:97:7a:d7:b1:0d:ad:bc:d2:95:15:d4:40:99:c4:31:b1:
         f9:a0:b5:80:80:0a:3e:2b:eb:3d:c9:02:45:54:a8:ad:f1:e7:
         eb:f2:5d:41:69:07:11:12:a0:01:1e:5d:04:f0:ed:10:d5:b2:
         d1:24:9d:3d:a7:b4:4b:74:a2:de:da:a4:b4:1e:98:6f:5d:06:
         c5:7b:aa:e4:be:ce:d0:89:1e:eb:d4:69:d5:f9:3a:1d:2a:98:
         a1:5d:f2:ff:8c:8e:d3:01:48:20:19:32:01:ae:99:69:27:f9:
         55:36:0c:aa:d2:19:f3:6c:80:41:bd:84:4c:18:fd:b8:a5:c7:
         86:57:3e:65:fa:93:61:55:76:4a:ae:6f:28:d2:73:68:51:db:
         d6:f2:40:4b:5c:3a:89:5c:47:96:c4:49:11:23:28:e8:f4:b2:
         33:fd:50:d2:9e:42:74:24:b6:cb:24:e3:89:87:e9:b6:80:6a:
         63:63:5a:2b:7e:89:ab:a9:18:a1:96:73:4c:b7:3e:b7:24:c9:
         d8:c3:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:18 2026 by rpki-client