Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa
File:                     a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa (raw, json)
Hash identifier:          rx+/qRn6zpX3Z7n+f+GQ2ra/5cnySVV4hPG5vITK3Eg=
Subject key identifier:   78:34:B0:88:B3:6B:6D:B9:08:B9:A3:76:47:40:C8:F1:3E:CF:79:E9
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584DA97ABA14717BAFC5CA964500
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa
Signing time:             Wed 29 Apr 2026 01:00:23 +0000
ROA not before:           Wed 29 Apr 2026 01:00:23 +0000
ROA not after:            Tue 28 Jul 2026 01:00:23 +0000
asID:                     138415
IP address blocks:        43.225.124.0/22 maxlen: 32
                          43.229.112.0/22 maxlen: 32
                          43.240.236.0/22 maxlen: 32
                          43.243.188.0/22 maxlen: 32
                          45.114.104.0/22 maxlen: 32
                          103.37.0.0/22 maxlen: 32
                          103.39.16.0/22 maxlen: 32
                          103.44.88.0/22 maxlen: 32
                          103.48.132.0/22 maxlen: 32
                          103.54.60.0/22 maxlen: 32
                          103.199.100.0/22 maxlen: 32
                          137.59.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:7a:ba:14:71:7b:af:c5:ca:96:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Apr 29 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=5385bc67-6b88-44ef-a934-858500c91130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:bf:a9:b9:62:e6:29:fd:de:60:40:67:a5:
                    aa:87:3d:b2:1b:91:1b:f5:51:d6:bd:dd:8d:e0:0c:
                    2c:fa:35:2a:e5:de:1e:19:eb:3d:86:20:89:cc:6c:
                    75:3c:0c:e8:69:61:25:77:fd:90:40:3f:83:8f:01:
                    74:e9:26:5d:04:b3:2e:0c:4a:43:92:4b:67:81:dc:
                    f8:78:0a:a7:5f:0f:9c:37:72:38:a4:29:a1:c8:48:
                    77:e4:7c:17:e3:23:e5:3b:ee:41:c2:b2:5c:52:60:
                    dd:2e:bf:97:89:30:bd:c8:5c:74:44:08:59:c2:42:
                    42:e3:41:3d:91:f5:7c:df:3d:27:2d:b2:24:08:36:
                    32:e7:9f:dc:15:95:8b:36:a7:22:a3:e3:22:d0:a0:
                    b8:72:7d:c7:a5:25:4c:bc:da:16:0e:05:2f:25:d9:
                    8b:52:49:04:e8:2b:cb:c8:3a:ba:ba:f9:71:3f:0a:
                    46:9a:c1:e7:90:9b:dc:7d:99:aa:8f:3b:88:87:c9:
                    6f:c7:f9:94:d4:2d:17:b3:e3:e4:3c:cc:68:85:af:
                    f9:0a:ee:ad:17:ff:6a:f5:52:1e:e9:98:59:e4:c0:
                    66:d9:0f:00:f7:a3:af:bf:2b:18:1f:3e:36:b7:73:
                    91:1b:db:de:42:a5:6a:94:39:4d:37:77:4a:64:3e:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:B0:88:B3:6B:6D:B9:08:B9:A3:76:47:40:C8:F1:3E:CF:79:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.124.0/22
                  43.229.112.0/22
                  43.240.236.0/22
                  43.243.188.0/22
                  45.114.104.0/22
                  103.37.0.0/22
                  103.39.16.0/22
                  103.44.88.0/22
                  103.48.132.0/22
                  103.54.60.0/22
                  103.199.100.0/22
                  137.59.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:76:df:d6:6d:9b:01:5f:13:0d:40:9b:7a:97:64:7f:85:bb:
         c2:1c:e0:6e:a3:ea:0c:4f:9c:38:2a:99:51:c1:38:40:1f:dc:
         34:31:12:b7:be:5c:72:5c:06:c2:b0:5f:7b:be:19:16:cc:5d:
         af:cb:b9:25:bf:dc:86:06:85:d2:a0:98:46:1f:5a:84:64:b8:
         83:a2:d5:f1:c2:32:9d:0f:4c:42:97:2b:d5:21:16:e8:61:66:
         d4:15:ee:7d:18:ab:91:91:d9:eb:4b:80:78:cc:d0:40:44:09:
         ff:3a:0a:d9:b4:94:be:33:44:43:2d:ef:db:ef:33:ae:6f:ac:
         d9:2e:7f:d2:4d:b5:fb:20:26:a2:7a:fd:29:5b:63:d4:12:5b:
         59:78:94:2d:c3:83:25:10:20:ba:2e:dc:84:c2:57:80:f3:11:
         fa:0c:e1:dc:3d:b1:aa:83:0d:13:0b:35:d3:8b:28:e8:3f:2d:
         ff:2c:c0:f7:2f:26:3e:a0:42:cc:b6:5a:35:02:3f:b0:7b:12:
         69:e1:b6:58:d6:b5:a3:34:b6:9f:24:76:a9:d4:61:9e:17:95:
         6a:c1:2e:9e:dd:74:52:d0:af:4b:db:46:63:ba:a0:41:d1:51:
         90:25:47:38:44:d0:48:1b:59:7a:20:78:20:43:9e:e8:4c:cb:
         7b:57:09:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:28 2026 by rpki-client