Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa
File:                     f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa (raw, json)
Hash identifier:          2g3dPhcrVC5EQ8Q7+tnqWrPsTsnz2AXEau5wiljRF2w=
Subject key identifier:   EF:8C:75:F6:7C:A4:48:1B:C7:8D:7B:2D:03:5D:FD:FC:0B:B4:E2:57
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584F45428C0526736B3847FE85C0
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     54913
IP address blocks:        103.98.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:8c:05:26:73:6b:38:47:fe:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=f0383608-3038-4306-b96b-daf91d212d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:77:26:92:d9:c6:71:cb:aa:57:ec:22:b6:
                    31:81:3a:77:e6:23:3f:7c:ab:f9:ae:18:54:72:83:
                    c9:15:f9:4e:2d:d7:74:c1:f0:c1:bc:75:c2:85:a8:
                    61:c3:72:4b:06:99:b3:22:01:e5:9b:76:8e:b7:3e:
                    1f:3f:51:3c:d7:09:10:ff:b9:c2:2b:6f:e5:0c:06:
                    b3:68:98:a6:80:54:4c:f9:f6:51:07:ea:f2:6e:63:
                    12:a2:34:4c:a8:e2:30:2f:51:0f:d3:c9:cd:17:de:
                    54:6b:34:c2:33:13:a7:de:72:fd:58:f1:d3:77:a0:
                    6c:14:c3:20:d3:fd:e7:b5:55:c3:de:21:20:4a:b9:
                    b6:c9:01:d3:53:9e:46:21:1b:7b:06:5a:e8:99:6b:
                    ca:c8:50:ef:02:e8:ec:55:2a:12:0b:d2:d1:ef:c8:
                    ec:31:b3:90:ed:df:67:b7:4b:6a:51:e1:b3:e2:f0:
                    1f:08:d6:fa:e7:66:dc:6d:70:14:c5:20:df:a3:e1:
                    c7:90:c9:ab:26:df:82:eb:4c:4b:68:c4:3c:21:b0:
                    92:a4:13:09:78:9e:30:7c:8c:1b:3f:33:d4:75:1a:
                    b5:8b:f4:c8:a7:e7:4a:05:73:e1:3a:15:80:c3:7d:
                    69:96:f0:49:bc:4e:e5:c5:ec:30:6b:3b:bf:b8:19:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8C:75:F6:7C:A4:48:1B:C7:8D:7B:2D:03:5D:FD:FC:0B:B4:E2:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:59:49:39:1e:37:c1:2f:12:64:87:5c:79:1f:00:b8:68:5d:
         e0:52:c5:40:69:7a:06:ba:f4:20:99:51:89:29:7c:3a:5b:2b:
         58:25:da:a6:1a:2f:fe:2a:95:54:31:b0:f5:bf:70:2b:69:fa:
         bd:11:5f:ef:77:4a:d8:b9:83:34:c9:02:0e:2f:ea:a1:28:52:
         a3:6c:72:31:68:cc:3f:df:89:43:d3:77:7c:e4:1b:7e:b3:9e:
         0a:ae:8e:db:97:0f:cc:a0:0a:d5:e4:04:a3:5d:7e:4d:3a:9e:
         f9:24:d6:c1:84:08:52:f6:26:6c:ad:d8:be:0d:27:1e:0c:58:
         c0:68:7a:5d:13:9d:19:7d:8f:1d:91:3c:2f:15:b8:89:a9:53:
         0e:c6:64:ff:5c:81:58:8e:23:89:86:ec:8e:7e:74:7e:0a:16:
         a0:9d:f1:63:78:4f:d4:c2:90:c5:f9:96:19:50:96:56:b3:bd:
         4f:28:b4:fa:ae:6f:f2:a7:c5:f2:0b:13:94:af:fd:59:da:61:
         1e:54:bc:9b:60:bf:cc:92:64:3c:76:79:5d:1e:06:4f:ac:e2:
         d5:f3:69:d1:1e:33:18:ee:27:55:8a:3b:4e:0a:93:e5:1c:78:
         32:e3:ab:bb:01:80:f0:83:d0:d7:05:eb:47:b6:24:4d:1b:e3:
         83:eb:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:20:42 2026 by rpki-client