Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa
File:                     5defbc32-1cf4-3d58-be45-b2975f3026fa.roa (raw, json)
Hash identifier:          qXCWF9Cwh964pY8nEttjXi2cNNiuqSzRO8mdkfc2q8A=
Subject key identifier:   D4:FE:2E:08:AD:C6:45:CF:52:76:28:B8:69:26:F8:20:1B:09:48:DE
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F4328584AADF11AA63445E87350597B80
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        103.109.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1a:a6:34:45:e8:73:50:59:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=4bde4597-6254-4d12-bce2-1c82f152aa0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:eb:fe:dd:b5:a7:77:0f:b2:78:c3:d5:34:
                    f0:b2:05:9c:46:34:ae:c9:cc:15:5b:ab:4a:bb:26:
                    c7:79:29:79:0c:72:ef:4b:31:47:5b:c3:62:63:67:
                    a6:e5:82:b6:ec:87:9c:89:f1:22:84:cf:42:1c:52:
                    ef:d2:69:4f:05:47:ea:fa:4b:eb:22:d7:c1:08:12:
                    1d:e0:d9:41:33:cc:c4:5f:de:27:fb:dc:55:4f:de:
                    73:b8:57:72:f9:01:20:75:0b:92:2c:2e:66:a8:11:
                    76:32:3a:ac:70:2d:0a:20:78:19:9a:07:b0:64:c6:
                    35:49:ec:fb:7a:d1:a8:d2:da:dc:58:47:67:cb:21:
                    e4:74:38:fb:7f:18:11:bc:fa:6c:c5:30:48:90:7b:
                    1f:44:b4:7e:60:14:af:ae:d0:5d:e0:be:63:e1:d2:
                    76:d3:4c:48:73:5a:40:ee:af:0a:76:f7:40:5c:2b:
                    f4:7d:95:52:8b:a2:5d:40:01:29:fe:48:11:13:4e:
                    84:8b:a6:9c:aa:41:5f:9e:84:ce:92:84:53:df:3f:
                    19:12:4c:5a:51:88:6d:ed:d0:cc:ef:1c:ba:94:83:
                    d9:8c:0b:0a:1a:cb:8d:87:da:87:59:92:12:2a:b0:
                    d1:48:01:77:df:5a:20:6e:6e:d2:19:78:26:5f:05:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:2E:08:AD:C6:45:CF:52:76:28:B8:69:26:F8:20:1B:09:48:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ed:35:d5:46:02:7e:0b:a3:71:b8:91:c7:35:12:4b:ec:bd:
         69:1e:31:23:e9:21:24:21:8f:22:97:1b:0b:ef:a2:f2:ae:e7:
         ad:0d:d6:80:04:3f:67:7d:0c:28:8a:3c:1d:81:1f:92:be:3f:
         d2:dd:4a:dd:6d:f9:28:04:0f:1a:8f:47:d3:8f:0e:35:0e:89:
         64:4f:5c:2f:73:15:36:70:d3:2b:8f:f0:d1:c9:06:93:e8:cc:
         28:cf:00:b8:81:2f:7b:70:92:05:97:a9:17:18:42:39:db:1e:
         42:2e:b0:08:4a:21:d6:eb:17:9c:a8:d4:53:34:e2:e4:fc:d0:
         56:3d:34:85:f7:8a:ff:62:87:13:96:6a:d2:23:10:fc:b7:7a:
         ca:3d:50:5d:91:28:7c:36:ee:b5:3c:4f:16:81:b6:2a:25:6f:
         39:9e:03:da:7f:47:66:a6:08:96:e9:68:a0:3d:b3:1d:b2:94:
         bd:b0:26:f0:65:fe:cd:85:df:5d:07:e4:0f:60:e1:13:04:03:
         9a:83:8f:e6:68:4c:fb:4a:3f:09:9c:e3:07:44:94:3d:0a:a9:
         4e:2b:60:38:72:45:ea:f6:d1:18:5e:c3:94:a2:0f:5d:d7:95:
         93:19:8c:4a:d4:84:a1:18:50:59:4f:17:21:a0:d8:e7:ec:15:
         d1:1c:ba:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:23 2025 by rpki-client