Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa
File:                     5defbc32-1cf4-3d58-be45-b2975f3026fa.roa (raw, json)
Hash identifier:          O3qUKxZCpzcyq9XTt3i0T9dvsG3xo2tEe5SSYNtGfT4=
Subject key identifier:   F5:65:93:EC:53:7F:9B:AC:85:C6:D7:50:61:31:5D:DC:00:79:E6:18
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F4328584D4D5A6CAAD6F0F72776FB8C80
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        103.109.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6c:aa:d6:f0:f7:27:76:fb:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=db00f255-859a-4350-82d3-d0c12b2f1dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:91:89:22:c9:e0:79:2d:58:9d:1d:7c:d6:98:
                    2b:f6:dc:b0:f0:d3:09:07:70:88:1c:8b:1a:ae:3f:
                    19:6d:8b:22:3b:38:85:8d:aa:97:a5:53:de:7f:df:
                    ea:f9:b5:12:07:54:cd:10:70:5d:c4:98:95:c7:69:
                    f9:7f:54:ce:a9:2a:20:f0:40:fd:3f:ad:22:2c:81:
                    98:bf:f8:59:d9:5b:f2:ef:4d:48:bc:3e:d6:87:b3:
                    cb:b7:7c:5a:d4:a7:68:c9:ca:8e:bd:ed:e3:60:bf:
                    89:0c:c4:83:de:09:0a:32:19:15:71:0e:21:e6:86:
                    5b:03:b5:29:14:15:0a:a0:48:52:0a:ad:c9:6b:50:
                    69:ac:7b:14:c6:29:0e:7e:77:2b:91:4d:4c:0a:6f:
                    a4:6a:41:f0:0e:eb:0f:cb:77:83:2e:9f:cd:db:12:
                    85:18:90:e8:f0:94:9e:76:dd:e2:65:a9:c8:d2:93:
                    7b:ad:18:d0:30:1e:7b:b0:ee:8e:83:cd:fc:8f:71:
                    78:60:47:86:89:c6:aa:34:56:4b:fd:7f:0e:0a:8a:
                    c8:44:f1:29:cc:77:da:76:d8:ab:a4:48:54:9d:df:
                    13:43:31:dd:35:3d:db:06:47:03:06:7c:ba:74:d8:
                    2d:24:55:96:c4:67:98:33:21:87:ba:58:19:bc:62:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:65:93:EC:53:7F:9B:AC:85:C6:D7:50:61:31:5D:DC:00:79:E6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1d:a6:99:34:9d:f5:3a:b8:24:ec:ce:39:da:c2:19:a7:c5:
         21:04:e7:a0:c7:c6:7b:e5:00:f4:7c:d7:c9:3e:7f:a2:01:32:
         42:7a:a5:bd:90:18:6e:4c:05:d0:16:9b:6e:8c:29:d0:1a:c0:
         b8:25:67:f6:7e:0e:81:ba:27:df:c1:16:00:31:d7:0d:9f:e5:
         31:c2:81:7b:b4:19:66:d5:de:f8:0f:c5:5e:99:4c:47:7c:7e:
         de:3c:f0:4a:41:21:83:cf:55:92:64:90:d9:8f:6b:23:d1:42:
         23:08:19:00:71:76:8b:15:3f:3a:1f:25:7c:44:6d:1c:57:ea:
         0c:c8:ab:88:7d:9b:cc:20:32:30:3f:31:c9:04:5e:dd:61:d9:
         19:14:5c:86:fb:cc:d5:2c:7d:37:7f:68:ff:d7:0b:07:5a:dd:
         6f:4e:03:12:f7:9c:5c:d7:05:4b:39:de:d0:3b:38:b3:66:fe:
         57:29:aa:06:e7:ae:42:b7:2d:c3:81:dd:3c:75:b3:1e:88:57:
         4c:16:1b:81:4c:8b:12:69:77:ce:1a:3a:65:6c:e1:65:17:65:
         0c:c8:a8:db:fa:4c:e8:5d:cb:34:dc:5f:33:e0:aa:44:9d:ec:
         9b:d6:d8:46:b7:83:93:bd:73:a6:8a:6d:ca:ba:80:72:77:cd:
         a0:27:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:36 2026 by rpki-client