Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/d3346576-5a6d-3375-a9cd-03938002fce7.roa
File:                     d3346576-5a6d-3375-a9cd-03938002fce7.roa (raw, json)
Hash identifier:          CBmAp1oABGa5Gp6RiC36X9vn3HvNE3633yWyCfhRUn4=
Subject key identifier:   1F:62:01:57:BF:CB:5C:B3:5F:F8:41:74:6E:7C:50:9A:78:36:A5:9C
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F4328584AADF11AB2B384F4BFAFA71940
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/d3346576-5a6d-3375-a9cd-03938002fce7.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        103.109.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1a:b2:b3:84:f4:bf:af:a7:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=399290e7-3815-4d93-8159-fb708d9f179a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:d0:21:b0:8c:ad:e2:be:e6:43:3c:2b:e7:
                    2d:ce:9e:77:dc:3f:af:eb:0c:b0:13:0a:a6:5a:58:
                    bf:00:4e:37:f7:89:c9:a8:10:e5:37:db:63:a4:f2:
                    39:99:0b:84:9f:c4:e4:20:fc:f8:45:38:3a:0f:31:
                    db:6d:f7:64:2c:6d:ed:6b:b4:9e:3c:3b:f6:16:f2:
                    40:63:12:00:e2:4a:95:43:e2:62:fd:cf:23:fa:88:
                    62:a9:cd:ec:15:3c:68:2f:f8:78:36:ea:b8:be:14:
                    3e:6a:80:a9:19:01:5e:96:f2:ef:63:76:7b:da:58:
                    ea:fa:ff:71:9d:6a:30:c3:a6:65:2c:a7:5a:d7:79:
                    e9:fd:0c:eb:59:33:14:17:9a:c2:cf:52:53:1e:bc:
                    61:4a:a4:ea:91:48:26:eb:ef:62:de:9b:e2:04:33:
                    9a:01:88:13:2b:cd:b3:6c:29:ef:96:fb:02:08:20:
                    e9:cc:9c:93:ba:0f:cf:6a:8b:11:74:12:65:54:11:
                    88:fc:95:cb:f6:64:61:2f:c0:48:b5:f9:b4:0b:cc:
                    a6:c9:8d:8d:5f:c3:37:36:94:d2:0e:c2:55:45:5d:
                    56:95:48:31:bd:d1:0a:e8:28:97:9d:45:c6:0f:6c:
                    ec:57:a7:12:cc:15:46:a9:4b:d8:89:43:f5:de:5c:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:62:01:57:BF:CB:5C:B3:5F:F8:41:74:6E:7C:50:9A:78:36:A5:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/d3346576-5a6d-3375-a9cd-03938002fce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2c:b9:92:7a:bf:7d:00:42:92:28:c7:dc:82:8f:1e:46:e3:
         fc:8e:fb:c2:6d:8b:f3:c2:0b:92:45:54:1f:1a:64:21:66:23:
         70:97:db:77:c1:c8:9c:32:4d:e8:aa:a1:44:31:30:78:4f:1c:
         7a:8c:f5:8a:6e:25:dc:f1:e1:74:23:e7:5d:8e:01:12:8e:f0:
         a5:a6:4b:77:cf:18:be:28:3a:81:11:32:ee:cd:10:e2:09:db:
         12:3f:da:e6:64:9d:c3:b9:41:85:b8:75:3f:b3:9d:05:90:56:
         f9:5b:4e:92:1d:96:c6:c0:00:86:36:f5:06:4b:81:ed:8e:51:
         fa:3f:d4:42:c8:7b:3e:2b:d0:47:93:f3:96:31:2d:fd:43:17:
         d6:3c:2d:25:14:03:b0:6c:6d:b7:ff:82:df:06:56:45:c4:ec:
         54:2c:48:0e:12:8e:ed:47:9c:7d:3e:50:03:30:0d:38:7f:98:
         b0:59:63:38:37:f3:a3:31:e1:d2:e7:1b:cb:68:93:ee:b1:e1:
         15:d8:fe:1a:c3:9b:10:dd:08:a7:75:aa:4f:75:a6:db:7f:f0:
         92:51:e9:f7:f7:28:be:32:64:75:a5:b3:c1:8a:7a:12:a7:81:
         b5:83:cb:98:30:a0:8f:d4:7d:1c:6b:b3:06:be:ba:8d:41:4e:
         07:c3:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:54:43 2025 by rpki-client