Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa
File:                     7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa (raw, json)
Hash identifier:          CnI0/p5i8WAL56SPOnFj0WnABeR48fc1xh/V6XDd8jM=
Subject key identifier:   60:B4:52:BE:BA:CD:FA:71:13:BF:0D:EA:BE:4E:EE:4B:7A:DC:F4:46
Certificate issuer:       /CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
Certificate serial:       010D0C9F4328584F20F7AB600A334B6A47D2B6C0
Authority key identifier: 42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        203.96.187.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ab:60:0a:33:4b:6a:47:d2:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=5bb1febb-f347-4932-a4cd-7b8945e2efae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:15:ed:6b:b6:1e:fc:b5:ec:bd:46:8c:7c:fc:
                    38:25:8a:ec:26:69:26:90:dd:58:75:25:83:0a:2b:
                    cd:5c:5d:db:1d:30:71:13:64:70:21:e8:70:8c:f8:
                    71:37:44:7d:23:86:04:65:b2:b9:de:05:dc:af:06:
                    60:b0:18:34:78:28:3a:d1:ed:8a:12:8b:2e:94:a3:
                    f6:1e:c6:da:25:06:97:71:ac:ed:8c:28:93:77:ca:
                    a9:00:d6:d8:b9:84:0c:34:ce:aa:47:42:9e:76:a6:
                    d7:a1:b6:af:77:d1:cf:7f:00:74:a3:59:02:12:4c:
                    e6:cf:50:bf:39:71:b2:92:3b:8e:47:a9:06:e5:d0:
                    03:ff:52:1c:8f:ba:5f:8f:34:85:e6:dc:d2:af:c6:
                    e4:10:da:18:ed:f3:9e:df:46:cb:3b:c6:2e:57:d3:
                    3c:82:ea:ea:6d:d2:fc:ad:12:e7:84:42:22:54:9f:
                    98:58:d7:a9:44:59:16:07:3f:7d:b7:c0:6e:c5:84:
                    43:54:68:9c:47:04:8c:56:80:eb:8c:5e:37:9d:2e:
                    33:fa:8a:ca:a8:3c:01:0e:98:b1:5d:73:10:80:fe:
                    00:13:22:13:0b:cc:b4:46:6f:d8:81:a6:13:16:e4:
                    de:9d:1f:2b:1d:0f:c7:ef:f4:5f:d4:76:13:e7:a7:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B4:52:BE:BA:CD:FA:71:13:BF:0D:EA:BE:4E:EE:4B:7A:DC:F4:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl

            X509v3 Authority Key Identifier:
                keyid:42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.96.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:cc:89:ed:78:3c:ee:e8:66:f9:88:8b:e4:05:79:5c:3f:9d:
         1b:db:6d:44:be:79:cb:15:ff:38:48:c3:73:d1:63:f0:0e:5c:
         ee:8b:83:9b:bc:16:6a:17:9f:3f:dc:46:a7:2a:b9:89:1d:1e:
         be:47:b3:af:9c:ad:a3:2d:4a:fa:ce:eb:d9:2f:bb:06:14:11:
         f1:00:bd:aa:45:86:67:23:71:1f:45:78:08:d8:c8:24:36:99:
         f6:1e:1b:14:ee:85:86:51:00:e2:9e:94:8f:b5:7c:bc:0f:c4:
         9c:06:3c:5e:d2:d8:5a:c4:e0:4d:6d:eb:0d:a3:02:a0:7b:4e:
         b5:6f:53:f7:db:72:58:7d:19:a8:b4:c8:e1:a9:e5:9a:44:67:
         24:62:f0:7b:8f:37:36:67:3a:a4:f0:04:f2:bd:23:04:56:a6:
         2a:ef:85:06:d8:07:e6:25:16:30:98:47:e9:5d:61:eb:f0:21:
         10:93:39:26:9f:03:1f:03:fb:1d:31:fa:3f:4b:3f:d6:93:ca:
         26:a3:e3:e6:7f:f7:8a:77:27:97:a4:74:b4:97:86:8d:1a:bd:
         4c:4e:5d:d6:75:57:cd:83:60:c3:54:96:71:48:92:92:c5:d3:
         06:6e:59:59:34:6b:0a:9d:79:56:36:f5:95:39:7e:38:a5:ee:
         77:56:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:31:03 2026 by rpki-client