Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6757d609-3340-3483-82aa-35af5e808cd7.roa
File:                     6757d609-3340-3483-82aa-35af5e808cd7.roa (raw, json)
Hash identifier:          cQKsqYUqzqDzb4knV2zNA6JJ6r0PsOqvxQJOI66MYv8=
Subject key identifier:   D4:FE:ED:21:B4:B9:69:F5:A5:12:A3:BF:C7:EA:45:C1:6F:68:78:19
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584F374D27CA0F5C28AFC1B64380
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6757d609-3340-3483-82aa-35af5e808cd7.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     60558
IP address blocks:        103.67.203.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:27:ca:0f:5c:28:af:c1:b6:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=9eb4d5ba-591d-4fde-8c21-8acfee2e535a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:6e:cd:fb:ff:8a:f4:f4:3a:0a:33:5e:f7:
                    8d:3e:7c:a6:6f:2f:f5:d6:43:67:99:72:10:65:1e:
                    85:47:11:47:7e:2d:dd:87:b7:c9:14:a2:08:21:b1:
                    cf:d1:2f:68:cc:cd:af:4f:d6:96:7e:fc:ab:7b:be:
                    7d:b3:d1:8b:e5:85:37:59:95:5a:ae:1c:bb:47:ee:
                    6a:8d:d9:cd:3e:95:6c:d0:ad:e2:83:72:06:77:e3:
                    78:45:7f:9b:54:f4:43:65:4e:cd:e9:91:99:ac:43:
                    9c:8b:75:8c:cd:75:56:d9:18:4b:61:e9:d8:33:ef:
                    e8:cb:d4:7e:47:6d:5b:fe:24:9f:49:cc:69:3c:de:
                    c4:06:ff:16:6d:4a:c4:c1:b2:6d:50:5c:ab:bf:25:
                    db:91:bf:4f:64:0e:d2:8f:ec:62:54:0a:76:9b:cf:
                    70:4e:66:5c:ab:16:9c:06:4b:e7:ed:54:b7:ab:7c:
                    38:0a:3f:51:70:1c:24:e1:dc:f4:8b:70:eb:3a:a2:
                    9e:0e:98:37:ea:54:01:a9:03:44:2a:7f:b6:0e:65:
                    91:a2:e9:ef:64:1d:44:38:46:2c:6a:ca:f4:89:5c:
                    d8:f3:73:ff:68:50:86:14:39:1e:9d:df:c1:dc:86:
                    61:9e:d0:28:c3:7b:34:e6:42:d5:c8:8d:40:03:95:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:ED:21:B4:B9:69:F5:A5:12:A3:BF:C7:EA:45:C1:6F:68:78:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6757d609-3340-3483-82aa-35af5e808cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:1f:de:9f:f7:be:a8:5a:da:f6:38:39:81:d2:f4:ab:f1:18:
         91:c3:0d:1a:33:f7:e6:9b:d4:fe:6c:24:40:19:ce:3e:1c:b9:
         b5:68:80:43:0c:30:7d:cd:51:0c:c8:36:84:da:97:ed:62:c5:
         d6:8b:0e:8e:5d:b3:09:b8:a2:d6:94:e0:fc:af:b9:80:9a:57:
         cd:0c:0b:f6:9e:08:a3:90:5f:ca:ed:2b:1f:30:78:0b:19:cd:
         ea:77:7e:fc:df:d8:12:c7:e6:64:97:0a:a3:dd:83:5c:94:15:
         c9:9a:67:8d:fe:f8:2f:ee:3f:8b:00:20:e0:47:b3:a5:3c:c4:
         02:96:71:e9:68:31:f0:e2:9a:4e:d6:4f:67:b2:c7:f9:70:24:
         8a:76:3f:b9:94:32:5d:94:10:ed:b3:5e:e2:57:c9:0b:4d:8f:
         7c:0f:62:a7:05:ab:19:0d:97:f4:c8:63:4a:c8:fe:f8:5e:5b:
         a7:86:60:68:fc:39:7a:66:e8:15:34:19:6c:95:0b:9d:af:74:
         2c:eb:a7:a1:fd:e8:69:84:bd:b2:eb:b2:11:4d:21:88:6b:e3:
         09:52:f4:57:8a:36:6e:86:dd:05:0d:fd:e2:18:30:45:27:45:
         3b:75:b7:18:f3:0c:d4:35:26:bb:71:68:ad:5c:62:a1:dc:28:
         04:28:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:39:38 2026 by rpki-client