Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/9dca4ab6-05a9-3fec-a108-a009b99cd415.roa
File:                     9dca4ab6-05a9-3fec-a108-a009b99cd415.roa (raw, json)
Hash identifier:          8eZ1BPhYlVbA5RcpSHC0B6sSWpI8bPZ7RWCLeqHkkr8=
Subject key identifier:   09:65:36:FF:FB:4D:5E:8B:D7:8E:1D:BF:19:D1:4A:C1:9B:E9:FF:A3
Certificate issuer:       /CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71
Certificate serial:       010D0C9F4328584CD99CAC0A8F8508DEF3CBD9C0
Authority key identifier: 83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/9dca4ab6-05a9-3fec-a108-a009b99cd415.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     401770
IP address blocks:        103.65.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ac:0a:8f:85:08:de:f3:cb:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=90355096-a3fc-47dc-b296-6be7882a0b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:ef:21:16:eb:e4:dd:9c:2f:2f:81:43:91:
                    2b:22:df:c5:fd:a5:00:82:5e:25:7b:1c:6c:b0:97:
                    37:ed:c3:07:53:41:54:5f:9f:2a:ca:6c:94:5b:8d:
                    b6:fe:11:df:af:d5:b4:55:37:c2:89:dd:26:24:e3:
                    58:e7:0a:a2:a1:da:8a:81:b4:28:16:6b:a6:0d:3a:
                    13:48:58:6b:bf:0d:b2:4d:cd:f5:de:d8:68:2e:f5:
                    05:fb:b9:50:d2:1b:6c:98:92:04:f6:83:9a:de:66:
                    ba:cd:50:a3:25:be:81:0d:2c:c1:a9:97:1f:cf:7f:
                    dc:35:56:28:b8:17:67:c5:a5:f0:9b:7c:ce:a4:0f:
                    a5:24:4c:24:15:d4:7d:ca:cb:eb:b9:3e:01:ef:ad:
                    b3:fe:2c:0a:14:5f:47:e9:e1:57:16:7a:9b:77:fc:
                    c1:56:a6:89:25:e1:fc:6e:6f:1f:b3:1e:b2:92:20:
                    a3:f3:28:90:93:06:13:27:15:25:d7:26:e0:be:d6:
                    6b:a9:98:ab:2d:b7:4b:64:89:83:34:47:1c:6a:f6:
                    90:f8:3e:e3:ca:dc:21:0b:82:b5:f6:8a:da:a5:0c:
                    36:50:db:63:1b:b7:00:ab:4b:27:32:b4:5b:9c:46:
                    fb:89:cc:08:c7:13:32:0b:a6:d4:c8:60:38:6f:75:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:65:36:FF:FB:4D:5E:8B:D7:8E:1D:BF:19:D1:4A:C1:9B:E9:FF:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/9dca4ab6-05a9-3fec-a108-a009b99cd415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl

            X509v3 Authority Key Identifier:
                keyid:83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:f2:5c:34:63:98:7c:c9:e2:8f:8d:f7:e4:e6:73:61:4c:
         7a:88:4c:58:2a:ea:df:42:a8:52:11:e1:e2:7c:c0:e2:ba:2f:
         8c:5b:0c:74:76:51:7b:5d:77:d7:98:6c:c2:23:80:1b:2c:03:
         c6:19:9e:55:08:17:7c:45:68:b1:2c:0c:4f:9b:da:9d:db:72:
         f5:e4:d2:04:7e:0e:69:d9:7a:36:54:fd:5e:d8:9e:68:a9:81:
         2b:81:fa:13:91:4e:43:04:0d:ae:1f:50:16:6e:b0:e8:26:64:
         52:c5:a0:95:7d:5a:9c:4b:db:5b:69:24:44:a3:98:2b:9d:1c:
         8e:4a:55:f5:fd:a2:bc:cc:e4:6c:9d:fc:08:b1:42:5a:eb:ed:
         6f:b6:c6:c5:ff:c9:85:53:e3:29:3e:a7:64:d4:28:2a:0f:64:
         9e:ba:20:3b:2b:3b:0a:d5:75:5e:75:b9:cb:ad:cd:3c:c2:4e:
         0f:ba:17:c2:7e:49:e0:79:17:b1:f4:38:5d:c0:5a:d0:b9:9f:
         d0:bd:81:95:45:91:c2:78:6b:5f:03:b3:e5:e5:73:9d:6b:46:
         34:b5:c9:90:bf:53:b7:42:56:ac:7d:38:db:49:a2:91:8a:2f:
         3d:92:80:41:17:ee:a3:65:07:bc:30:30:fe:3c:98:b6:37:df:
         76:d2:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:00 2026 by rpki-client