Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/0f248272-b773-38cf-a66c-d32be0dff41d.roa
File:                     0f248272-b773-38cf-a66c-d32be0dff41d.roa (raw, json)
Hash identifier:          wBvl8BJ9ECnM/OBLUASwMpJrvcWRxkA26BrZ4KA5NlQ=
Subject key identifier:   FB:9E:36:F8:71:6E:57:B0:46:F6:3D:56:3F:99:20:24:E5:3A:D1:44
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584B78574517B1CC4E9B0C90CDC0
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/0f248272-b773-38cf-a66c-d32be0dff41d.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     400097
IP address blocks:        103.123.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:45:17:b1:cc:4e:9b:0c:90:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=4b5f4182-9a68-4c65-9b85-c471d4524d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:e7:8c:64:11:34:d8:fb:e6:cb:e5:13:c8:
                    c4:cd:5d:5d:45:bb:47:06:f6:3f:ac:48:97:d6:4e:
                    67:bf:6b:a5:43:2b:5e:b1:89:d7:b3:c0:f0:12:a0:
                    e1:58:f3:57:63:6b:2e:6b:aa:45:b7:44:cd:31:91:
                    4d:52:72:6d:a4:46:85:00:0d:c4:d4:89:6f:f1:86:
                    b9:f5:62:f1:79:bd:87:7c:b0:d8:39:03:04:04:fb:
                    9b:d4:87:eb:12:f7:49:ca:33:42:44:89:83:ba:7e:
                    09:a5:d5:6f:8f:30:c9:6f:e7:01:ad:2d:98:cb:47:
                    34:40:87:75:0f:5a:4e:79:18:58:7a:45:7e:9b:ed:
                    54:60:8a:13:6e:7a:19:b6:0e:81:df:67:f0:c4:e5:
                    8e:b3:c9:46:21:08:ff:31:1f:f9:04:4d:ef:d9:5c:
                    53:a0:73:f6:db:96:19:1e:6a:37:20:4b:19:3f:12:
                    1d:9b:ae:b8:75:2a:69:3b:fc:61:f6:1b:32:15:32:
                    62:bf:65:e8:40:9b:d9:f3:f0:f6:b6:b8:55:20:52:
                    e7:b6:31:38:43:8d:6f:d2:e3:7b:73:82:2f:a5:84:
                    87:63:0b:ce:9c:f5:c3:e6:a4:bc:3a:6d:ed:ec:c2:
                    a4:f6:8a:83:d1:54:f1:01:70:d9:58:49:20:9f:da:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9E:36:F8:71:6E:57:B0:46:F6:3D:56:3F:99:20:24:E5:3A:D1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/0f248272-b773-38cf-a66c-d32be0dff41d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:67:b2:77:8b:47:d1:fb:fe:13:f2:4c:08:e2:9f:e1:4e:b5:
         d1:06:ab:68:43:be:be:3d:71:2d:6d:0b:5d:17:43:65:bd:bc:
         ef:0f:b3:b0:2e:f5:62:80:b7:57:c9:af:1b:fc:55:14:9c:5d:
         1d:0b:0c:a7:e4:a2:f4:01:fb:81:79:4c:e2:80:2e:32:ca:a3:
         d0:29:15:6d:f2:b8:6d:93:49:e2:7f:bc:77:12:6c:af:01:77:
         01:d1:d3:be:ed:54:0a:70:07:9f:6d:1d:00:8b:59:4a:e7:6e:
         4b:d7:c4:23:d1:8a:e8:70:6e:1d:2c:37:55:75:fc:1c:7b:d5:
         1d:86:c0:8f:9b:41:70:98:4d:13:11:4f:dd:30:9f:3c:a7:63:
         40:0f:4c:e1:2b:32:04:5f:f3:b4:36:bd:35:75:46:81:cd:7e:
         ad:97:5c:19:36:ad:7d:1c:0a:71:eb:ff:cb:17:9e:7a:4c:51:
         9d:ed:a8:ee:06:6e:f2:7a:0d:4c:9d:4e:e4:08:90:9e:a0:af:
         70:e3:0e:22:2b:2e:29:29:4c:f4:75:74:98:26:93:d5:0c:82:
         8b:61:e7:72:b3:8b:6f:77:bd:15:fd:01:08:7e:7a:b3:11:15:
         e4:fe:11:c2:77:cd:d0:c4:9c:9e:bf:60:f5:a5:a5:99:a1:e5:
         cf:8b:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:27:51 2025 by rpki-client