Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3eeb7424-c3a8-33ab-8757-8c598f910665.roa
File:                     3eeb7424-c3a8-33ab-8757-8c598f910665.roa (raw, json)
Hash identifier:          HRiUwLfqDTzS5SS5f0E6AyA2fh5WwrcAMXYLlaV0fF4=
Subject key identifier:   78:D7:C9:C3:DC:EE:6B:FC:4A:70:57:EB:17:66:E9:9D:46:AD:88:10
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584F8412E682406279B869E76540
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3eeb7424-c3a8-33ab-8757-8c598f910665.roa
Signing time:             Fri 16 Oct 2026 01:00:12 +0000
ROA not before:           Fri 16 Oct 2026 01:00:12 +0000
ROA not after:            Thu 14 Jan 2027 02:00:12 +0000
asID:                     36273
IP address blocks:        181.203.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:84:12:e6:82:40:62:79:b8:69:e7:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Oct 16 01:00:12 2026 GMT
            Not After : Jan 14 02:00:12 2027 GMT
        Subject: CN=bddf4a0b-7d8c-4aef-bf5b-ef6c0002156f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:83:0e:be:14:66:0b:e0:fc:df:01:9d:bd:
                    5e:74:75:6a:57:45:5c:e4:fb:d0:97:c9:8c:ac:05:
                    e6:b5:c6:24:6a:49:5f:f6:1e:8b:aa:3b:1b:c0:5c:
                    f9:b5:53:c8:50:d8:34:d8:05:38:b5:7d:83:15:7e:
                    3d:9c:d6:c8:e1:81:22:76:91:3f:28:1a:68:7a:e0:
                    f4:e9:76:59:87:bc:c5:ab:af:a0:9f:2d:c5:60:7d:
                    9e:08:12:01:0d:20:b6:de:17:84:e3:35:74:f9:87:
                    1c:29:fe:96:a7:77:dc:05:15:53:01:0c:91:ca:5f:
                    a5:c6:97:89:cb:7e:d9:16:b7:55:03:14:8c:32:21:
                    d6:ff:db:b7:28:50:3c:70:79:76:2a:2b:53:5d:e9:
                    7d:89:97:2d:49:24:42:96:d3:5c:18:01:6c:fb:55:
                    d1:c5:80:69:50:ce:d2:36:60:7b:ea:7c:61:fb:2f:
                    70:80:81:e0:28:ed:2f:2d:56:7b:dc:18:bb:0e:cd:
                    07:df:f4:f0:85:bf:07:57:f0:f4:c5:6e:b4:f3:6f:
                    d0:bb:e1:e3:72:c1:38:c3:6a:23:24:40:1e:ab:dd:
                    ff:23:84:45:df:1b:af:38:cf:08:28:ed:f3:f7:98:
                    e3:c4:c5:52:f8:63:b9:81:8b:06:2b:35:08:e4:02:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D7:C9:C3:DC:EE:6B:FC:4A:70:57:EB:17:66:E9:9D:46:AD:88:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3eeb7424-c3a8-33ab-8757-8c598f910665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.203.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d1:62:75:b9:33:63:69:2e:65:b8:e7:06:0a:b2:21:e9:4a:
         9c:b3:48:00:cc:80:df:19:b0:0a:93:d6:54:fc:07:e0:08:26:
         73:e3:ca:1b:98:2d:b0:32:b8:03:b2:f2:d0:f1:7b:5e:64:a8:
         f1:88:85:39:c7:4b:13:42:e0:22:83:83:a8:67:76:2c:20:f5:
         f8:04:39:6b:1d:bd:db:18:fe:ca:69:83:fd:bb:4e:e3:5a:d6:
         a2:2d:dd:a1:dc:ef:7b:36:8d:53:b3:5e:25:7c:49:39:e0:58:
         53:ca:1d:48:9c:56:de:78:0e:a9:b9:af:9c:eb:1b:0e:fb:59:
         92:bf:bd:15:a7:25:22:d9:fb:17:d4:5e:84:da:56:ab:01:f7:
         c8:6b:62:48:e1:69:57:6f:35:3c:3d:fb:92:25:6d:d1:27:2f:
         79:2e:35:ad:b0:03:7e:a6:a7:1d:d0:51:5e:2d:29:4c:af:da:
         89:97:9d:97:d9:47:11:25:47:a0:e6:a9:2e:92:79:96:16:0c:
         4d:fb:b8:43:4b:7f:da:9a:1c:54:8f:c3:61:6e:9b:33:d0:54:
         cb:f6:84:01:2f:e1:c9:92:8b:4b:66:01:74:56:83:48:8e:60:
         13:9a:c6:c2:48:70:7b:c8:4c:fa:ea:13:d5:60:a6:7a:28:4d:
         95:a5:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:04:33 2026 by rpki-client