Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9906fbf6-967a-386e-ba4b-72979f2ae338.roa
File:                     9906fbf6-967a-386e-ba4b-72979f2ae338.roa (raw, json)
Hash identifier:          XAzU493iW23Zig0OE6zEIhpJ2PMIb3S/M5sRpN3CMvI=
Subject key identifier:   46:EE:EF:1A:E7:56:34:95:BB:43:03:87:DF:4C:0F:BC:08:BD:5A:E2
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584D09125AD487C510DA409614C0
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9906fbf6-967a-386e-ba4b-72979f2ae338.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     36007
IP address blocks:        103.101.201.0/24 maxlen: 24
                          103.101.202.0/24 maxlen: 24
                          103.101.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:5a:d4:87:c5:10:da:40:96:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=48345aff-86c7-4f4e-827f-a6a09ea0b8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d6:23:09:78:a0:38:89:8a:79:b8:bd:6e:9f:
                    cb:a1:99:b6:df:ba:b2:e2:0c:88:e4:aa:60:98:e0:
                    70:64:19:2a:cb:ea:58:30:0d:b1:d6:3f:91:76:a2:
                    93:0c:29:81:62:a3:ab:f0:61:37:61:e7:85:d2:ae:
                    b4:7a:9b:14:1b:64:fe:83:a0:24:42:00:4c:af:96:
                    f1:e5:87:83:bd:b3:23:cf:75:a3:5d:75:93:ee:0f:
                    d0:fb:bc:75:52:bb:7c:33:59:f6:60:5b:f2:c3:61:
                    ac:75:7f:24:5b:69:47:9d:c1:a2:ee:17:74:82:8f:
                    38:7a:d9:e4:e7:45:65:80:6c:ca:65:33:18:ff:94:
                    5a:31:80:c7:71:f2:e0:30:69:93:08:d0:ee:24:1d:
                    03:69:cc:c9:f8:e6:bc:bf:d7:69:63:ab:56:b2:5e:
                    f9:4e:e0:c4:84:b0:5a:d2:2d:e9:c2:21:ab:97:c1:
                    98:a1:c4:d0:26:e7:07:a4:b8:20:2e:8f:39:73:c1:
                    90:cf:98:14:2e:4e:64:78:20:0d:89:4b:8b:09:8e:
                    02:04:e4:f3:2f:8a:b3:69:c9:e3:1b:ba:55:74:66:
                    ae:49:ce:ef:b4:1a:7d:88:d1:97:6e:86:46:59:ff:
                    9f:6d:95:c7:65:48:ab:d2:af:73:c8:20:8a:9d:4c:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EE:EF:1A:E7:56:34:95:BB:43:03:87:DF:4C:0F:BC:08:BD:5A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9906fbf6-967a-386e-ba4b-72979f2ae338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.201.0-103.101.203.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f5:cf:f4:7d:ed:9e:10:43:81:34:aa:d9:61:72:5c:f1:b9:
         a7:92:1c:ae:0b:d0:73:be:7b:7d:f7:3b:bf:14:01:b8:9f:58:
         e7:b8:37:93:2e:25:03:a7:e8:75:5e:92:c6:4e:c8:66:d2:fe:
         c9:b3:0f:cb:14:84:01:05:cc:a6:aa:40:a3:78:03:ac:43:01:
         ca:18:1a:35:c6:37:18:8e:f1:cd:ef:00:9a:82:e7:9f:54:b6:
         9e:d8:01:43:91:5d:c3:c5:71:de:3b:91:31:6d:7a:ee:33:fd:
         58:d7:5e:85:fb:19:32:87:0c:a8:46:e6:6c:59:c0:e8:22:80:
         2d:ab:b2:05:09:3c:bb:25:ed:0e:8d:00:20:38:2c:34:ca:56:
         16:0f:3b:4f:e8:48:52:79:4b:14:f9:da:9b:e3:2e:bf:c7:96:
         2c:96:cf:27:bc:62:35:5e:df:8a:b3:1d:af:5b:51:60:87:be:
         1f:61:e0:a9:ff:77:ca:7c:ff:d8:44:82:c6:4b:c8:4f:1b:bd:
         0d:91:7b:48:9d:47:72:6f:77:be:bf:f3:ef:66:23:f4:53:0c:
         c4:e8:3f:6b:b5:ff:78:38:1b:4c:30:e5:dc:e2:6e:e1:f7:4c:
         a0:ed:39:0d:d6:94:78:6e:08:04:76:d4:ca:4c:67:e4:4d:72:
         44:a6:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:15 2026 by rpki-client