Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/abbda74d-0a61-31ad-bb81-b8324303cd4a.roa
File:                     abbda74d-0a61-31ad-bb81-b8324303cd4a.roa (raw, json)
Hash identifier:          kDZ63aOzZzyK7kduS3jZd5qfmi+u+REvgYhshFfaL78=
Subject key identifier:   0A:98:A2:BC:05:E4:EA:76:76:9B:01:B7:84:09:15:9E:D1:74:EC:E3
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F4328584ED001EE3CB90BB77DEDCE3B00
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/abbda74d-0a61-31ad-bb81-b8324303cd4a.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        103.109.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ee:3c:b9:0b:b7:7d:ed:ce:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=19c07f3b-b0fc-45f4-96d3-a46bf7438fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b2:fd:49:fa:c8:c3:da:0a:c7:94:aa:86:06:
                    01:3a:fb:ca:07:d7:a8:b3:c1:8c:51:f4:a7:53:82:
                    65:61:1b:c3:35:b5:ce:a2:64:88:b3:c7:c7:0f:12:
                    ea:da:ce:df:ed:29:8e:1b:b4:bc:64:56:f6:2c:36:
                    02:87:e8:a6:bc:c3:b3:b7:54:61:0c:a8:9f:c6:d7:
                    b4:0f:fa:0e:21:82:52:ec:f8:7a:31:87:30:cc:56:
                    59:64:f7:ec:3f:00:d1:4c:b0:42:c7:b5:66:b4:82:
                    a3:c2:88:96:ce:b9:01:0c:4a:20:50:df:63:d0:28:
                    6f:c0:28:29:40:03:2e:cc:3a:3f:2b:b7:bd:38:97:
                    fa:2c:a5:4f:b0:28:c1:7c:a1:40:07:3b:b6:f5:e9:
                    f7:a2:42:93:4c:b0:35:7b:c1:8f:2b:32:8d:31:43:
                    d1:94:cd:87:16:2f:c1:18:32:5e:69:f8:23:00:5c:
                    75:94:e9:84:02:79:42:e0:47:50:57:bd:bb:93:7f:
                    32:4a:60:c6:6c:62:cd:59:7f:ed:c3:9d:ac:26:2b:
                    b5:19:19:9f:76:ba:71:1a:6a:72:f8:55:cb:58:01:
                    87:af:be:95:cf:f2:3b:10:a0:3c:00:eb:3e:8b:7c:
                    94:47:52:63:8c:0b:99:dd:5b:98:5b:b5:83:df:92:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:A2:BC:05:E4:EA:76:76:9B:01:B7:84:09:15:9E:D1:74:EC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/abbda74d-0a61-31ad-bb81-b8324303cd4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:56:1a:07:40:54:12:c3:ca:6f:1b:90:f6:68:80:b2:bc:9f:
         e3:bd:35:c9:20:6b:73:b9:1e:6b:b5:5f:5a:49:af:23:94:c0:
         9a:ad:45:99:06:35:f8:09:6a:bf:e5:67:09:39:40:30:a5:89:
         27:66:3b:d6:fa:25:bc:ce:dc:7b:ea:47:c7:4d:62:3a:e7:25:
         4f:07:0b:40:bf:ad:22:01:8f:40:7f:ce:80:08:14:ee:9e:2f:
         5c:35:3b:21:9e:78:59:c3:e4:ea:50:f8:ce:c6:b2:92:db:ae:
         dc:02:92:73:72:9c:61:ef:dc:10:93:d0:bb:29:ea:83:ac:78:
         ec:85:68:fa:ab:b8:98:cc:f2:c2:21:31:a0:e1:fb:ef:f0:f4:
         94:43:4e:02:f8:7b:0f:80:4d:5d:e7:b7:5d:71:2c:75:cc:5e:
         d6:52:0b:d5:c1:9d:20:df:d9:af:e8:7f:61:a7:2d:39:6b:34:
         b7:e2:ec:70:9d:14:a7:ae:47:3f:86:db:57:c7:43:79:ad:25:
         26:22:89:4e:da:75:9a:0a:88:72:2d:50:08:dd:c0:66:d6:ab:
         d8:94:5b:5b:4d:ab:8a:13:c8:ab:7b:78:d4:40:29:62:e7:9e:
         64:c1:60:4e:cc:fc:b2:61:28:b7:ed:23:ac:96:1f:10:c2:aa:
         d1:44:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:24 2026 by rpki-client