Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
File:                     da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa (raw, json)
Hash identifier:          JvcxWWD+cAXTFFWs1rvSwhcvax0J2Q5fprsxE5YMv0k=
Subject key identifier:   D7:79:E6:36:48:6B:A6:E6:39:41:77:74:AE:21:F1:98:9C:57:9A:F0
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F4328584E2D9F20F476F74B32F3DE4800
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        103.109.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:20:f4:76:f7:4b:32:f3:de:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=b09e1b88-50ad-4ecd-a274-b05b8633dd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:46:8b:9f:33:4f:9f:f8:c7:ca:e1:c9:7b:0a:
                    4e:6c:f0:a3:2d:84:26:0e:2d:db:1c:d1:08:10:1c:
                    16:87:86:6e:64:5a:99:0c:92:72:68:99:b7:b2:e0:
                    25:34:70:43:02:d4:27:5f:bd:5e:5a:a6:02:93:8f:
                    96:dd:8d:5b:31:6e:8b:d1:58:3f:79:12:3f:a8:70:
                    4a:9a:af:ab:89:20:93:f8:2d:a2:cb:dd:4c:00:ef:
                    00:27:ae:ac:36:f9:0a:99:8c:e4:d7:f6:11:e3:97:
                    31:36:1f:e8:ae:c3:6b:28:de:85:83:e8:c0:be:4c:
                    39:2b:8c:eb:4f:25:c0:c6:ac:ad:11:0b:7a:9c:ac:
                    0f:fb:8d:42:a6:37:82:e7:76:70:37:7d:08:d6:50:
                    58:7e:b9:f9:94:e8:8e:5d:38:bc:62:53:5a:60:af:
                    2d:84:67:ac:30:8a:ba:37:26:0d:ee:14:d1:65:9e:
                    69:63:59:f9:a5:45:be:f9:51:90:c5:df:d1:86:2f:
                    32:66:36:68:e3:db:7c:d0:86:fc:0c:b2:1d:70:1a:
                    cf:4d:e3:cf:b1:4d:b5:ce:63:0b:1a:83:29:ee:4f:
                    13:49:d5:83:bb:72:ba:83:2d:5d:62:45:e6:8e:5f:
                    d9:36:af:24:77:a5:1b:97:af:a4:0b:a1:1f:72:f8:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:79:E6:36:48:6B:A6:E6:39:41:77:74:AE:21:F1:98:9C:57:9A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a1:b7:bb:9a:dd:b2:eb:77:f0:5e:ab:91:fa:2f:74:0d:bb:
         a0:33:80:43:2c:bc:60:e3:43:6e:01:9c:24:38:de:f2:fa:7a:
         74:02:32:db:57:0c:82:15:58:ff:1e:a8:47:69:a0:d6:85:f9:
         11:72:fd:d3:45:72:0d:42:00:48:62:b0:58:d6:d6:c5:0d:70:
         f0:a0:24:09:89:23:5a:5e:66:dd:9b:4f:ce:df:91:28:bf:16:
         d6:48:51:74:20:c0:fa:1d:05:87:0c:80:58:9f:10:36:c6:7e:
         60:ce:7b:14:f8:a7:5f:cf:ad:63:65:27:ba:d0:a9:b0:1c:4e:
         f3:c5:53:9c:68:ef:61:46:e8:4d:11:94:56:5c:de:d1:52:c2:
         af:96:b3:b2:d3:b4:3f:40:6d:81:45:64:4c:e5:d5:76:ce:ff:
         ed:f2:73:dd:a3:80:ce:e0:85:a9:47:9e:f2:2d:ba:87:cc:88:
         08:a0:02:ce:43:a7:bd:7a:7c:ec:4b:c0:68:ef:b0:31:65:fa:
         b3:cd:ae:3b:9c:9b:0b:2b:c7:67:d8:72:9a:81:8c:42:c2:bb:
         27:48:97:16:5b:1a:f3:41:02:c2:c5:4d:08:ea:03:6e:d9:c5:
         4a:c1:c1:c9:14:8b:fb:fd:0a:b4:ea:a1:c2:6e:27:76:14:3f:
         cb:57:f4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:32:13 2026 by rpki-client