Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d5b299a-8499-41fd-af46-61966179d3fd/c2d084a9-921c-3877-b02e-6f0cb6f3d754.roa
File:                     c2d084a9-921c-3877-b02e-6f0cb6f3d754.roa (raw, json)
Hash identifier:          p3bRip9QNErAxqpaQD8j0CqTJbGbP7dlHdI/qVi+hZI=
Subject key identifier:   15:32:18:1E:2C:7D:D2:A6:FF:65:FC:A5:27:2D:E3:CF:68:17:A9:C1
Certificate issuer:       /CN=9d5b299a-8499-41fd-af46-61966179d3fd
Certificate serial:       010D0C9F4328584F6D741731C4CEBDF8935F2A00
Authority key identifier: 44:D3:85:74:1F:0B:C6:D5:C9:03:DC:60:54:EF:D7:68:FD:FE:31:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d5b299a-8499-41fd-af46-61966179d3fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d5b299a-8499-41fd-af46-61966179d3fd/c2d084a9-921c-3877-b02e-6f0cb6f3d754.roa
Signing time:             Wed 07 Oct 2026 22:32:28 +0000
ROA not before:           Wed 07 Oct 2026 22:32:28 +0000
ROA not after:            Tue 05 Jan 2027 23:32:28 +0000
asID:                     54890
IP address blocks:        101.203.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d5b299a-8499-41fd-af46-61966179d3fd/9d5b299a-8499-41fd-af46-61966179d3fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d5b299a-8499-41fd-af46-61966179d3fd/9d5b299a-8499-41fd-af46-61966179d3fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d5b299a-8499-41fd-af46-61966179d3fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:74:17:31:c4:ce:bd:f8:93:5f:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5b299a-8499-41fd-af46-61966179d3fd
        Validity
            Not Before: Oct  7 22:32:28 2026 GMT
            Not After : Jan  5 23:32:28 2027 GMT
        Subject: CN=4c7b4d55-40d2-4c18-9655-5c4b4f0b73f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:c1:7a:aa:06:d8:68:bb:91:f6:20:6a:c9:
                    64:c8:24:27:51:e3:b2:d1:b2:73:83:a4:b1:1e:ad:
                    14:ac:a2:57:bb:34:3d:78:05:1a:01:49:20:a0:04:
                    ef:15:e7:a8:9f:ca:51:7c:55:94:45:6b:27:f5:f6:
                    4b:c7:a2:83:20:a3:34:73:14:c0:2e:1a:e5:8d:df:
                    53:cf:a5:29:34:5f:8f:3b:0e:25:7a:38:9d:24:91:
                    9e:18:4e:51:56:87:f7:51:84:11:76:35:1a:57:84:
                    dc:1d:8a:1d:99:23:13:7c:00:a2:f7:46:00:fa:e9:
                    84:a8:5c:37:b9:2a:69:8e:bb:f1:46:f1:7c:65:65:
                    b2:c1:8b:df:98:9b:57:9e:33:4e:22:cf:cf:6a:f2:
                    28:29:c3:d0:1b:49:38:cb:85:39:ac:6d:58:63:8a:
                    cb:d2:8b:0e:e8:69:0a:c2:4f:15:90:f0:ce:e7:45:
                    09:7e:16:6f:1f:3c:85:bb:f2:25:96:29:74:b6:56:
                    24:b3:2b:e7:55:53:a2:6a:23:b4:81:49:11:43:6d:
                    36:a6:ba:95:96:86:9c:e7:95:aa:6e:07:fb:59:b5:
                    d5:d8:4e:52:95:f3:f2:5a:2e:aa:68:c6:b2:7f:cc:
                    c2:70:17:89:0a:1c:80:1c:50:7b:46:34:01:c9:95:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:32:18:1E:2C:7D:D2:A6:FF:65:FC:A5:27:2D:E3:CF:68:17:A9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d5b299a-8499-41fd-af46-61966179d3fd/c2d084a9-921c-3877-b02e-6f0cb6f3d754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d5b299a-8499-41fd-af46-61966179d3fd/9d5b299a-8499-41fd-af46-61966179d3fd.crl

            X509v3 Authority Key Identifier:
                keyid:44:D3:85:74:1F:0B:C6:D5:C9:03:DC:60:54:EF:D7:68:FD:FE:31:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d5b299a-8499-41fd-af46-61966179d3fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:28:b0:10:b9:df:ae:8e:2a:5c:f3:f7:f4:e7:6a:53:e6:a4:
         df:b2:48:ba:d0:45:89:3f:90:41:b7:4e:5f:7e:b7:4e:62:8d:
         d8:96:45:2e:42:b7:6c:ff:48:98:c9:f0:77:86:66:ad:b1:29:
         cd:0e:07:45:a8:c4:35:e3:4a:02:6a:9e:d5:54:7a:7e:26:2d:
         22:f4:55:4d:39:c8:ec:d0:7b:cb:67:78:8c:d9:42:fd:57:29:
         9a:e5:11:9a:5f:93:68:8d:cc:a1:cb:5c:f3:65:38:f9:b1:d2:
         9f:64:84:d8:e0:da:67:6c:c0:c0:86:f2:15:72:88:e4:b4:d7:
         c2:7b:db:27:12:bf:4d:be:36:8f:d4:fb:35:d6:9b:13:d2:27:
         05:1f:fa:cf:46:7b:c5:20:56:bd:08:5e:60:13:bb:2c:4c:ea:
         a5:ec:d2:ae:88:a1:40:69:66:f0:b9:82:1a:4b:25:b2:b9:ad:
         a0:c4:03:4c:4c:9a:7e:db:af:86:c6:05:18:97:be:c2:5c:6f:
         38:e3:52:54:42:12:d0:12:c7:fc:03:3f:b1:62:81:82:c8:51:
         ce:b0:f3:06:39:04:c6:ac:41:b1:6a:98:bd:fa:0d:01:fa:cf:
         6b:14:18:0c:94:f5:60:51:43:fc:0e:e1:04:3b:2a:69:be:da:
         ba:98:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:53:23 2026 by rpki-client