Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ebab3613-1b63-32c0-b4b9-92539a7ae900.roa
File:                     ebab3613-1b63-32c0-b4b9-92539a7ae900.roa (raw, json)
Hash identifier:          XAfc6T7z9+7/0p67eIUwWABT7QhwhPLZaKfsT1u6CXo=
Subject key identifier:   A7:83:02:5C:25:B9:2D:86:5A:6E:ED:8B:3F:0E:15:67:A9:3A:5C:4A
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F4328584D5024F378B1F7C5865964D580
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ebab3613-1b63-32c0-b4b9-92539a7ae900.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     26411
IP address blocks:        103.207.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:f3:78:b1:f7:c5:86:59:64:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=393490d1-eeba-4a77-9967-14fd4b069552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:16:c2:24:e0:86:3b:7b:f5:c2:2e:81:1f:
                    5d:aa:f1:f5:55:80:96:4a:97:98:55:b0:f7:ab:f3:
                    c8:6c:61:44:93:b2:ea:7d:ca:7c:8a:a3:9d:2f:83:
                    90:a8:f4:42:64:a3:f6:65:d5:25:bd:ac:b2:05:dc:
                    10:55:b8:4b:82:43:b9:e0:72:d8:31:c6:02:98:05:
                    f2:0d:1d:f0:3e:9c:b9:66:36:73:a1:ef:da:16:3b:
                    6f:a9:9f:f6:58:47:90:f2:0e:46:80:1c:0b:b3:44:
                    10:72:6c:33:86:32:75:65:b4:aa:6d:f9:9d:9b:a6:
                    e0:1d:ce:6a:97:c1:c5:ed:10:01:d0:9a:87:52:ef:
                    c4:0c:7a:23:2a:60:18:11:52:52:56:eb:a2:a2:7f:
                    17:87:dd:69:1f:f2:e5:d7:55:ea:ce:51:55:61:b3:
                    57:bd:f6:a9:e2:b0:65:4b:7e:ec:45:ad:e7:4d:da:
                    41:be:ad:b2:2b:55:f3:53:7e:bb:63:83:14:2a:61:
                    f6:69:3c:d7:81:52:1a:ac:03:78:01:6a:1b:b4:f6:
                    68:43:b2:66:c7:d9:ef:21:d0:fa:cf:f8:1e:0f:36:
                    7c:d4:de:c0:6d:3c:72:18:fd:dc:c4:4c:01:7d:af:
                    a2:17:fc:7c:7e:0f:8a:3a:7f:5a:f9:95:76:ac:f9:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:83:02:5C:25:B9:2D:86:5A:6E:ED:8B:3F:0E:15:67:A9:3A:5C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ebab3613-1b63-32c0-b4b9-92539a7ae900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:b2:b0:1a:b5:01:e5:fb:79:b0:c8:c4:f4:91:de:73:56:
         35:9e:5a:4a:e6:15:99:17:86:01:3a:c0:f2:d3:1f:2f:39:02:
         c6:4a:9a:8d:42:67:5c:c1:fc:9b:f8:6a:8b:30:97:0c:33:ff:
         19:8f:be:f2:87:9c:c5:4e:de:39:cb:07:0d:3c:25:ef:2e:5a:
         ed:44:dd:ce:cd:f5:3f:9b:c5:b6:57:fb:73:63:ea:95:4b:f4:
         04:32:c7:f7:b4:55:ac:9c:b9:77:00:6c:33:ce:e4:eb:7d:1f:
         ef:a7:f3:4d:ce:80:26:e8:e2:3e:3b:80:28:6d:f1:56:ae:cb:
         af:b0:92:80:0f:5e:6c:0c:c6:56:ff:a4:84:17:ce:0c:99:3d:
         7b:46:3c:4e:f6:c0:22:f5:f2:56:ea:0c:40:7b:6e:bc:e3:a3:
         60:6d:29:6e:39:42:13:a0:3f:6a:51:50:d5:62:24:d3:69:22:
         fd:44:59:7e:64:73:ba:e9:7e:c4:3b:73:22:b1:5a:7b:49:f6:
         d6:02:1b:84:2f:ed:38:84:51:f4:77:c3:1e:a0:19:bb:ae:48:
         a7:2f:a5:21:16:99:3a:28:3d:bd:92:d6:07:49:c3:2b:4f:91:
         74:03:6d:44:3a:12:9b:de:63:cd:b9:93:9e:eb:91:35:16:79:
         05:d4:88:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:34:18 2026 by rpki-client