Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/a763c0fd-3664-3a86-94ac-754c8c60d958.roa
File:                     a763c0fd-3664-3a86-94ac-754c8c60d958.roa (raw, json)
Hash identifier:          IRtogDZCuSkd/y96IN4Hw0jqaZhqwcnrdYnIlmQJYtA=
Subject key identifier:   0B:8A:AC:7B:01:90:8A:D9:23:4D:CA:FF:C6:71:0A:8C:3B:B8:4D:72
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584EE6574495674F6FEF25C50DE0
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/a763c0fd-3664-3a86-94ac-754c8c60d958.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        103.50.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:44:95:67:4f:6f:ef:25:c5:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=cc2af23a-d6ba-4b66-b42a-48c46343c321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:74:60:48:a8:27:3e:bd:b1:6a:de:4f:cb:fb:
                    93:83:06:48:38:3b:3e:fa:88:ca:ea:4f:e5:dd:4f:
                    2d:27:79:6b:bf:24:7f:8f:65:b4:01:11:3d:8c:0f:
                    84:c0:52:09:35:af:6c:23:52:9c:16:d1:bc:40:d0:
                    36:49:09:f1:3c:22:65:54:32:6b:bc:47:9b:d3:ee:
                    eb:86:a8:3d:c7:67:c7:dc:d0:fa:50:84:e5:d1:46:
                    f8:18:e6:16:a9:69:ba:87:46:a9:9d:7f:b7:46:63:
                    ef:cc:c3:02:6b:4a:bb:89:dd:56:35:5d:01:6d:66:
                    32:3d:36:16:1c:00:b1:15:04:75:0f:07:96:21:42:
                    cb:b9:e1:de:b5:36:b9:ba:f5:c2:f9:47:3e:8f:22:
                    81:50:a0:c2:78:c4:43:8f:16:69:9d:29:25:fd:a3:
                    06:93:45:66:5f:c4:19:14:38:ee:ea:2b:36:1c:c9:
                    6b:01:ed:70:2f:7e:10:81:ed:e8:78:77:27:f5:93:
                    d3:61:34:da:b0:19:1f:03:d7:04:ef:1b:8f:37:81:
                    44:5a:c5:7e:95:07:9e:ff:26:45:ab:7c:06:44:70:
                    fb:10:1d:6b:4b:a2:00:b4:9f:f4:78:e9:b9:88:61:
                    dc:6d:87:a3:1b:4b:7b:f6:0e:03:5b:da:a8:e4:16:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8A:AC:7B:01:90:8A:D9:23:4D:CA:FF:C6:71:0A:8C:3B:B8:4D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/a763c0fd-3664-3a86-94ac-754c8c60d958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:29:36:ef:f4:9a:e2:f0:2e:60:34:dc:91:10:79:10:b3:
         26:fb:81:e5:f0:c4:63:b7:a9:7f:e1:6d:2a:d3:69:da:16:5e:
         05:6d:d4:5b:5c:b4:56:6c:76:a8:b5:01:4b:9f:33:a2:70:56:
         44:76:59:ee:8b:ad:db:82:02:ac:ca:c8:37:ea:57:e1:69:09:
         6f:93:92:2b:c6:39:51:0f:c0:74:f3:fd:4f:24:17:63:34:3b:
         4a:72:28:87:47:69:b8:2f:c1:f8:43:06:9f:d3:39:5a:f1:4a:
         97:c4:12:bc:df:ad:c5:0f:92:db:a7:f1:38:25:d5:13:2f:a6:
         1a:3f:02:bf:4f:2f:b6:51:5a:e0:3b:39:8f:0e:1d:aa:91:1b:
         80:45:82:0e:f6:d3:71:a1:f0:e2:2b:68:7a:a7:56:26:6a:d4:
         ff:2f:bc:64:32:8e:d8:65:5c:89:d1:07:a9:d0:c3:f7:e1:e3:
         cb:2f:e3:93:09:1b:fc:0d:b5:21:3b:8a:23:2c:a8:97:c4:a4:
         e3:d3:b6:47:f8:47:1f:46:c4:48:df:e0:57:92:99:47:7c:58:
         25:6c:66:b5:41:18:d9:0b:ee:43:a2:d8:ea:7b:02:51:f6:29:
         ac:48:20:4d:84:09:da:19:12:50:8a:db:56:a5:39:71:58:aa:
         29:16:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:26 2026 by rpki-client