Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa
File:                     f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa (raw, json)
Hash identifier:          vrS5zOZ5+O1eazyw827y/eNi4FoE0jfP8yKXYrLNcnk=
Subject key identifier:   01:83:D9:93:4E:88:D4:18:40:BC:19:9A:E5:D4:07:0F:40:28:DA:7A
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584DC29AECEDCA9ED1E0883511E0
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     54913
IP address blocks:        103.98.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:ec:ed:ca:9e:d1:e0:88:35:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=59b4d95f-b6bd-4ebd-b85d-b81a46d4ecd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:da:2c:cf:5a:21:14:5a:24:81:b0:5a:2b:
                    0c:d7:9d:17:1c:64:0d:07:6f:b6:2a:37:c4:30:45:
                    4a:bc:90:8c:fb:7b:ca:4c:6d:44:36:82:b5:74:79:
                    99:22:6e:b7:7a:d4:8a:5c:5f:a8:6f:4d:63:da:10:
                    7d:df:85:81:f6:01:d6:52:75:31:59:ae:8b:77:9d:
                    5f:3a:cb:b2:45:3c:26:c2:85:dd:6a:94:8a:22:db:
                    bc:48:94:9d:be:15:4e:32:81:46:2b:56:06:b6:45:
                    bd:d2:ff:0b:0a:a4:d5:e5:d5:07:06:83:1e:a1:0f:
                    67:49:16:1c:11:26:68:80:db:b0:f1:8a:80:a1:4b:
                    7d:c2:3a:7b:56:81:ef:c6:0d:4f:1a:42:8e:13:1d:
                    a6:9e:4f:bf:b9:37:95:7a:40:d6:cd:db:4d:b9:6f:
                    93:d5:bd:b9:11:a5:79:3a:d0:f9:12:af:85:b0:6c:
                    7f:68:fd:1d:b9:96:61:fb:25:d0:cc:ea:6e:76:f7:
                    23:1b:d3:3b:27:50:90:c2:65:73:4d:24:1e:41:2d:
                    c4:9a:7e:47:fb:89:d6:2c:16:b6:96:ed:5f:cf:8a:
                    ee:7b:68:53:c9:a1:8c:91:94:25:b2:c7:5f:4c:24:
                    55:95:58:d5:87:ba:90:b0:44:82:99:a9:6d:56:f5:
                    5d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:83:D9:93:4E:88:D4:18:40:BC:19:9A:E5:D4:07:0F:40:28:DA:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:48:62:ce:17:19:4a:d6:89:74:e0:f3:94:b7:a9:b5:70:77:
         29:83:72:c5:3b:43:1e:cd:70:f2:1b:2a:5f:74:8c:60:36:6d:
         b9:0d:cf:60:4c:0c:0c:fa:35:03:f3:b9:2a:ad:7b:4d:77:50:
         1e:a5:c1:98:ff:46:c7:13:b5:75:68:54:c6:78:50:c5:43:c0:
         09:fd:f5:81:21:5a:6b:19:a1:9f:fc:ef:3e:cc:51:ed:a5:91:
         a0:f7:81:dc:7d:df:cc:bf:f3:8e:d3:e8:28:39:c4:03:fc:ea:
         e9:93:0e:2b:9a:90:1f:88:cb:f5:95:ca:38:5f:d9:6b:0c:58:
         c3:7d:26:a6:f3:4f:38:b6:1f:3e:18:28:74:5c:75:d2:cb:7a:
         04:e4:b7:48:00:f5:4b:23:d0:e4:58:30:29:ff:ba:43:ed:0e:
         26:b3:f7:6f:5a:7e:b5:f2:b6:03:c5:d8:e3:86:9b:db:49:95:
         04:f5:19:d9:db:12:d1:25:13:6e:ba:31:b1:3b:6e:00:bd:87:
         cc:6f:17:8d:4f:b5:f1:69:fc:6d:01:66:fa:fb:7d:fe:a5:b2:
         63:d5:7e:0f:89:a2:df:72:1d:a6:d7:16:dc:05:dd:e9:71:15:
         05:93:2b:85:c2:e0:03:ad:a9:b7:10:7a:10:4e:df:34:8e:d6:
         a1:68:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:56 2026 by rpki-client