Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/d3346576-5a6d-3375-a9cd-03938002fce7.roa
File:                     d3346576-5a6d-3375-a9cd-03938002fce7.roa (raw, json)
Hash identifier:          1fmjJzjmror5Uch3nr/TrKnQpmFzN3JrKmlLUx3RHbs=
Subject key identifier:   CE:4B:70:38:03:E4:18:A2:F0:C3:7B:62:52:51:14:76:E1:ED:28:75
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F4328584B8EACE4F7C42EBC9CB4888F80
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/d3346576-5a6d-3375-a9cd-03938002fce7.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        103.109.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e4:f7:c4:2e:bc:9c:b4:88:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=8b36b38f-52c8-4215-92db-46c30115a7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e9:c9:10:4a:16:fc:92:03:53:69:33:53:fd:
                    96:2a:c4:fd:16:87:c3:00:6d:4c:e0:28:51:45:22:
                    b1:79:8b:88:e8:09:9d:7d:21:ba:df:a5:f5:a6:8a:
                    bc:20:54:3a:75:65:47:eb:16:36:6b:7a:2b:4d:17:
                    51:a6:32:62:d5:a2:9d:6a:4b:12:d2:2f:da:df:18:
                    37:a3:16:2d:e6:6f:04:ce:28:0f:f7:05:98:36:e1:
                    47:d9:a7:50:f6:7b:11:27:6f:0d:fd:92:d5:fb:a0:
                    92:2e:74:13:f4:c9:42:6f:1b:7b:02:01:8f:6a:49:
                    7a:cf:58:69:05:92:84:13:a4:45:1e:88:59:c0:e2:
                    be:49:ed:64:59:8c:fa:ea:7e:56:ab:f8:72:91:04:
                    6d:73:e4:d8:7f:fd:8b:3a:32:ae:a4:7d:d0:2a:3f:
                    39:56:6e:a7:ed:73:01:ae:04:83:7e:eb:1d:22:35:
                    6e:fd:42:b9:c2:53:93:1f:98:b4:c5:4b:c7:ac:43:
                    8a:24:c4:9b:c5:b1:d1:4b:6b:81:e0:13:db:df:1c:
                    36:58:36:85:8d:31:cf:5a:99:74:41:ed:0c:7f:a7:
                    23:ab:20:a3:ba:4b:52:b2:c9:60:5d:55:1c:e2:b9:
                    d5:77:69:f2:28:60:61:d8:29:2c:20:77:b9:7d:63:
                    35:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4B:70:38:03:E4:18:A2:F0:C3:7B:62:52:51:14:76:E1:ED:28:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/d3346576-5a6d-3375-a9cd-03938002fce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:13:58:7b:1e:86:a8:f0:5b:3b:78:af:52:bf:30:f9:91:
         0c:84:a9:41:8a:20:86:68:a7:37:37:c9:b9:19:f9:0f:13:09:
         b6:50:c7:69:96:57:14:a6:d9:c5:c8:24:88:18:c8:d6:09:f4:
         59:39:37:d3:88:02:9d:d5:6c:ec:4a:ed:bb:37:b1:36:49:ee:
         7f:32:45:a3:b0:3d:5c:5e:1a:e8:8d:fc:4d:d3:30:60:53:72:
         73:30:bd:c0:08:e1:e9:ae:20:9b:34:3b:7f:b1:0d:b4:99:9e:
         55:4c:ba:0a:89:e9:cc:43:d9:84:55:17:40:46:5f:3c:ec:04:
         9f:e3:8e:1b:88:92:05:19:c5:7e:5f:a4:96:e9:90:c3:de:b2:
         08:02:eb:6a:25:cc:04:85:2a:9c:55:92:13:4d:47:d7:89:2b:
         40:41:0e:6c:41:77:f5:f9:83:d1:d8:c3:d0:9a:a0:43:7a:0e:
         a2:ee:00:17:7b:4f:f7:40:68:8e:1f:7d:30:f8:48:a2:40:29:
         4c:70:94:96:86:5c:ac:c4:3d:46:74:26:bf:c6:8f:89:6b:5f:
         dc:57:b3:31:ee:b3:fb:00:57:e3:3c:07:b2:62:6a:76:0d:0e:
         89:67:d4:69:8d:e6:a1:67:17:dd:ad:f2:be:ec:68:39:5a:89:
         2e:9b:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:16 2025 by rpki-client