Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
File:                     da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa (raw, json)
Hash identifier:          GMCr3TnLQ8C4uyOU4yzXfjAC+bpjnraEuNsj+DjeuGk=
Subject key identifier:   65:96:80:53:07:89:45:83:B7:B5:CC:BA:97:FB:74:B3:26:4D:0F:23
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F4328584B8EACE50A2EE0DAED45050200
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        103.109.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e5:0a:2e:e0:da:ed:45:05:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=9657e1fe-3710-469d-88f0-a4e0e15efdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8a:30:30:71:78:de:a8:f9:6c:51:d8:36:f6:
                    40:11:e0:b1:0f:8b:55:e8:cc:2d:96:63:70:af:be:
                    dc:ba:2a:45:f3:5b:50:f3:a5:36:b6:e8:92:f8:e0:
                    de:a6:ee:cc:48:c3:50:8a:ef:4c:8c:af:6d:41:0e:
                    93:ed:bd:30:34:a5:96:f6:53:77:1f:a0:2b:4c:74:
                    8d:bf:ef:77:7b:f3:e0:ed:f2:ea:1f:8f:d7:60:de:
                    3c:77:77:c7:f2:0e:8d:a6:e0:68:81:ee:2b:6b:d9:
                    84:5a:36:89:ad:dd:1b:83:5a:62:bb:9f:c5:ba:5e:
                    75:14:ec:1e:b0:f2:aa:f0:31:6f:3c:6f:e9:f9:44:
                    3b:86:2d:f2:5b:01:4a:1b:28:90:ac:8a:89:04:9d:
                    fc:da:b4:7a:11:be:de:b1:95:98:10:09:b5:e0:33:
                    46:50:bd:22:cc:2d:4a:ce:fe:6c:75:c1:90:eb:43:
                    64:6f:e1:23:84:bd:dd:de:58:7a:24:50:ea:d4:ba:
                    d6:4a:8f:56:8e:9a:96:51:50:7d:21:71:af:1a:89:
                    f8:f7:3d:a0:1d:3e:76:2a:1f:7b:04:3f:71:46:d9:
                    d1:ba:93:f7:ef:64:21:bf:2e:64:31:2e:8c:d2:aa:
                    a7:b5:6d:ba:0f:99:12:81:b7:5f:80:43:71:bd:20:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:96:80:53:07:89:45:83:B7:B5:CC:BA:97:FB:74:B3:26:4D:0F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:da:68:41:f4:0c:68:4f:49:a4:cd:0d:14:3f:9f:fc:8f:7a:
         09:99:b2:3f:a5:48:8d:5f:35:b0:ab:e2:f3:67:b6:c1:fa:ef:
         41:63:a8:3c:ce:fb:8c:82:31:40:a9:10:70:3c:4e:bf:9a:88:
         23:e7:db:99:4e:22:c4:e3:1d:93:9a:a4:53:0b:a2:90:15:f8:
         d0:3b:bf:ba:d7:25:ed:1b:e3:13:11:d2:05:4c:f5:ba:03:f6:
         12:89:5b:60:63:ac:e7:7f:75:10:27:f6:d9:59:cb:96:2b:4f:
         07:de:88:db:62:a4:06:1a:c0:3f:a4:e3:e0:2b:10:a4:69:57:
         f6:f3:38:83:6d:f4:cf:27:a3:b4:11:e2:00:9c:bc:4b:d4:91:
         72:68:cb:1a:6c:6d:2f:16:12:8c:55:11:76:39:b1:1c:bf:be:
         fa:dc:91:dc:32:0c:08:34:45:d2:ff:59:6d:66:24:ff:08:f7:
         40:ca:ff:04:66:17:a2:0e:c5:46:9e:21:ad:09:ec:92:79:fc:
         31:79:0f:89:40:72:f7:29:77:09:79:49:9e:37:cd:ed:4a:96:
         02:6a:c2:40:93:3d:24:19:ee:ed:44:df:40:36:27:e9:63:b8:
         c6:4f:23:0b:a6:18:27:2e:06:f3:cc:10:9f:f9:61:d5:20:1a:
         cd:03:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:57 2025 by rpki-client