Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/d6fdf7a3-62f0-3a81-accc-fb1e9d6fecc0.roa
File:                     d6fdf7a3-62f0-3a81-accc-fb1e9d6fecc0.roa (raw, json)
Hash identifier:          +qA6M+RnAj0+l/jNvhGLT9dUbzArpilBTYrun16HYYA=
Subject key identifier:   1D:73:75:1F:C7:B0:9D:39:CC:10:8F:84:22:7A:26:40:9A:C5:3D:FC
Certificate issuer:       /CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
Certificate serial:       010D0C9F4328584B1F0226CBCF6A4F28B8130D80
Authority key identifier: 33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/d6fdf7a3-62f0-3a81-accc-fb1e9d6fecc0.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     401332
IP address blocks:        103.17.153.0/24 maxlen: 24
                          2602:f81c:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:26:cb:cf:6a:4f:28:b8:13:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=fd88b155-8f43-45ff-97b0-c43ab8e70870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:df:52:ae:b7:91:b1:60:b1:64:b0:a4:ac:01:
                    96:1a:ab:f5:e7:fe:11:21:4a:a3:5d:95:3f:ab:c4:
                    ef:09:b9:32:16:21:05:fc:cb:b5:06:38:34:9e:39:
                    06:b4:cd:45:de:e5:9a:14:fc:a7:02:5a:4c:4f:94:
                    3a:bf:1f:e1:12:80:68:c9:2e:08:6b:8b:bd:a7:29:
                    fd:99:7c:78:c8:14:59:d7:9c:38:0c:5d:dd:45:82:
                    8c:cf:55:5b:80:10:44:3b:53:39:d6:10:19:d8:0f:
                    50:82:9f:b7:41:4e:a4:75:1b:83:0e:62:f0:64:9d:
                    c0:7a:9f:cb:c4:cb:76:2f:54:17:f1:f7:3b:22:c6:
                    5c:ff:73:3b:93:2f:1d:c5:b0:05:a5:a1:55:9f:18:
                    cf:61:c4:3c:fc:ee:32:a5:a5:b8:3a:05:da:27:ad:
                    09:4a:2a:7f:24:14:98:19:12:d0:aa:86:9a:00:45:
                    28:85:24:07:4c:49:a5:fb:78:64:65:97:e7:ee:f5:
                    bf:16:46:d5:1a:08:b7:cd:11:99:92:92:3a:85:56:
                    95:71:d6:98:43:e0:7f:28:73:3b:20:1f:f4:36:0d:
                    19:c5:04:af:b1:ef:57:50:de:97:b9:f2:7d:37:03:
                    b9:72:53:bb:b2:f2:59:0b:fc:44:9c:84:e8:48:b3:
                    f2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:73:75:1F:C7:B0:9D:39:CC:10:8F:84:22:7A:26:40:9A:C5:3D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/d6fdf7a3-62f0-3a81-accc-fb1e9d6fecc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.crl

            X509v3 Authority Key Identifier:
                keyid:33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.153.0/24
                IPv6:
                  2602:f81c:81::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:39:d6:f1:94:aa:37:91:63:87:5c:98:50:ad:15:8d:2f:c7:
         86:ca:87:a8:1c:c7:39:94:c0:7f:40:34:62:7a:a2:c9:0b:00:
         45:63:dd:63:91:ca:5f:6c:ed:d2:cb:77:14:08:13:da:86:37:
         ea:23:41:7f:4f:6f:1e:50:6a:cb:e1:28:14:5d:b5:58:97:6c:
         07:84:28:e3:b9:7e:dc:98:de:d4:a2:18:d4:72:74:47:34:2d:
         51:4f:41:a0:1d:e3:9a:14:1f:97:44:ad:ab:f0:ed:94:d6:60:
         c4:83:ca:be:3c:09:cf:4f:5d:d3:de:01:b2:36:71:69:2b:1e:
         bc:c8:1e:ce:f3:6d:bd:5d:9d:6b:f5:6b:11:00:90:84:ea:47:
         0c:5e:2f:57:14:b1:92:1d:a3:a0:e7:08:46:5b:fb:59:36:b3:
         a7:4f:c3:88:e2:be:49:ce:4c:ca:22:2f:4f:b6:8a:37:65:48:
         27:5c:c1:25:1b:d7:d1:0e:58:66:f4:96:3f:35:c9:74:8c:d5:
         90:91:94:66:ed:e9:5a:c4:b7:e7:58:c6:0d:9c:d3:13:9c:92:
         9e:fb:b7:bc:4b:f3:6c:66:56:dd:77:86:46:16:f7:63:a4:6a:
         de:48:09:ee:d0:e2:7b:e3:e5:65:77:85:2a:88:28:03:d8:c1:
         83:80:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:55 2025 by rpki-client