Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/d6fdf7a3-62f0-3a81-accc-fb1e9d6fecc0.roa
File:                     d6fdf7a3-62f0-3a81-accc-fb1e9d6fecc0.roa (raw, json)
Hash identifier:          9ANdPpw+M13zVaTLFqiCVtbQgJWtEQApEY+z9lsRUq0=
Subject key identifier:   9B:69:46:44:AA:54:8F:86:32:68:8C:0D:2C:D9:FB:D3:B0:16:9E:8A
Certificate issuer:       /CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
Certificate serial:       010D0C9F4328584F4278044B78B4D44D0691E040
Authority key identifier: 33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/d6fdf7a3-62f0-3a81-accc-fb1e9d6fecc0.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     401332
IP address blocks:        103.17.153.0/24 maxlen: 24
                          2602:f81c:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:04:4b:78:b4:d4:4d:06:91:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=0413678d-ef9f-4b8d-806b-9a257f860e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:b1:2d:aa:ed:69:f8:7e:8f:10:03:c7:d0:
                    ff:94:0f:89:21:7e:64:c2:ba:40:0a:ae:5d:31:5e:
                    7e:2b:3f:83:be:29:ea:46:ad:2f:35:8e:e8:77:b9:
                    c6:9e:fc:b7:8e:66:4a:36:29:66:a7:a2:66:08:73:
                    e4:15:04:2a:f8:ac:19:c3:f3:58:93:f3:40:d9:b5:
                    4b:e8:56:d5:55:84:48:96:57:a6:40:b5:5a:b3:6c:
                    9d:07:90:d9:90:c9:71:8c:36:62:f2:04:7c:bd:85:
                    fb:66:03:32:0e:27:a4:62:9b:71:97:f2:69:8a:b7:
                    fc:5a:8a:19:f3:0a:42:3e:ab:20:53:bd:1c:b7:26:
                    6f:7c:9d:f3:e5:12:2a:f9:fd:45:70:91:aa:af:e4:
                    4a:87:87:e5:7b:05:f4:ad:db:73:ed:a3:0a:c1:1d:
                    a9:f6:9c:09:be:65:45:89:6e:ac:2c:4b:71:03:9b:
                    5c:3c:ec:89:f7:f8:56:ae:27:f2:76:aa:8e:36:1f:
                    6e:73:25:32:d9:cc:ae:47:af:9a:a0:89:99:2c:e2:
                    e4:0d:1a:80:7b:21:d4:f2:df:c3:96:1d:62:76:60:
                    b4:19:5c:e8:01:07:98:71:cb:df:99:fd:6a:ed:2a:
                    60:ce:a1:75:85:7f:f4:94:86:29:51:0d:7b:f2:9e:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:69:46:44:AA:54:8F:86:32:68:8C:0D:2C:D9:FB:D3:B0:16:9E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/d6fdf7a3-62f0-3a81-accc-fb1e9d6fecc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.crl

            X509v3 Authority Key Identifier:
                keyid:33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.153.0/24
                IPv6:
                  2602:f81c:81::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:42:b3:e0:92:84:af:e8:0f:f6:5f:35:ed:98:0b:d0:de:c2:
         64:a2:be:ea:41:71:88:b4:0b:7b:42:34:ce:18:b9:1d:23:65:
         a2:64:b3:b5:4f:e0:57:31:f4:12:f2:14:61:f5:55:ad:46:ac:
         ae:6c:74:f2:67:79:14:13:8b:c7:ec:ee:05:67:c7:f7:b3:9b:
         b6:79:26:5b:ae:30:cc:b3:0f:9e:8f:dc:b3:54:a9:2f:9a:84:
         b1:47:97:69:0b:66:ce:ea:18:a8:82:b9:67:5b:13:6c:6c:b9:
         d5:5e:8f:68:e3:3a:e7:51:ae:77:78:88:57:a8:52:3c:f5:31:
         07:08:81:9e:7b:76:9e:1c:29:43:c6:7d:75:f6:c5:4f:ae:88:
         a9:78:6d:43:35:65:0d:44:fd:7f:6b:07:bb:9e:d5:c1:12:e2:
         ca:1f:d6:cf:ec:d4:bf:1b:16:49:1d:d6:8c:3f:bc:60:35:98:
         51:58:ff:ab:b3:ca:8e:01:04:b7:e9:22:c1:ea:8d:30:a8:27:
         35:e9:ea:d8:e2:35:be:27:21:d7:61:bf:4e:c4:4a:be:5a:21:
         38:c4:59:c4:c8:10:3a:ba:d3:e0:d8:93:bd:db:bb:dd:01:14:
         33:75:74:4c:bb:9c:11:d4:45:65:f8:0a:4d:e6:d4:a3:c8:74:
         f9:07:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:32:06 2026 by rpki-client