Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/ffc9f921-d65d-3726-886f-7dfa563c4988.roa
File:                     ffc9f921-d65d-3726-886f-7dfa563c4988.roa (raw, json)
Hash identifier:          FXaD8q/UEruJRMn/H1HeJn7/VSimkKjbcZ/NAg5J7GA=
Subject key identifier:   4A:95:AC:B5:F1:9D:FB:91:DD:BC:5E:11:F0:EC:49:75:C3:7E:8C:2A
Certificate issuer:       /CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
Certificate serial:       010D0C9F4328584B4081E0100BD8BB842C506E00
Authority key identifier: 33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/ffc9f921-d65d-3726-886f-7dfa563c4988.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     401332
IP address blocks:        103.17.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:e0:10:0b:d8:bb:84:2c:50:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=25181192-20d0-46d3-aabb-d31d96b128a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:3b:c5:66:31:a8:89:4b:ca:6c:53:0e:e3:
                    c9:72:a6:02:6c:07:54:02:00:aa:bf:2d:31:19:a8:
                    6d:4a:0a:b7:bc:94:3d:00:92:0c:c7:3c:39:30:81:
                    57:1c:0a:f3:e7:8b:7b:f9:b7:68:3d:a1:49:e9:6b:
                    0f:07:6d:2e:bd:80:c3:78:8a:b0:39:7f:2a:61:e7:
                    5c:4c:89:cf:e1:71:bf:eb:99:fb:4d:a3:91:3c:a1:
                    12:57:82:82:d6:e2:f4:c4:b7:3c:54:32:72:64:b5:
                    c8:9b:7e:66:a3:3a:5f:0a:0a:65:ad:00:0c:11:82:
                    46:da:86:51:46:e5:35:63:d1:2a:f8:93:80:93:fe:
                    e7:e3:c3:5a:95:d5:85:e3:cb:72:4a:2b:3b:d7:b9:
                    6e:01:7d:b4:3b:03:79:50:87:0d:4b:ab:7e:6d:1d:
                    4f:a4:ec:31:87:38:d8:34:23:30:6a:03:d5:c1:73:
                    ad:cf:a3:49:ed:74:e3:69:11:14:aa:62:9c:d1:37:
                    be:47:cd:47:8f:61:d5:fc:4a:15:bb:bb:bc:17:ad:
                    72:76:c4:76:c2:7f:83:d6:7d:1a:1a:46:fd:c9:4d:
                    8a:de:37:96:70:75:7f:92:46:1a:6a:e3:02:28:42:
                    44:62:6e:e6:23:75:57:fb:67:6f:92:3a:1d:03:4c:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:95:AC:B5:F1:9D:FB:91:DD:BC:5E:11:F0:EC:49:75:C3:7E:8C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/ffc9f921-d65d-3726-886f-7dfa563c4988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.crl

            X509v3 Authority Key Identifier:
                keyid:33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:f7:ad:47:c8:84:9b:c3:dd:d2:d7:c0:29:7f:fc:e9:26:cc:
         51:45:8a:50:e2:9f:22:e3:a2:e9:14:0b:c3:eb:77:ef:58:bc:
         e3:49:c1:a4:13:2c:f4:3b:70:49:c0:d0:d7:52:45:1c:50:d1:
         98:09:70:1a:b7:40:96:d9:5b:fc:a4:d0:5d:d3:94:b6:11:51:
         85:59:9d:9b:49:7e:18:36:e6:75:da:ce:03:0e:fb:e1:fd:52:
         75:de:6f:bd:66:96:3c:6a:56:3a:71:0e:ed:65:b6:a4:5d:01:
         c3:ad:fd:87:b1:e9:91:1a:11:c0:b3:c8:5e:a1:12:b6:64:12:
         6c:b2:68:73:eb:58:37:b8:b0:ce:f7:a3:3d:8c:71:2f:ee:d8:
         a5:b0:d5:76:ad:f0:fb:bd:c5:4d:d2:5b:36:d7:a4:b4:62:db:
         69:9a:d6:48:57:34:8b:6e:18:55:c5:a1:e0:62:47:48:65:0a:
         e7:bb:15:7f:4f:f2:8b:e9:dc:80:11:ce:b2:49:38:ba:32:46:
         64:a9:10:f2:d8:d0:9d:c6:18:2e:f7:ba:67:01:96:fb:d6:59:
         cf:fc:2f:69:55:7c:4a:ba:4f:e3:e6:dc:86:dd:56:fa:a8:c5:
         ea:42:da:22:95:15:bb:bd:42:e5:2f:24:70:fb:81:03:04:8a:
         6f:8b:21:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:18 2025 by rpki-client