Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/f1608494-39eb-3321-bf56-a3c86cb5bdac.roa
File:                     f1608494-39eb-3321-bf56-a3c86cb5bdac.roa (raw, json)
Hash identifier:          PF/Sx+N922y5k+7pCQQANvpV3XB7LwyeX9FTs/5iGCk=
Subject key identifier:   49:65:55:57:6D:15:49:92:8E:90:A8:86:EB:FA:D9:45:B4:9F:EC:12
Certificate issuer:       /CN=732c950f-c9c5-4d32-956b-e779bdb13479
Certificate serial:       010D0C9F4328584B8BE23CB647E0F394615C48C0
Authority key identifier: 3F:26:18:BE:C1:2B:E9:07:47:FE:F4:9E:AC:2F:6B:79:59:CD:58:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/f1608494-39eb-3321-bf56-a3c86cb5bdac.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     396507
IP address blocks:        103.232.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/732c950f-c9c5-4d32-956b-e779bdb13479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/732c950f-c9c5-4d32-956b-e779bdb13479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3c:b6:47:e0:f3:94:61:5c:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732c950f-c9c5-4d32-956b-e779bdb13479
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=786b25e9-4c3e-4b17-81f8-bc6ebc650ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a8:5d:79:8e:68:11:75:99:a9:3b:bd:03:3f:
                    a7:56:3f:95:34:94:50:3d:67:58:ff:9b:80:1b:60:
                    59:32:b9:13:6b:b2:e4:b7:b6:50:37:3e:be:49:2a:
                    d4:e2:05:b2:95:d7:c9:81:b0:36:e3:bb:cd:ed:81:
                    6f:a4:5b:20:be:0f:cc:19:cb:99:c6:dd:56:d9:74:
                    01:bf:2d:cf:df:20:40:c8:d7:a7:53:47:79:b6:56:
                    ee:f5:62:4c:89:88:f0:7c:8b:59:bc:d4:03:c9:d6:
                    5c:f8:73:cb:7e:37:6c:1c:9f:50:35:33:0f:10:d1:
                    08:ab:8d:dc:8d:6a:1d:99:57:fc:a6:46:0b:c0:42:
                    ef:31:38:89:bf:f7:5d:0c:46:7f:e2:0f:e7:91:b0:
                    0c:63:9b:cd:cb:3c:22:74:a6:45:8d:a6:33:8d:ee:
                    a0:13:b7:a9:fa:6a:31:cb:32:07:1a:84:99:2e:57:
                    90:4c:3f:22:68:27:0c:a5:d0:78:1d:be:4f:f6:a9:
                    fd:f5:a6:5e:b8:b9:a2:fa:7f:f9:9f:7f:5f:78:87:
                    8c:1b:3b:45:09:6e:c0:fe:0c:b6:44:aa:9e:13:41:
                    ff:9c:e2:90:93:5e:a6:ab:d0:49:c8:6b:06:31:f4:
                    a8:94:96:54:17:42:d6:3d:a5:53:7b:99:4b:ab:12:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:65:55:57:6D:15:49:92:8E:90:A8:86:EB:FA:D9:45:B4:9F:EC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/f1608494-39eb-3321-bf56-a3c86cb5bdac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479/732c950f-c9c5-4d32-956b-e779bdb13479.crl

            X509v3 Authority Key Identifier:
                keyid:3F:26:18:BE:C1:2B:E9:07:47:FE:F4:9E:AC:2F:6B:79:59:CD:58:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/732c950f-c9c5-4d32-956b-e779bdb13479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a0:94:f1:e4:30:a8:7f:9b:b7:e5:94:fe:d5:ed:bd:40:b5:
         70:69:95:b1:1b:39:b4:2b:f7:0e:21:27:43:25:a9:18:f4:79:
         4d:ff:72:07:5e:25:9a:82:39:4a:3d:26:2f:fc:3e:6d:9c:08:
         84:59:42:3b:17:e9:bb:bb:1e:ba:c5:f2:6d:15:5a:b1:da:1f:
         e0:1e:ab:d8:ef:cc:71:25:3c:fe:fd:47:cb:1c:a8:df:7b:85:
         a2:9f:4f:fe:c4:da:7d:f3:47:f6:ee:c5:14:39:0c:81:00:71:
         9f:5e:fd:e6:30:9c:05:e1:3e:fe:e1:16:48:bb:98:9e:60:c6:
         86:a8:7c:dc:8d:69:b7:88:d2:6a:05:fc:6d:3d:a6:d1:ac:f3:
         25:1f:01:81:b3:10:6e:bd:68:85:5d:fe:a5:c9:40:68:97:26:
         c7:63:d3:59:22:0f:96:ca:89:d8:4b:37:5a:b7:ed:5d:da:bf:
         44:77:95:e6:f7:4a:10:4f:1c:a6:e3:bf:19:9c:ea:84:4a:36:
         e7:e0:34:74:f9:46:28:84:cc:27:ac:3b:82:0d:1c:94:11:e2:
         84:8e:6f:00:45:95:c8:96:d4:08:c1:5d:a8:40:2b:1e:3c:73:
         95:a7:15:94:9c:5a:13:e3:64:f6:26:a8:56:de:a5:47:52:27:
         e8:cb:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:06:24 2025 by rpki-client