Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa
File:                     2088ad0e-df10-303d-a609-0636c73f7c1d.roa (raw, json)
Hash identifier:          JGN3Rhhjq465vRKAudNV/O96zEzE0D0UKVOwhhL46dM=
Subject key identifier:   0D:F5:56:14:EB:9A:EB:8A:1A:28:B3:F2:F8:B6:D4:5D:B7:20:8A:41
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584A963693448F2424534BDA2200
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     38047
IP address blocks:        103.123.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:93:44:8f:24:24:53:4b:da:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=bca94efb-3086-45fa-b1ba-4fda0f6da931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:47:57:bb:f1:06:ed:46:30:65:23:d8:ac:
                    5a:66:35:cd:89:75:0e:39:82:ec:58:a2:b9:a7:38:
                    23:c6:81:1d:02:24:cc:6e:23:fa:6d:ad:68:29:0a:
                    76:f7:00:01:a0:33:ef:cc:15:f6:8b:73:87:73:bf:
                    ff:5c:86:2b:1e:25:be:40:71:57:15:71:10:41:63:
                    f2:09:85:42:f2:90:0b:98:0c:6b:0d:c0:0b:91:c0:
                    2b:57:d7:d9:1c:44:d0:61:47:42:6e:0b:ad:9c:55:
                    fd:e9:2e:18:28:a7:c7:6b:d0:21:e7:27:71:27:60:
                    70:a7:ec:01:1c:45:7b:76:1f:fa:20:b8:cc:8b:00:
                    ef:e8:33:02:d7:9e:ce:bf:21:8f:9f:d6:c3:04:95:
                    3a:47:91:98:e4:6e:2d:11:3e:ac:08:05:7f:d3:39:
                    b0:d8:04:73:f0:40:81:95:9e:11:e7:cb:5f:1f:7a:
                    48:5d:74:3c:cb:d2:d1:ca:cd:e0:a8:d3:38:c9:0e:
                    a5:9a:2b:58:2e:09:3c:23:26:d2:dd:80:26:e6:56:
                    0a:8b:5b:58:83:56:41:3a:7d:e6:c8:6e:94:d0:34:
                    fb:88:a6:c8:87:f6:3f:7d:54:af:d1:a0:12:d2:62:
                    e0:e9:26:ee:86:9a:0a:ab:54:64:3d:a5:11:a0:54:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F5:56:14:EB:9A:EB:8A:1A:28:B3:F2:F8:B6:D4:5D:B7:20:8A:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ed:41:f2:1f:ce:c6:1c:4d:00:c6:00:1d:f7:8c:1e:e4:5e:
         ac:1f:80:4b:b9:ba:f5:55:e9:b6:a4:84:9b:57:f8:22:9e:02:
         0e:5d:9f:fb:01:df:f7:63:41:3e:22:64:b7:e9:ff:8a:87:03:
         46:76:ad:68:3d:02:b9:93:42:a3:a2:26:e1:66:06:68:42:bd:
         97:25:fb:fc:58:33:47:88:8f:18:cb:82:78:a3:f6:f3:8f:e8:
         a7:b3:cb:4e:78:de:5d:b5:12:63:a2:51:62:e6:ec:00:ba:35:
         c2:7d:f8:b8:09:94:47:8f:04:7f:7a:c2:96:5c:c2:82:01:24:
         b4:74:3c:3d:29:b3:00:00:d2:2d:ea:e4:32:92:a8:3f:88:95:
         c7:83:69:4e:4c:ee:63:7e:e8:e9:b5:45:1b:63:69:ba:04:a7:
         2d:a8:0f:ba:af:3b:e7:93:86:c3:a8:a8:3f:dd:4f:df:d1:76:
         dc:63:16:43:d7:d7:f6:3b:e2:a9:94:c8:eb:13:67:05:e3:e1:
         21:11:a8:e2:a3:ec:27:05:19:6a:e5:62:0e:af:33:54:a8:68:
         f8:f0:a7:db:b5:3d:17:f5:4c:1d:12:ad:ed:09:4f:c3:7c:f1:
         a9:5f:03:37:8f:c1:c8:c8:d6:26:91:91:2d:d6:4b:72:d0:cd:
         4b:ce:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:28:47 2025 by rpki-client