Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa
File:                     bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa (raw, json)
Hash identifier:          QiqvNyhr/hLvYbrYpf2Hy6K4WBMdiECBGVgszOxiaVg=
Subject key identifier:   E4:36:10:35:46:BC:9E:8D:DB:5A:11:E7:4D:2E:D6:61:DA:E6:59:93
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F432858486D905B73ABCF0D52904A1CB0
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     852
IP address blocks:        103.120.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:5b:73:ab:cf:0d:52:90:4a:1c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=1fce5c19-7f8c-4acf-bef8-5861dfbde983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:a2:f0:3e:16:95:4d:07:c5:f5:80:e4:30:
                    6d:d2:e2:33:71:14:7d:b4:ec:4a:5b:de:c8:a6:34:
                    3c:d9:a0:45:7c:9c:49:c4:6d:53:b6:fd:51:12:0b:
                    97:95:10:ce:9f:03:df:bf:26:8a:41:ce:3e:72:f8:
                    51:6f:3b:bb:f7:45:45:81:00:9d:35:9c:a8:3e:44:
                    dc:a8:0e:84:35:00:7a:5f:79:ea:15:be:c7:d1:44:
                    3c:3a:d2:29:47:ed:44:7c:61:ac:0a:d2:2f:39:8f:
                    7d:3f:46:19:e5:54:49:d9:ee:2c:70:3c:73:b5:0f:
                    0d:31:0b:4c:ad:09:ac:20:fc:b8:75:26:cc:62:42:
                    b0:6f:4d:16:52:99:90:0b:38:44:45:30:1c:ad:60:
                    9b:b4:fd:32:90:db:9b:6d:5a:91:e9:3e:b8:62:51:
                    71:e2:93:00:fd:81:83:77:77:cb:83:7f:ba:53:9e:
                    16:aa:a4:72:5a:88:7a:b1:0f:3d:55:15:8e:2a:c6:
                    f9:4f:76:3f:f7:29:81:f5:87:f5:ad:d6:2f:fe:2a:
                    7f:a4:83:53:86:6f:40:d7:03:10:75:dc:ea:c2:84:
                    b2:a9:09:fc:0b:b1:1d:95:b7:31:f2:d3:d8:55:0f:
                    3b:94:5a:12:cb:59:11:9f:24:78:60:e6:66:3e:29:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:36:10:35:46:BC:9E:8D:DB:5A:11:E7:4D:2E:D6:61:DA:E6:59:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d8:20:b2:fe:08:24:ca:2f:03:ae:6a:6e:3e:b4:04:33:86:
         fe:bd:0d:06:e9:9a:ce:e5:ad:34:0a:23:e2:ed:24:ca:e7:3c:
         9f:2e:81:53:21:12:c7:71:fe:37:d2:57:77:93:95:6d:95:4b:
         87:42:d2:ee:ae:2e:17:66:50:0d:38:6a:84:6b:ee:86:b5:f4:
         67:70:06:c2:58:96:6f:93:d5:13:3f:97:9f:03:df:ad:d8:ed:
         76:69:ed:fd:03:a5:11:62:7e:da:28:42:fc:b1:ef:d7:c8:4f:
         5f:d1:c6:52:f8:fa:0c:b8:78:3c:c3:df:2b:d2:9c:af:18:52:
         40:c2:e4:31:f3:89:ff:6e:bc:83:8a:38:4f:4e:6f:13:05:de:
         9a:b1:35:28:63:65:1c:75:ee:9a:d7:7d:90:0a:c0:9c:e8:c4:
         3a:de:a9:d2:11:74:c0:0d:04:b2:f6:f6:30:d4:4d:c4:0e:9d:
         9c:08:07:14:c7:d0:e1:06:b6:e3:04:dc:51:55:ca:b5:46:68:
         b9:87:20:39:d4:3d:88:ae:de:e7:25:18:8b:9d:f8:b1:3d:0d:
         c5:8d:28:76:3f:6e:98:d9:6e:d0:6d:24:df:56:2c:00:d6:45:
         83:1d:3c:0c:a1:e0:7b:b9:ad:4e:b0:71:81:6f:41:38:85:29:
         d9:4a:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:23 2025 by rpki-client