Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/abbda74d-0a61-31ad-bb81-b8324303cd4a.roa
File:                     abbda74d-0a61-31ad-bb81-b8324303cd4a.roa (raw, json)
Hash identifier:          +vN2iAR82yRIKCeKm5zhr1Vj6V7mRwdVBHGi0BTkhbQ=
Subject key identifier:   03:4B:DA:D9:87:9C:33:6C:05:48:17:65:9A:C5:8C:E1:EE:FA:C8:1A
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F432858456F92891B73836DC1CB868D28
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/abbda74d-0a61-31ad-bb81-b8324303cd4a.roa
Signing time:             Thu 04 Apr 2024 16:56:03 +0000
ROA not before:           Thu 04 Apr 2024 16:56:03 +0000
ROA not after:            Wed 03 Jul 2024 16:56:03 +0000
asID:                     16509
IP address blocks:        103.109.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:92:89:1b:73:83:6d:c1:cb:86:8d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Apr  4 16:56:03 2024 GMT
            Not After : Jul  3 16:56:03 2024 GMT
        Subject: CN=48b2eb88-0f14-4ef9-abd7-0ec6225eaddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:99:ab:f8:87:42:cb:e6:6a:45:08:14:80:
                    ce:22:71:0d:d3:49:04:75:10:56:e7:6e:16:10:10:
                    b5:b0:2b:f7:95:16:b9:3d:cf:fc:09:1e:c2:a9:80:
                    9a:60:ea:7e:38:d4:e6:e6:f5:c8:7f:5d:29:23:15:
                    e7:68:3e:f5:41:d2:ff:0b:99:e6:4f:c3:67:61:81:
                    09:62:d5:49:3a:06:5a:69:46:63:55:85:40:30:dc:
                    ad:b0:cd:03:5c:cb:6d:4d:8e:94:50:cf:b6:1a:45:
                    2d:69:49:89:d8:24:1c:7a:36:f2:93:8a:e9:84:c2:
                    2b:14:f2:62:c2:0d:99:81:72:94:90:b0:9f:00:67:
                    fa:64:ae:c4:f1:b5:6b:cf:5c:13:85:1e:29:fb:be:
                    fa:a5:f6:89:7a:f2:9f:79:46:7e:05:f2:c8:ba:3e:
                    42:50:aa:0c:dd:f7:50:c4:98:14:52:9c:2a:7c:7a:
                    00:27:2e:2a:98:54:74:6f:b5:d2:e8:ab:d7:8e:2e:
                    5f:90:29:91:9c:13:ff:0c:3d:15:8b:03:b1:3e:aa:
                    60:11:45:82:c6:a5:b1:62:88:53:cf:25:ad:51:20:
                    7c:0b:44:4f:e8:b1:dd:31:11:12:a8:72:a3:a3:ec:
                    50:37:43:5e:ef:68:df:a2:ea:25:9e:31:9c:04:3e:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:DA:D9:87:9C:33:6C:05:48:17:65:9A:C5:8C:E1:EE:FA:C8:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/abbda74d-0a61-31ad-bb81-b8324303cd4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6f:45:f0:a5:0c:72:3b:c9:80:ff:4f:ea:a6:04:69:73:93:
         e2:55:02:37:01:79:3a:45:3e:cc:cd:10:de:3d:b2:ea:ba:b2:
         f8:2d:7f:7c:77:1b:db:06:08:05:9c:43:42:ca:fb:de:a5:ea:
         5c:e6:98:b3:c5:81:40:96:87:c0:d7:e0:65:86:b0:08:b9:c4:
         04:25:00:7f:b6:d2:25:a0:0a:55:c9:15:1b:bf:bc:a4:7a:a9:
         55:07:a2:8a:68:61:2a:50:df:96:13:0e:23:08:33:8c:a1:95:
         f7:34:d6:6d:b9:e7:95:62:e9:4b:47:40:6c:0a:ae:50:12:cd:
         35:ea:f2:f0:06:05:e2:ba:4a:e7:55:a3:36:21:42:24:b4:18:
         ec:4d:3e:2f:18:6f:f7:cf:1e:4d:03:d1:90:af:47:6c:19:77:
         b8:a0:e6:97:ac:d0:0e:4a:a0:94:aa:9c:46:5c:b4:27:c9:4a:
         98:a6:fd:19:62:58:59:e5:31:f0:b8:ac:44:4d:e5:04:ac:2a:
         92:0f:a8:c7:0d:26:75:ba:9e:cd:ca:41:fc:12:46:17:ed:f8:
         91:a7:6d:54:14:1c:72:b0:9e:b2:9b:98:f9:7b:21:fb:75:01:
         ff:26:f5:55:c8:44:f9:09:f7:80:62:22:dd:2d:40:b4:07:c4:
         38:5b:a3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:19:38 2024 by rpki-client on console-ams.rpki-client.org