Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa
File:                     cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa (raw, json)
Hash identifier:          7lQxlc675K+vCS5MVlFaed8qsrDrQ++ReUba4DSnKNc=
Subject key identifier:   BB:50:D1:F0:73:4C:C7:AC:18:52:0A:60:02:40:A9:FA:A1:3C:A5:F6
Certificate issuer:       /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial:       010D0C9F4328584A3CE0245982276566A62ED900
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     46320
IP address blocks:        103.70.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:24:59:82:27:65:66:a6:2e:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=ee4e331e-857b-42f7-892c-29a9545886b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:74:fd:ea:2a:3c:a9:8e:19:2e:2b:cc:2e:
                    90:dc:67:35:2f:f7:77:14:7d:f0:f7:b3:0e:c8:25:
                    c4:3f:19:55:03:be:0f:ba:c5:ab:ab:ff:c2:e9:07:
                    79:a6:98:a0:eb:36:53:d9:00:81:eb:08:4b:6d:31:
                    d1:35:bf:cd:ac:de:c9:8f:7f:12:db:95:07:66:00:
                    3c:47:b3:40:55:4c:a6:1b:34:ac:51:fa:cb:42:e2:
                    53:72:9d:65:74:47:a0:3b:86:89:f2:52:55:b8:b4:
                    30:d3:e2:49:6a:be:64:ef:47:30:b9:40:42:92:be:
                    64:28:df:3f:8b:45:86:67:95:2f:91:01:2d:ac:97:
                    ba:ac:9f:7c:6f:51:a5:77:f6:c4:41:98:1e:ff:a9:
                    6f:24:e1:61:ec:a1:a8:22:c8:19:0d:86:3c:1f:61:
                    11:9f:ca:9a:cd:e9:4e:78:ed:73:34:e8:bc:37:08:
                    3f:5b:44:fb:ae:26:18:ee:f8:d3:52:e5:0e:2b:d3:
                    3d:a9:90:6b:e4:c1:1a:f3:a8:9e:77:58:d9:2e:f5:
                    24:8a:99:39:18:ca:25:a1:da:a6:94:0a:58:21:85:
                    9a:6a:16:14:9f:3e:9f:1e:c3:51:fe:e1:06:80:26:
                    0a:b4:96:b0:b2:1f:c2:a7:1b:7a:50:1e:5d:46:cf:
                    a5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:50:D1:F0:73:4C:C7:AC:18:52:0A:60:02:40:A9:FA:A1:3C:A5:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9e:85:b1:c8:86:2d:bb:0d:f1:f5:ab:c2:ea:17:e0:59:09:
         ce:4e:49:97:62:42:72:dd:a4:c0:c4:de:bb:b9:89:b9:31:37:
         84:c5:a2:1f:f6:15:32:cf:d2:61:6b:b8:83:44:dc:d2:3a:0f:
         f1:4b:41:70:6b:1e:e1:66:b7:da:b8:53:74:b1:5e:57:7d:e0:
         bb:a9:5d:bf:37:65:0a:7e:ca:34:a6:c6:11:ff:a7:6a:b7:3a:
         02:ee:02:e5:22:db:a9:9d:49:cd:4d:42:61:eb:99:7a:3b:a0:
         4c:20:d6:b6:09:2d:37:fb:43:8a:d2:c6:93:23:f2:e1:c6:19:
         59:da:28:2d:4b:cd:3d:11:c6:20:85:e6:09:bf:63:80:ba:b7:
         4e:8d:8c:ba:3d:63:b7:ac:db:1e:aa:af:68:70:c0:c2:4d:70:
         bc:31:bf:ce:63:8a:cb:1b:d6:72:3b:72:bd:ef:7a:4f:cd:42:
         0e:23:81:c8:a7:81:2f:18:07:8c:db:1d:04:84:c7:cb:f1:6d:
         cc:b4:30:d2:5b:14:3b:aa:0e:f9:7c:cd:ed:d8:87:56:e0:36:
         4c:c5:6e:e4:c9:0c:46:d6:1d:fa:7a:08:cb:64:0b:52:62:e6:
         4f:9f:63:8f:2f:ba:ae:e1:97:ba:f3:90:42:30:c4:af:e5:02:
         18:6b:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:28:55 2025 by rpki-client