Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3c3070dd-b65f-33a2-901b-da5b0e384be7.roa
File:                     3c3070dd-b65f-33a2-901b-da5b0e384be7.roa (raw, json)
Hash identifier:          TuX0xLTl2Q8IqkrXUYApCTjC+XmVyizzRt34+JSLKUM=
Subject key identifier:   08:D8:41:2A:C0:EA:A8:D3:4E:BE:3B:DE:EA:55:15:89:B6:5F:F0:83
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584957F40F1CF224F1C67F290F80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3c3070dd-b65f-33a2-901b-da5b0e384be7.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     151106
IP address blocks:        103.54.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:0f:1c:f2:24:f1:c6:7f:29:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=9f4b6f00-718f-464e-ba70-b242e05c3a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:a0:ec:ac:98:8b:57:66:83:c4:a5:cc:25:
                    97:2a:f9:0c:ba:ee:8f:9e:53:36:a0:a9:da:7f:a9:
                    ce:dd:60:3f:34:fd:25:43:ac:58:a5:94:5e:69:55:
                    9d:13:76:67:72:e4:59:9d:37:71:05:9f:88:03:84:
                    16:30:fb:8f:92:a6:ee:d2:07:d0:c4:1d:b7:f6:93:
                    bf:0c:81:3f:7f:7c:15:88:92:b6:69:8b:cf:a2:76:
                    d2:63:e2:fb:b4:23:f1:a2:bb:9f:e7:98:6f:bb:0f:
                    66:35:48:41:45:7d:4e:f7:4b:8f:0f:49:6e:93:86:
                    88:14:e9:76:82:32:40:25:70:c4:ac:8e:75:c7:22:
                    67:aa:9c:77:3d:2f:a0:ba:4d:73:83:79:89:14:e1:
                    80:64:7f:cb:ee:a2:8b:74:5e:09:8f:68:3b:25:50:
                    69:b1:f8:5a:00:d0:92:5b:24:76:64:b7:ea:65:42:
                    82:c8:24:f8:4e:43:f4:c0:2f:08:0d:7d:1a:20:03:
                    61:d5:31:68:8f:b4:4b:30:6e:71:52:45:b6:0e:8e:
                    c6:d8:37:52:8f:77:39:2f:2c:94:65:30:8c:23:63:
                    2c:8a:a0:2a:68:92:62:ea:2c:d3:58:ad:57:1c:7a:
                    90:40:e5:e1:4d:42:f4:56:7f:d6:cf:c6:bf:84:28:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D8:41:2A:C0:EA:A8:D3:4E:BE:3B:DE:EA:55:15:89:B6:5F:F0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3c3070dd-b65f-33a2-901b-da5b0e384be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:96:81:06:90:ed:c8:4d:e5:c8:23:28:52:bb:9c:08:24:ff:
         05:a3:ff:14:91:9b:04:15:cf:1d:1d:e6:35:b3:b3:59:a7:1a:
         96:eb:06:2a:68:ce:81:69:f2:78:25:1f:b7:32:c9:46:4a:d7:
         fc:eb:6b:f9:b1:d2:78:2d:ac:c4:44:11:0b:61:c4:db:1d:11:
         85:7a:b3:08:17:56:b0:4a:a1:32:d6:db:98:14:4b:1f:e8:82:
         41:82:45:fd:4b:1f:95:da:4e:0c:a3:be:cb:78:6c:1d:2f:6b:
         c1:29:aa:ae:76:43:9e:55:55:65:f0:4a:1a:18:03:fd:a1:e1:
         aa:6e:8a:b9:e6:85:33:21:ca:08:27:f0:51:e6:78:58:e0:e3:
         fc:18:94:2c:1a:9b:3e:6f:29:4c:00:d9:76:fa:a3:52:78:3d:
         27:8c:87:9d:fa:36:68:c8:2f:61:c6:4f:5d:72:1c:3c:93:fc:
         64:1f:b0:65:bb:f9:6e:dc:18:e4:61:c6:95:5b:a9:c6:42:0d:
         ec:85:de:b0:44:7f:71:5d:ab:fb:91:32:cb:1e:7c:e2:70:db:
         49:f0:d6:dd:aa:38:6d:4f:1e:01:e6:6a:8f:ff:d6:d4:36:a7:
         3e:1d:5e:43:f4:05:d8:af:71:71:97:b1:54:1f:b0:e3:7f:55:
         81:34:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:40:58 2025 by rpki-client