Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28f2368d-3f90-3cc5-aeca-e223e1565b2b.roa
File:                     28f2368d-3f90-3cc5-aeca-e223e1565b2b.roa (raw, json)
Hash identifier:          n9jK0H3hQlQzy6e44XgZSQ1nTq5LO3MGJRVuktvrlBA=
Subject key identifier:   C9:0D:E0:6D:40:06:1B:DB:82:6C:7A:E5:85:8B:4F:78:D8:25:B2:BC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845374802B93D39EBB095EB2C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28f2368d-3f90-3cc5-aeca-e223e1565b2b.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     54103
IP address blocks:        103.51.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:48:02:b9:3d:39:eb:b0:95:eb:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=cb565b2b-e243-492e-9a7f-381f01e1eb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:9d:e9:79:95:72:48:3c:7c:5d:4d:4c:90:
                    a2:cd:8f:14:40:a7:c1:f0:7b:2a:1a:f9:d2:4b:d0:
                    74:9a:23:c6:5b:68:d2:37:83:e4:7a:a7:e3:37:ab:
                    7a:9f:bc:58:c5:e6:07:67:54:67:06:63:b4:be:d6:
                    d6:e1:57:3e:80:d1:96:05:74:43:a7:75:9f:b0:4b:
                    76:e9:62:4f:33:4f:a4:a9:ab:81:8e:66:00:8b:78:
                    6d:2f:83:f8:28:51:5f:83:fc:03:2b:fc:a9:b2:c2:
                    32:7a:84:ee:9e:a7:bd:a6:85:d8:03:3f:5c:15:44:
                    ba:15:41:f8:14:a1:78:4e:2b:dd:3c:37:e9:02:b6:
                    79:4f:6f:01:35:b3:78:d8:d4:bf:14:dd:de:67:b4:
                    a4:3d:78:56:8c:5b:aa:34:6e:b1:82:b4:2e:30:7a:
                    b1:cb:d9:44:95:57:40:cb:4c:bd:4d:83:d3:57:0b:
                    b2:5f:12:ec:6f:e9:9c:5b:16:29:db:c3:5e:e0:5a:
                    34:5f:ec:d5:cd:55:5b:70:3e:bf:7d:fb:a2:21:c0:
                    61:d7:52:0b:e2:13:4b:5f:d6:16:be:09:f5:35:66:
                    3a:f2:4e:67:95:7d:c7:2d:ff:69:5d:42:cb:06:ec:
                    c2:3a:f7:a5:c2:c1:49:5e:d4:6b:1b:a4:e0:84:62:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0D:E0:6D:40:06:1B:DB:82:6C:7A:E5:85:8B:4F:78:D8:25:B2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28f2368d-3f90-3cc5-aeca-e223e1565b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:98:3d:a9:60:06:5e:54:a3:7c:d7:bd:f1:a7:28:8b:fa:7d:
         9c:1f:e2:17:76:3f:03:b9:d7:4d:2a:f7:95:5e:47:05:0a:3d:
         99:cb:96:51:2f:9f:fb:01:0f:3f:fc:24:36:d8:8b:b8:38:e7:
         08:e2:b9:99:69:aa:2b:fd:2a:78:a3:21:42:40:1e:7d:5a:f6:
         2a:01:9c:8e:40:c2:35:3b:fe:59:11:d0:33:fb:52:35:53:e3:
         2f:6c:fc:34:c8:b8:c8:e1:59:fa:b6:cf:1c:24:9b:25:bd:f7:
         6f:7c:23:4d:e1:11:c8:90:a8:b2:22:ae:75:e0:09:1e:b3:ef:
         5c:31:20:18:c6:62:e6:bd:50:ae:18:87:d0:f8:45:f6:e7:80:
         61:35:00:d1:7b:9e:7d:d2:25:8a:10:14:27:13:71:da:7e:a9:
         8e:2f:27:17:8d:12:f1:03:f8:bb:81:50:7f:b9:64:ee:ed:7f:
         e2:cc:75:f2:1b:99:64:0d:a1:64:a6:35:b4:1e:b1:2e:eb:e9:
         4e:7d:b1:09:16:9b:a4:2c:af:f2:6f:9b:d2:0a:fc:76:f3:4e:
         d1:22:16:b1:ad:bd:bb:41:16:4b:e0:0b:19:6d:a8:d8:7d:62:
         0b:f1:3e:ee:86:dc:c3:d9:de:3d:a5:80:c4:8a:a1:8f:f1:70:
         22:ea:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:59:46 2024 by rpki-client on console-fra.rpki-client.org