Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c0430da-d1de-3aed-bfb7-b320d1946e70.roa
File:                     9c0430da-d1de-3aed-bfb7-b320d1946e70.roa (raw, json)
Hash identifier:          NY+IWxj5g5buizgcnxJSZ/v9vHb7Sqztd3If5DQJABw=
Subject key identifier:   35:49:DA:9C:75:D1:F1:A1:A3:99:29:3A:BC:73:A9:5E:25:3A:28:CE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AF52137704A21E2CB6D1F8700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c0430da-d1de-3aed-bfb7-b320d1946e70.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     21769
IP address blocks:        103.87.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:37:70:4a:21:e2:cb:6d:1f:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=c1d0701a-8532-41b6-b3f9-06706640e3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:02:0b:93:cd:ee:10:a0:42:3a:b0:0f:99:
                    fd:30:8b:7e:5b:f2:6b:90:bb:13:39:e3:8b:fb:df:
                    e9:8f:03:26:50:e7:a0:d8:48:35:82:1c:77:26:7e:
                    87:82:dd:fc:a4:61:cb:de:71:51:95:cc:54:1c:14:
                    6f:bc:17:29:c3:cc:b8:e4:e8:b6:d6:5a:39:4a:ad:
                    ac:93:06:ab:69:45:0a:80:2a:46:62:5f:90:c9:43:
                    0a:9e:d5:e7:69:87:1c:e6:cf:f1:6f:09:61:ae:a2:
                    18:c1:ba:d3:8c:e0:16:33:85:f7:1e:12:75:c7:42:
                    6f:b3:48:8a:e3:8b:4f:35:26:f7:a8:3a:7a:96:e5:
                    76:1b:43:ff:0d:8e:2e:5c:54:95:f0:17:e6:06:ff:
                    01:fc:82:6e:f7:03:3b:af:b4:c4:78:0c:35:9d:c0:
                    65:2b:9f:a9:2f:87:eb:d0:87:29:43:7b:30:02:fb:
                    3b:f6:d7:db:90:29:bc:cd:f7:b9:33:89:d3:31:a6:
                    59:24:c4:b6:09:c1:79:f6:73:4e:d9:9b:6d:88:b6:
                    d4:d1:f0:d1:69:98:c2:56:e7:da:5b:b4:c1:1b:58:
                    b9:ee:a8:cd:9f:e3:a7:f4:87:a6:f3:d5:7a:5e:ad:
                    d5:28:08:71:a3:89:43:81:7e:e0:14:e8:6d:9b:52:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:49:DA:9C:75:D1:F1:A1:A3:99:29:3A:BC:73:A9:5E:25:3A:28:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c0430da-d1de-3aed-bfb7-b320d1946e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:df:df:ea:ec:dd:d2:b7:66:bc:ce:c5:4c:58:30:e6:50:7b:
         e0:20:6b:93:53:7c:7d:ec:0c:37:03:70:fc:27:b9:bc:12:fb:
         aa:0d:12:81:11:6f:fc:12:39:4c:d4:90:17:b1:75:86:9c:2f:
         96:97:3d:55:7f:56:47:f9:72:92:58:2a:a7:c3:1f:8e:fe:2b:
         50:91:3a:49:c6:04:36:8e:25:75:e6:42:6f:6b:e9:d9:06:67:
         bd:1c:20:cd:5c:0f:1e:b1:d5:b8:cb:fa:40:9a:e7:cb:82:f4:
         fc:d4:49:13:41:9a:e5:ef:95:2a:04:bc:2e:a6:df:ab:c8:f3:
         f6:dd:07:ea:8f:27:af:da:c1:12:62:75:ba:1f:58:bb:62:f1:
         83:43:67:c4:c0:45:e2:38:6b:9f:a3:cb:39:5e:97:b1:3f:06:
         f4:4b:95:b3:7b:74:e4:e5:e6:35:f3:6f:e8:79:ce:66:28:c0:
         7c:30:5e:37:d5:76:ca:71:d2:57:e2:ee:98:78:43:00:a6:d5:
         b1:06:94:56:8a:0d:66:51:99:69:31:c6:d2:9b:41:9c:ff:70:
         a2:e9:7c:cf:9f:a0:b1:4f:0d:d9:bb:ae:c5:4d:6f:6c:8f:6f:
         01:4a:e2:74:e7:0d:85:b9:86:50:1d:bd:af:02:e6:87:6a:ee:
         ec:bb:97:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 16:53:40 2025 by rpki-client