Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c0430da-d1de-3aed-bfb7-b320d1946e70.roa
File:                     9c0430da-d1de-3aed-bfb7-b320d1946e70.roa (raw, json)
Hash identifier:          ZX03G0AFtR9e8tiuFQrqrgK0q1YqzhMHP8IFQdRk2A0=
Subject key identifier:   39:E2:8A:7B:E1:5E:EC:7B:7C:9F:5C:21:8C:9A:5B:9B:BF:73:B0:1C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847766102F88924D6D7014F1900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c0430da-d1de-3aed-bfb7-b320d1946e70.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     21769
IP address blocks:        103.87.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:02:f8:89:24:d6:d7:01:4f:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=9b17c1a9-33d3-4eca-b3ff-81b7a9a0abe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:33:f5:c9:59:ce:fb:75:5c:a8:65:b2:7e:
                    b3:cd:78:72:4c:fa:b5:a3:a7:95:d5:fc:c9:a1:16:
                    e4:f9:1b:5c:4b:36:4f:56:62:6d:92:86:34:42:d2:
                    2e:d7:78:41:57:d8:30:38:60:bf:49:c5:8d:33:9b:
                    b0:81:98:5a:9c:1c:78:f3:57:af:34:e3:7e:42:85:
                    9a:33:0e:5e:50:d4:c9:ea:17:fd:c3:98:8c:7b:e2:
                    77:46:e1:62:17:d6:88:48:59:b3:86:40:09:de:d2:
                    ed:e1:a3:72:b7:bc:7c:70:50:8d:d2:80:c4:9f:19:
                    cd:56:ff:1a:b5:e9:37:7f:da:5e:45:52:a4:d8:5d:
                    a0:59:e9:6b:aa:8e:65:66:3d:54:e7:90:54:e2:ab:
                    8b:04:08:81:cb:70:ce:6b:8c:df:29:a1:21:33:bf:
                    d3:fe:c0:cc:ba:62:77:8b:e9:d7:d0:ec:07:94:0b:
                    cc:67:23:33:8d:b5:6c:96:0f:e0:9d:ce:0a:be:c1:
                    63:47:d8:2e:f4:26:92:4f:d9:24:8f:bb:43:1e:2b:
                    ea:49:34:fa:d6:45:fb:1f:af:fc:b3:7e:08:af:ad:
                    0f:03:1e:50:8e:05:06:31:a1:05:9e:5d:1a:54:9c:
                    8a:71:68:78:ca:99:4f:f1:2e:33:49:2b:07:bc:42:
                    df:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E2:8A:7B:E1:5E:EC:7B:7C:9F:5C:21:8C:9A:5B:9B:BF:73:B0:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c0430da-d1de-3aed-bfb7-b320d1946e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:76:07:47:08:51:1a:01:bc:1e:fd:14:7b:d7:12:f3:9f:0a:
         0f:f3:95:25:d0:1c:19:6e:23:11:ff:2b:d7:d9:e8:4e:07:8d:
         74:c4:8c:49:69:de:b2:25:10:38:77:7a:b7:0e:2f:49:91:49:
         2b:0d:8c:4a:3d:3f:d4:ef:c3:97:d1:31:18:ca:ae:0a:46:41:
         b5:d9:f9:60:fe:40:a0:ca:cf:af:da:f2:e8:5b:1d:ca:cf:1b:
         f2:61:30:7c:f5:2f:8d:e1:16:b8:1f:50:a6:7e:c6:7c:93:05:
         92:5a:8a:26:92:26:79:93:d6:b0:33:77:ac:a5:c1:54:de:42:
         05:a4:a3:ad:60:6b:62:9c:7e:80:ce:72:e1:ab:de:2b:30:57:
         6c:69:4a:76:29:67:c9:fc:62:e5:1a:11:97:8f:8e:f3:6a:34:
         e2:e6:44:7b:7c:44:c2:0a:b9:32:59:de:ab:ee:fb:29:10:eb:
         ee:9d:6c:39:84:9f:29:45:29:21:d2:18:e6:e8:e2:87:f5:cf:
         e4:b1:ba:a4:79:1c:47:02:05:e6:fa:37:2a:fb:72:be:68:6f:
         66:e6:cf:d0:b6:f1:8b:40:c6:0a:0c:ef:22:86:72:71:e2:3c:
         0e:b6:ca:8a:8d:b0:e4:d6:71:c9:00:4e:0c:96:e6:46:e2:55:
         29:ca:49:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQL4iSTW1wFPGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
OWIxN2MxYTktMzNkMy00ZWNhLWIzZmYtODFiN2E5YTBhYmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn4z9clZzvt1XKhlsn6zzXhyTPq1o6eV1fzJ
oRbk+RtcSzZPVmJtkoY0QtIu13hBV9gwOGC/ScWNM5uwgZhanBx481evNON+QoWa
Mw5eUNTJ6hf9w5iMe+J3RuFiF9aISFmzhkAJ3tLt4aNyt7x8cFCN0oDEnxnNVv8a
tek3f9peRVKk2F2gWelrqo5lZj1U55BU4quLBAiBy3DOa4zfKaEhM7/T/sDMumJ3
i+nX0OwHlAvMZyMzjbVslg/gnc4KvsFjR9gu9CaST9kkj7tDHivqSTT61kX7H6/8
s34Ir60PAx5QjgUGMaEFnl0aVJyKcWh4yplP8S4zSSsHvELfAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDniinvhXux7fJ9cIYyaW5u/c7AcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOWMwNDMwZGEtZDFkZS0z
YWVkLWJmYjctYjMyMGQxOTQ2ZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1f8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAl2B0cIURoBvB79FHvXEvOfCg/zlSXQHBluIxH/K9fZ6E4HjXTEjElp
3rIlEDh3ercOL0mRSSsNjEo9P9Tvw5fRMRjKrgpGQbXZ+WD+QKDKz6/a8uhbHcrP
G/JhMHz1L43hFrgfUKZ+xnyTBZJaiiaSJnmT1rAzd6ylwVTeQgWko61ga2KcfoDO
cuGr3iswV2xpSnYpZ8n8YuUaEZePjvNqNOLmRHt8RMIKuTJZ3qvu+ykQ6+6dbDmE
nylFKSHSGObo4of1z+SxuqR5HEcCBeb6Nyr7cr5ob2bmz9C28YtAxgoM7yKGcnHi
PA62yoqNsOTWcckATgyW5kbiVSnKSbo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:30 2024 by rpki-client on console-fra.rpki-client.org