Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0b53f24-e928-32cf-bcf5-21cb94c752f0.roa
File:                     e0b53f24-e928-32cf-bcf5-21cb94c752f0.roa (raw, json)
Hash identifier:          huUyXgR0Zx/cCICTTlpcPNIUypVKhf3KgLJZhssxA64=
Subject key identifier:   AF:FA:D5:5A:B1:D0:13:02:D5:C7:92:60:03:F0:20:2A:61:CE:0B:2B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848BBBB8142917116FFBC86AE80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0b53f24-e928-32cf-bcf5-21cb94c752f0.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        103.48.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:81:42:91:71:16:ff:bc:86:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=91325faf-5190-44e0-9ed2-9551f59ffc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:83:c6:47:d1:5b:85:ab:02:db:8c:93:2f:
                    d5:85:63:95:f0:02:a6:2a:15:14:1e:34:9b:aa:93:
                    20:9f:38:3f:63:ef:99:7f:23:66:be:1d:27:33:d4:
                    3f:6d:2a:8b:e1:39:05:ca:96:00:e3:3a:37:fa:b9:
                    1d:df:b7:9b:cd:72:53:bd:62:c1:5b:ef:50:6e:ab:
                    31:fb:75:f2:2c:5b:01:bb:46:d0:10:e5:97:f3:71:
                    89:c0:74:b0:69:12:a9:e4:7e:18:e6:0d:cc:a9:f8:
                    47:86:d9:92:0f:14:70:06:91:fc:d4:a8:8f:90:07:
                    29:6a:bb:10:91:48:8c:bf:fa:c5:c3:b6:61:bc:4a:
                    13:02:cd:3f:22:43:f0:c0:19:2a:f8:f8:62:5e:bb:
                    77:3b:4f:22:fd:49:78:cb:68:c2:e6:01:5c:9c:70:
                    50:c4:3c:ec:94:ba:b3:cc:55:69:a4:59:98:28:82:
                    c1:9b:ed:eb:7f:b2:bf:3b:3a:b7:c3:ec:ca:81:59:
                    97:f4:cb:21:41:39:17:d3:1a:52:8a:26:20:8b:f8:
                    2f:ea:70:f2:6d:32:70:f9:7f:ec:4c:00:04:54:4b:
                    ee:92:48:f3:1c:25:ab:62:73:12:0a:ed:43:33:91:
                    de:4f:c3:a3:b4:a8:5f:d4:29:05:51:9e:78:4d:11:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FA:D5:5A:B1:D0:13:02:D5:C7:92:60:03:F0:20:2A:61:CE:0B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0b53f24-e928-32cf-bcf5-21cb94c752f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:42:08:ef:00:2d:93:07:e8:b2:af:28:f9:c1:db:cb:9c:bd:
         3c:3b:83:3d:d4:4e:f5:ad:e8:97:37:72:6c:ac:0a:f9:b0:9d:
         37:4b:59:e5:55:f1:3f:af:f8:5e:a2:5d:53:df:6b:2f:c0:b9:
         76:cc:54:68:70:fd:a8:08:9a:69:62:e1:11:eb:e5:7e:8d:f2:
         03:7d:09:38:82:6a:c4:d4:96:0c:07:00:99:f2:bc:b9:4a:2a:
         02:b6:0a:da:fe:b3:b9:71:58:9d:b9:b1:44:3b:6f:80:fa:03:
         c5:36:ed:eb:11:27:13:ee:e4:3e:d8:6e:08:a6:16:35:93:c9:
         e4:ae:d2:22:90:46:c8:73:47:91:3a:94:ec:e3:97:a2:2b:01:
         22:b4:1c:85:41:c6:29:67:2a:ec:90:23:57:e9:04:c5:d3:6b:
         5f:a4:0f:0c:7d:38:57:de:63:d7:f6:98:dd:5f:9b:33:00:85:
         98:a6:af:c5:b1:9c:4c:a9:7b:ed:cf:66:61:76:db:24:b2:ae:
         5c:ae:61:4a:f4:da:17:43:db:3a:90:63:0c:76:92:45:cc:ae:
         7f:92:a4:70:b4:55:65:4d:94:8d:0e:85:1f:5c:25:93:66:82:
         01:ec:a6:bf:3b:8e:f6:d5:d5:7b:f9:86:05:fa:85:43:cb:8a:
         ee:81:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 07:34:43 2025 by rpki-client