Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa
File:                     a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa (raw, json)
Hash identifier:          acXGxm0CgGI+jvTB3h4ZiHHUd0CA/lqN7wret2WIyEM=
Subject key identifier:   CE:B7:5A:4A:33:1F:D7:9A:9F:DA:D7:BB:75:9A:71:18:F8:FB:3D:96
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F4328584A5B95B2B46573BE5583EA3380
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     399250
IP address blocks:        103.120.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:b2:b4:65:73:be:55:83:ea:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=c1fa1f9d-f04d-44cd-8050-92108bdaafb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:1f:3d:a7:e6:7d:43:af:86:4f:9e:f9:a2:
                    9b:29:20:eb:8c:67:8f:ff:b0:db:19:fd:f2:87:7b:
                    3c:0c:e6:38:cc:b6:75:31:d5:bd:49:64:97:a8:fe:
                    42:49:83:5a:92:47:2f:b1:48:26:6e:27:7c:39:83:
                    ec:1f:0a:c3:2e:63:7b:ba:df:d7:8c:fb:9f:3c:29:
                    9e:29:16:6b:93:c3:c3:82:a2:65:7a:dd:5f:38:61:
                    33:7f:a1:52:e9:e2:93:e5:49:76:e7:9f:98:20:00:
                    12:e3:cc:2e:e5:48:98:ac:9d:0f:6b:5b:09:f8:e4:
                    2b:02:b6:a6:15:f3:5a:2c:e5:13:a3:f7:97:71:71:
                    c8:46:ac:5b:24:19:5c:2a:fd:9a:3f:01:cb:6d:a0:
                    8e:d9:8b:eb:54:f2:fa:25:42:05:ea:3d:c5:65:c0:
                    c3:9b:9c:cb:8d:09:e0:ea:de:ca:44:16:a8:91:3f:
                    9b:53:46:aa:9c:c6:91:1f:ff:e7:e4:4c:78:7c:75:
                    b9:36:98:e8:80:be:01:b2:c3:42:72:e5:80:e1:ec:
                    61:2c:b6:ed:43:23:46:54:5e:0d:e0:1d:e7:77:01:
                    70:43:45:ed:80:bc:e0:b7:8b:6c:f6:7b:1a:5b:5d:
                    56:ff:e5:0b:7b:06:aa:10:62:3e:52:c6:36:bc:49:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B7:5A:4A:33:1F:D7:9A:9F:DA:D7:BB:75:9A:71:18:F8:FB:3D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:86:45:46:6e:80:a7:db:db:8b:b8:c4:8a:7f:97:11:6e:af:
         ce:c9:5d:72:6f:d6:86:a4:69:81:98:0b:64:c4:25:f0:a8:b5:
         ff:f0:1c:54:cf:d6:35:4d:30:6d:b4:b1:26:60:81:f9:76:6a:
         9b:aa:0c:af:8b:d5:9e:11:a1:5c:e6:32:58:6d:a6:00:52:00:
         0d:6d:ed:ac:ba:42:86:13:9e:e1:eb:56:61:4f:95:eb:26:7f:
         f6:f9:8a:8a:33:0e:0e:93:36:71:90:b0:af:b6:88:35:10:cd:
         33:b5:02:77:42:75:e3:ef:a4:b6:fb:4e:0a:4d:c3:bc:bc:fe:
         ab:31:57:a2:01:a3:1e:ea:98:b5:02:92:95:1e:f7:1e:9f:e2:
         11:97:42:12:da:29:ce:2f:ca:4b:03:c7:94:e0:c5:98:a0:af:
         46:59:19:76:78:91:50:4d:00:b9:ce:14:67:27:c7:62:07:21:
         6d:d7:5b:a9:4e:96:b8:95:d7:c1:43:7c:4d:46:e7:b3:b6:77:
         a7:8d:8f:52:ed:f6:dc:95:2b:42:12:b4:64:50:54:a5:98:84:
         10:45:22:ec:9f:8b:36:d8:ce:37:04:7a:87:24:1b:3a:a2:2c:
         b3:ad:1c:23:2e:38:b8:07:80:e0:f1:ea:66:ef:5f:0b:32:eb:
         57:e2:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:53:22 2025 by rpki-client