Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6757d609-3340-3483-82aa-35af5e808cd7.roa
File:                     6757d609-3340-3483-82aa-35af5e808cd7.roa (raw, json)
Hash identifier:          HGlUsWsmFeRbgqA4v7R8u5HzlecwmKRYrBbTTC8FcZM=
Subject key identifier:   41:4F:93:14:44:1A:B6:A4:22:28:57:88:88:B6:F7:1C:B5:1B:A5:5B
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584793B1146682FC383A1037E000
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6757d609-3340-3483-82aa-35af5e808cd7.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     60558
IP address blocks:        103.67.203.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:14:66:82:fc:38:3a:10:37:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=8b37e465-3ca1-4e8f-ad5f-99bf4396aa95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:fb:e7:0a:c6:91:41:af:dd:7e:0e:ff:77:
                    24:ac:ea:d2:7e:d0:ba:fa:ab:39:dc:ca:8e:0b:f4:
                    3e:3d:7c:29:ce:5c:45:46:97:fb:d5:9d:d4:fd:49:
                    57:11:78:09:3d:72:3e:1f:76:21:e3:5e:17:c9:f8:
                    0a:bb:f0:9c:3c:15:f1:ad:44:3b:8d:39:bc:80:9c:
                    5b:5e:fe:a0:59:2c:f8:d3:3c:c3:dd:a9:0c:1a:e4:
                    c3:cf:ca:de:1b:28:4a:d9:d7:96:e6:cb:f5:e8:f7:
                    b1:ab:fe:79:9b:f1:42:c0:dc:b1:c6:05:72:a9:79:
                    96:59:90:ba:23:01:f5:91:60:50:02:04:c8:17:7e:
                    08:77:07:fa:c4:40:46:6a:2f:4c:d3:39:41:57:1f:
                    c0:6c:88:46:8a:30:e0:1c:94:0e:39:35:e1:f5:e0:
                    bd:b2:48:4c:fa:29:83:cc:fd:22:dc:e8:46:c2:c2:
                    93:98:a3:40:e2:f8:5f:dd:3d:61:4b:63:e9:0e:1f:
                    de:d2:85:7f:02:54:7a:db:78:7d:57:9e:49:c9:37:
                    d1:21:b3:ea:35:ae:e2:88:97:80:a5:ce:6a:6d:e7:
                    20:ad:cb:b9:07:55:2f:d6:f5:de:67:06:c6:9f:64:
                    bb:9a:77:85:1c:42:32:46:20:61:28:9f:cc:ad:74:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4F:93:14:44:1A:B6:A4:22:28:57:88:88:B6:F7:1C:B5:1B:A5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6757d609-3340-3483-82aa-35af5e808cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:bf:2a:03:19:eb:b2:6e:40:87:7e:cf:42:e5:90:f6:2a:9d:
         68:1a:fb:04:b2:2e:2f:ce:bb:07:fc:f3:32:95:ee:cf:de:0e:
         04:b7:e0:53:a2:58:dd:96:e6:23:09:1b:75:91:ba:55:f2:04:
         df:ad:ed:34:7a:8b:31:8e:38:2d:49:96:e2:81:9e:2a:e0:c8:
         7c:d3:f8:b7:cd:c2:65:6a:f8:82:60:7b:12:d9:fb:64:e7:95:
         cd:31:a0:2c:81:5f:29:7c:0e:7a:43:2c:f2:2d:23:29:22:2d:
         eb:46:8c:a4:dc:48:a7:62:6d:61:f5:63:c5:08:a6:7c:60:43:
         d3:3b:4f:c3:85:3c:42:5a:58:ca:b3:86:33:26:5f:7d:6a:4d:
         f9:6b:48:18:03:92:11:5a:b9:6c:0a:e3:03:3d:de:04:e9:4b:
         03:fa:e2:ee:a2:1a:59:1c:e0:e8:9c:f7:10:1e:e7:84:16:77:
         ea:1f:3b:53:e7:a1:f7:9e:13:76:df:5d:c9:96:da:51:29:b0:
         81:b5:db:5c:79:c7:d0:f5:d9:19:a1:f0:bd:2b:1a:c0:23:ae:
         10:99:7b:89:94:37:93:7f:3c:0b:57:3c:52:5d:36:a1:1e:84:
         2a:4b:a4:89:14:22:57:22:7b:dc:65:92:09:81:70:04:64:ae:
         a7:59:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:08 2024 by rpki-client on console-ams.rpki-client.org