Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4e36acbb-2de0-32b8-846d-516675132c4c.roa
File:                     4e36acbb-2de0-32b8-846d-516675132c4c.roa (raw, json)
Hash identifier:          k61nU1xnBz0TcSpV6BTiI/ptNPypv2VcbaNIbb2+sXo=
Subject key identifier:   44:5F:D4:B2:97:1A:09:59:9B:D4:9B:9F:A3:F5:CF:17:E3:2F:97:A8
Certificate issuer:       /CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
Certificate serial:       010D0C9F432858495FB2135EDD22CBAE9F510A40
Authority key identifier: B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4e36acbb-2de0-32b8-846d-516675132c4c.roa
Signing time:             Mon 31 Mar 2025 19:34:25 +0000
ROA not before:           Mon 31 Mar 2025 19:34:25 +0000
ROA not after:            Sun 29 Jun 2025 19:34:25 +0000
asID:                     399055
IP address blocks:        103.143.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5f:b2:13:5e:dd:22:cb:ae:9f:51:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
        Validity
            Not Before: Mar 31 19:34:25 2025 GMT
            Not After : Jun 29 19:34:25 2025 GMT
        Subject: CN=5c53e6ab-4eb7-4b6c-90b8-ee422c83c657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:1f:b2:b4:dd:df:66:7e:67:04:65:5a:09:
                    b7:5d:cd:6d:4d:4c:1f:b9:d0:b6:91:78:d9:b9:5f:
                    d6:18:0c:ce:68:b9:f2:a4:15:56:31:ca:25:ba:a5:
                    c3:eb:9f:d9:63:6f:0b:21:1d:c7:d6:80:dd:28:c2:
                    19:89:7a:e4:3f:c4:fd:07:af:59:39:21:7c:27:48:
                    46:47:9e:f9:28:fb:55:0f:28:a5:b4:a4:ac:74:17:
                    96:ce:11:e6:f2:51:40:97:83:ea:d6:62:75:9c:45:
                    43:8a:73:ae:bc:c2:d6:53:c2:60:3e:b2:98:14:43:
                    d1:ed:ed:7a:42:c2:c8:0f:77:0b:fa:13:66:39:b6:
                    dd:df:55:14:de:a6:c7:df:84:02:2c:d2:26:04:1d:
                    82:75:65:e5:80:3a:0a:87:ee:b7:d6:fc:18:bd:44:
                    11:a9:91:77:53:20:12:d5:ca:12:80:cf:11:b7:0f:
                    bb:b9:3d:9b:2f:ba:a7:00:50:c1:27:76:3a:48:10:
                    68:5d:0d:24:46:2f:a2:27:c3:9a:d7:4f:3a:60:fc:
                    f4:c9:5e:f8:c0:f5:da:d7:2b:53:22:81:c7:13:1f:
                    d5:51:30:ff:8e:52:64:4b:f2:9e:1e:5b:35:8d:27:
                    b7:ec:a7:ec:65:ed:96:20:a7:dc:f1:3e:55:c8:36:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5F:D4:B2:97:1A:09:59:9B:D4:9B:9F:A3:F5:CF:17:E3:2F:97:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4e36acbb-2de0-32b8-846d-516675132c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.crl

            X509v3 Authority Key Identifier:
                keyid:B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:88:fc:21:d9:e0:a4:4a:ad:97:bc:5c:5f:c3:f1:16:10:
         c1:87:15:ba:b1:e8:98:2d:6c:cb:46:2e:06:88:97:55:80:94:
         8e:90:6a:52:8c:fc:fa:f6:2e:e2:60:32:b0:24:f3:e5:fc:b5:
         35:5f:03:ef:4c:24:c3:2f:87:82:55:34:d9:24:f2:c2:43:cd:
         df:e4:13:d2:1c:ef:d3:c5:12:fc:26:18:a9:fc:ca:4e:2f:cc:
         a4:27:0f:54:2e:37:0d:96:6e:03:15:7a:d4:40:b4:d2:68:7c:
         62:07:da:8d:a8:dc:5f:b3:c1:2d:11:2e:25:a9:f1:5b:55:17:
         86:d9:a3:6b:e8:e1:c9:a8:69:81:0a:df:d9:b7:d1:30:de:4a:
         89:23:52:4a:e0:c7:e2:17:af:dd:0c:96:62:5d:9f:b9:8a:4a:
         e8:c6:fc:41:f4:b0:a1:ac:21:cb:96:d2:94:20:90:fe:b0:51:
         0e:6d:77:3b:80:75:cd:d3:5c:b8:9c:21:54:77:ff:5f:58:2b:
         05:ef:49:e7:76:37:12:37:fa:78:80:9d:c0:11:69:8f:07:bf:
         33:33:c1:51:37:1e:bf:15:86:44:ae:51:cd:8c:47:b9:08:21:
         ba:4f:ae:ae:8a:54:ad:41:a4:2f:5d:46:6f:fa:9d:98:7e:0a:
         76:d7:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:59 2025 by rpki-client