Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/fdfadd0f-725c-38d4-99de-a28697cc4b5d.roa
File:                     fdfadd0f-725c-38d4-99de-a28697cc4b5d.roa (raw, json)
Hash identifier:          HeV7tVXPaHxMTX6A0Vb33q77/v0CBG6yTElwxPR9FOw=
Subject key identifier:   30:AC:C2:4E:31:5F:B4:D6:A9:56:7A:80:E0:3A:4F:BC:5B:16:B7:22
Certificate issuer:       /CN=2986bb3e-67f0-4efd-a00e-a8ad659aa836
Certificate serial:       010D0C9F43285849431B910A0E37176EA07EF400
Authority key identifier: D5:7D:F2:86:2A:59:9E:2F:7B:45:7A:E6:27:B1:14:23:FD:AC:4C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/fdfadd0f-725c-38d4-99de-a28697cc4b5d.roa
Signing time:             Fri 21 Mar 2025 13:48:32 +0000
ROA not before:           Fri 21 Mar 2025 13:48:32 +0000
ROA not after:            Thu 19 Jun 2025 13:48:32 +0000
asID:                     14934
IP address blocks:        103.141.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/2986bb3e-67f0-4efd-a00e-a8ad659aa836.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/2986bb3e-67f0-4efd-a00e-a8ad659aa836.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:1b:91:0a:0e:37:17:6e:a0:7e:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2986bb3e-67f0-4efd-a00e-a8ad659aa836
        Validity
            Not Before: Mar 21 13:48:32 2025 GMT
            Not After : Jun 19 13:48:32 2025 GMT
        Subject: CN=0cd8d62f-ea25-4fff-b5ad-620838740b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:10:4e:64:f9:eb:50:b6:85:0a:f7:73:72:
                    58:da:7b:49:d1:06:48:15:00:a3:04:d7:f9:b4:73:
                    1a:7d:e7:4e:9a:7a:df:cf:b1:be:6a:04:87:f0:64:
                    58:e0:60:85:aa:e0:64:5b:d8:7a:a8:31:c8:ce:75:
                    29:99:fa:a8:38:e7:c8:96:d3:e2:93:90:a7:8c:7e:
                    44:f8:52:12:69:09:c1:b2:1b:ec:12:8c:6d:e6:67:
                    3d:cc:cc:ec:dd:81:f8:7c:7f:55:b7:be:09:fc:33:
                    9a:22:dc:5f:ba:84:f4:94:1f:40:77:60:fd:38:61:
                    91:92:7d:ba:0d:21:4d:ef:84:c1:3d:76:c7:07:f6:
                    1b:4a:f0:18:69:35:28:2a:30:0e:dc:c9:2d:cd:45:
                    ba:26:3b:0f:53:60:9e:ba:3e:2d:6f:90:4b:2d:5c:
                    72:7e:69:b5:65:4f:9a:27:14:9b:42:ce:82:0d:74:
                    b6:3f:d0:ef:f0:e7:bd:26:cc:d6:04:fc:32:9e:35:
                    ac:59:53:db:6d:e7:d5:2e:ec:61:83:6d:75:18:eb:
                    b7:7e:fe:a2:26:1d:5b:ae:77:d1:ff:75:1e:15:f2:
                    ec:7a:43:37:f9:9f:84:87:40:fc:31:ed:b0:94:9c:
                    4c:d5:bf:88:1c:c2:d5:72:12:f5:d5:ba:14:ff:0e:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AC:C2:4E:31:5F:B4:D6:A9:56:7A:80:E0:3A:4F:BC:5B:16:B7:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/fdfadd0f-725c-38d4-99de-a28697cc4b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/2986bb3e-67f0-4efd-a00e-a8ad659aa836.crl

            X509v3 Authority Key Identifier:
                keyid:D5:7D:F2:86:2A:59:9E:2F:7B:45:7A:E6:27:B1:14:23:FD:AC:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:9a:7b:89:93:b8:40:1c:9a:42:aa:76:a0:f1:d5:41:c6:
         7d:0b:31:21:20:24:68:3a:89:1d:d9:b3:fa:18:c4:78:80:e9:
         10:4b:7c:44:f3:08:06:48:7d:db:36:5c:68:b3:31:e3:25:cb:
         3a:97:1f:8a:db:f6:08:29:cb:f7:76:c1:db:2f:1d:3a:e4:9c:
         e7:26:ab:d2:7c:68:61:d8:54:c1:80:e9:b3:62:57:bd:b2:86:
         88:eb:b1:4e:9d:f0:a2:b2:ba:32:6b:cc:7b:d1:a0:8e:db:23:
         27:d2:c5:15:f2:46:ad:eb:e1:e2:f2:b8:f5:45:8e:31:05:ea:
         de:86:fa:c4:bd:e0:54:78:b5:a0:a0:64:38:74:b7:1c:89:96:
         8d:2a:83:ab:7f:01:3f:ab:d7:dd:59:7d:c5:84:f1:73:80:56:
         23:ff:04:b5:b0:3d:48:1c:77:c2:61:07:0f:c2:51:ed:d5:1c:
         1e:a8:1d:9c:07:0c:a0:71:57:17:36:fd:ee:90:f8:5f:44:dd:
         c1:b7:6a:10:f6:da:3a:a3:2a:ac:59:c0:3c:49:49:b2:fc:88:
         52:6d:41:cf:b0:f0:e2:22:c8:1f:02:dc:9c:30:df:7f:34:a8:
         ba:e7:6c:63:69:b3:f6:db:ea:5a:eb:cf:6a:18:fc:4f:22:a0:
         ac:74:42:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:01 2025 by rpki-client