Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/65632e09-01b8-3b15-8d00-9c8029babe5c.roa
File:                     65632e09-01b8-3b15-8d00-9c8029babe5c.roa (raw, json)
Hash identifier:          nNNxlAbV4rWbpIMXVe0yxvJjXDLP0Raf6q9zJJXWewI=
Subject key identifier:   74:2B:50:06:FE:5F:CA:E1:F9:BB:14:D7:EE:7E:9F:76:6C:CA:13:91
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584A5CFB2BD170F36E7958021E40
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/65632e09-01b8-3b15-8d00-9c8029babe5c.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        103.246.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:2b:d1:70:f3:6e:79:58:02:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ecf52510-7ce3-474d-9bb2-c5a76c6e94af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:e5:92:8f:dc:20:a3:91:02:cd:10:e6:d1:
                    3a:1a:22:5f:74:f6:1b:20:e0:3f:81:c4:54:89:9a:
                    61:cc:75:58:26:9a:c6:e8:e2:65:22:a2:00:2c:23:
                    b6:af:2a:c0:81:d3:c5:82:df:e0:77:60:a4:00:48:
                    c2:43:88:de:5d:b9:1c:e1:72:c5:eb:a8:de:8f:1d:
                    bd:a7:db:b0:8d:55:41:41:8d:f0:6d:8c:ae:b7:8e:
                    b6:f0:ae:74:64:d3:f0:0a:b1:12:b6:80:59:aa:46:
                    39:30:bd:07:96:c5:4d:3c:23:c1:a8:3a:c9:62:5f:
                    0f:41:15:11:bd:6f:d4:90:3a:26:6f:cd:be:66:cb:
                    7e:77:9e:8b:52:bd:3f:db:b5:d0:da:ac:7a:46:1b:
                    6d:f2:93:24:27:b0:39:3f:60:9e:0c:d2:cc:eb:32:
                    7e:90:3f:05:66:d0:a8:83:fc:5a:5b:8e:22:eb:ce:
                    70:5c:98:56:91:16:ce:a4:39:2e:cb:85:4d:d2:5d:
                    47:6e:6b:cf:af:57:11:1c:ff:58:aa:a9:bc:ed:7f:
                    97:9e:8f:b2:5a:59:de:08:b0:a3:0d:55:0b:0b:58:
                    f2:fe:a1:85:a2:60:7d:2e:f2:52:1c:f1:84:0d:13:
                    e9:c3:a3:00:e0:fe:8d:98:27:9e:fc:d1:6f:42:de:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2B:50:06:FE:5F:CA:E1:F9:BB:14:D7:EE:7E:9F:76:6C:CA:13:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/65632e09-01b8-3b15-8d00-9c8029babe5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:fd:54:3c:13:ed:a0:9a:b7:36:26:8d:c0:d5:34:fa:53:d7:
         d1:c6:a9:a0:78:f1:ad:de:d1:74:13:5e:e1:fa:e8:d4:d4:55:
         0e:95:63:a2:a4:97:5e:d6:11:88:9e:cf:b3:b3:98:28:b7:99:
         dd:63:9b:bc:d3:fc:7a:52:ff:2f:29:c4:ed:70:53:7f:eb:60:
         fa:c9:60:ca:0c:2e:87:19:c5:97:ec:f5:ad:10:64:15:aa:fb:
         2e:37:9f:8e:4e:dd:53:2f:74:f2:ab:08:ff:b8:63:69:aa:10:
         95:f6:95:c2:a5:99:84:dc:44:71:45:77:17:bf:1f:96:9f:da:
         44:d2:7a:6a:1b:d3:9f:e2:3e:34:23:91:67:30:e1:a2:95:c9:
         f7:9e:84:56:74:f6:08:2d:cd:52:3a:ba:c7:ce:5f:25:31:5f:
         e9:57:6f:6d:93:d4:f2:85:9e:25:f1:16:e0:b2:07:16:81:0d:
         1f:5c:ea:1e:db:f8:aa:f4:db:b4:5b:c4:bf:f9:57:1d:19:65:
         c3:3b:a5:dd:78:a4:7d:6f:d3:bc:0a:7c:5f:da:1e:6f:70:61:
         6e:b3:a1:f8:93:bb:c1:46:a9:66:ba:df:fc:be:3f:59:0a:b1:
         2c:55:75:bb:cd:3e:35:4a:ed:be:62:83:b0:b5:8a:c1:47:ba:
         71:1a:93:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:25:29 2025 by rpki-client