Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/e3e4358e-71e7-33cc-879b-77be7c1f3164.roa
File:                     e3e4358e-71e7-33cc-879b-77be7c1f3164.roa (raw, json)
Hash identifier:          GgHWD0YYRn8+o3Oa34PwZfv4R4lo9mtHBTzL27Fxe1g=
Subject key identifier:   AB:3E:38:A8:C6:8F:1D:D3:46:F1:7F:42:38:68:C2:72:85:48:40:B6
Certificate issuer:       /CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
Certificate serial:       010D0C9F4328584A604EF59170E65B477CD4A2C0
Authority key identifier: 33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/e3e4358e-71e7-33cc-879b-77be7c1f3164.roa
Signing time:             Thu 05 Jun 2025 01:00:51 +0000
ROA not before:           Thu 05 Jun 2025 01:00:51 +0000
ROA not after:            Wed 03 Sep 2025 01:00:51 +0000
asID:                     401332
IP address blocks:        103.17.152.0/22 maxlen: 22
                          2602:f81c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:4e:f5:91:70:e6:5b:47:7c:d4:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
        Validity
            Not Before: Jun  5 01:00:51 2025 GMT
            Not After : Sep  3 01:00:51 2025 GMT
        Subject: CN=44600e12-5cd6-4ad6-813d-579e0bb957f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:5d:7b:a3:ac:d1:ed:41:30:35:85:16:9c:
                    b2:bb:83:29:83:ae:18:23:79:c7:63:03:48:28:51:
                    e1:5a:4a:ca:75:6b:73:c7:4a:5b:e8:31:95:80:a1:
                    11:46:b1:b6:e5:e2:59:76:68:18:54:8b:35:f2:1c:
                    76:85:81:de:7b:85:6b:16:95:e0:0e:4e:e6:da:cf:
                    3f:24:20:7f:d6:93:9a:c3:27:08:a6:47:ba:75:5d:
                    d6:36:56:fe:3e:10:db:5f:1b:2d:86:4a:d7:55:89:
                    5d:c3:53:49:bc:e1:fb:eb:46:f6:15:0c:48:39:9c:
                    46:49:80:4b:8f:62:b1:a0:e3:47:e1:d8:56:88:9b:
                    0d:4a:f2:66:fb:b3:35:e8:d5:37:03:e1:3d:50:59:
                    dc:f0:fe:95:7a:a9:6e:00:11:ba:7f:de:07:bf:a6:
                    35:0f:23:bf:bc:3b:3f:88:23:77:6c:de:6b:e4:86:
                    c8:f7:af:f9:0e:6a:75:7d:0c:ee:b2:97:b9:22:c8:
                    43:fc:e3:05:a4:aa:31:2f:2e:64:51:58:9f:af:4c:
                    c1:3b:40:68:95:39:16:53:cd:ed:fd:f4:23:af:5a:
                    a4:f3:c4:ed:74:27:8f:02:3f:8c:da:62:2d:fd:de:
                    1b:d8:c0:fe:f3:ad:b0:14:23:70:5b:88:12:02:b5:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:38:A8:C6:8F:1D:D3:46:F1:7F:42:38:68:C2:72:85:48:40:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/e3e4358e-71e7-33cc-879b-77be7c1f3164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.crl

            X509v3 Authority Key Identifier:
                keyid:33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.152.0/22
                IPv6:
                  2602:f81c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:04:bc:2f:eb:7b:6f:2d:90:80:81:cf:3f:51:a6:a5:6a:
         3c:0c:4c:63:f8:bb:29:b0:7b:39:51:d8:f4:e4:5f:c0:45:80:
         e7:6c:68:76:ef:ad:c2:07:9a:00:b0:54:60:87:c0:87:71:16:
         44:97:94:1f:81:68:89:e0:4e:53:e1:d7:d6:53:2c:82:f5:2e:
         ac:63:c9:39:8e:42:d3:39:90:15:6f:e7:f5:cf:af:29:58:86:
         18:9a:a1:8c:48:c0:30:fd:23:bb:72:a6:f4:62:6d:93:3f:c8:
         e9:d8:a8:51:49:29:0d:30:26:69:29:31:2b:43:de:26:b8:7c:
         f5:4d:e5:22:a8:17:5f:a4:f3:fe:af:f5:cd:eb:1f:53:0e:0c:
         3c:7b:ba:4d:fa:8a:01:08:f5:c0:ca:0e:ae:09:e2:06:cf:88:
         44:5a:52:ae:a9:a3:3c:41:ba:40:7d:39:70:fb:2e:9f:0c:c4:
         5e:f9:66:5c:47:b1:f9:68:46:e7:fb:e9:95:04:ea:46:9b:d8:
         f5:dc:47:22:3f:18:d2:7a:8f:80:54:85:00:6a:b7:3f:43:4d:
         8b:53:17:55:3f:22:f1:70:32:fd:64:2e:44:52:f7:b2:fe:4c:
         eb:c1:5c:1a:61:13:27:45:23:ba:c6:c7:71:96:f1:2e:6f:1b:
         4c:ac:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:36:35 2025 by rpki-client