Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa
File:                     a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa (raw, json)
Hash identifier:          8QQThTOLXK3ioaGbMvVWptrcwWR201zUrIzBe4qG/Is=
Subject key identifier:   B6:93:D8:4F:7E:62:75:05:DD:66:A5:78:EC:9B:68:B6:3D:F9:D2:4A
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F432858497C3EF07B76336CDE453ABE80
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     399250
IP address blocks:        103.120.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:f0:7b:76:33:6c:de:45:3a:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=e4127574-5a92-4278-994f-944992a88192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:31:fb:c5:00:c6:7d:9d:53:f8:5e:71:8d:
                    37:aa:31:dc:21:ff:3d:10:f5:6e:dc:37:92:0f:3f:
                    af:41:14:ae:85:75:1f:2a:a9:7c:e3:29:00:aa:6f:
                    44:fd:1e:8a:e7:62:c6:e3:af:8a:85:d4:26:fb:64:
                    04:43:80:11:f4:53:4d:13:e4:85:79:1b:e5:3b:13:
                    6c:9a:7d:d9:f4:74:62:9d:25:c1:1d:07:cb:a1:b3:
                    de:ec:3a:94:d7:17:6e:bf:08:3e:65:71:ed:39:56:
                    43:35:24:27:6f:57:39:c0:51:7d:f8:38:a0:8e:17:
                    c3:ec:15:2d:e0:81:50:06:f6:a7:8a:87:01:45:0a:
                    f3:bb:e1:54:f1:01:47:24:0e:5b:a5:53:93:35:b0:
                    5d:c7:10:8a:4a:ac:6c:47:cb:3d:a7:cb:5b:dd:6d:
                    43:ef:37:ca:72:d7:ac:6e:b7:02:55:35:ce:52:ad:
                    e9:36:df:21:fb:49:46:9a:7c:29:52:28:c6:ed:5b:
                    86:04:76:57:29:29:93:dc:3e:9e:f6:b9:30:d1:e9:
                    37:0f:84:c7:95:4d:64:2d:82:0a:39:31:fb:90:ff:
                    ce:92:05:bd:82:2b:da:46:76:60:09:7a:6a:a5:c2:
                    64:82:b6:f6:68:39:e6:27:2d:68:e3:54:ca:c2:0b:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:93:D8:4F:7E:62:75:05:DD:66:A5:78:EC:9B:68:B6:3D:F9:D2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a5710aa2-6b9f-30af-bfc0-2c64cc9c3fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:83:56:33:42:58:08:e6:e9:b4:61:87:ef:00:77:df:2f:
         52:3a:e8:57:2b:46:ea:15:72:d5:2c:b5:d6:be:26:3f:6d:e6:
         2a:17:37:ff:00:57:1b:1c:13:67:3f:fa:65:6c:5f:e7:19:29:
         7c:18:a7:e0:f7:bf:d0:c0:92:02:92:c3:a2:f6:59:64:34:8b:
         fb:b8:c2:15:1a:91:f8:13:dc:72:e3:cd:83:00:67:b3:82:97:
         df:49:0b:e6:33:6c:fc:6c:6f:e7:bd:ce:a8:1f:52:b8:a3:0d:
         30:e5:57:15:d6:79:a5:01:11:7e:c5:b7:5c:33:11:f9:10:54:
         ab:16:0d:b7:ee:72:78:11:48:ce:be:9d:5e:04:09:ff:e0:d4:
         8e:34:87:41:6b:19:ea:6b:3f:7e:83:ff:31:3d:ca:07:f8:18:
         23:a5:59:56:24:fd:8c:54:29:9c:3e:13:e8:5f:d3:03:a1:a0:
         ca:db:81:6a:be:eb:be:58:a0:90:6c:1a:1a:41:1d:33:c2:fd:
         c0:fb:60:ca:07:b2:d4:8b:8d:aa:1f:f9:f4:31:62:73:56:8e:
         23:f6:19:44:53:b1:ec:a1:5e:03:ec:96:87:04:29:bb:c1:17:
         68:97:b6:e2:1e:d4:3a:99:8b:00:b7:f7:df:9c:47:60:e4:43:
         bf:6d:8b:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvB7djNs3kU6voAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNjZjM2MDQtMDNjNS00MDc0LWFlZDUtNmNmNzE2MWJm
MTU2MB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk
ZTQxMjc1NzQtNWE5Mi00Mjc4LTk5NGYtOTQ0OTkyYTg4MTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Ix+8UAxn2dU/hecY03qjHcIf89EPVu3DeS
Dz+vQRSuhXUfKql84ykAqm9E/R6K52LG46+KhdQm+2QEQ4AR9FNNE+SFeRvlOxNs
mn3Z9HRinSXBHQfLobPe7DqU1xduvwg+ZXHtOVZDNSQnb1c5wFF9+DigjhfD7BUt
4IFQBvaniocBRQrzu+FU8QFHJA5bpVOTNbBdxxCKSqxsR8s9p8tb3W1D7zfKctes
brcCVTXOUq3pNt8h+0lGmnwpUijG7VuGBHZXKSmT3D6e9rkw0ek3D4THlU1kLYIK
OTH7kP/OkgW9givaRnZgCXpqpcJkgrb2aDnmJy1o41TKwgt4pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLaT2E9+YnUF3WaleOybaLY9+dJKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mY2Nm
MzYwNC0wM2M1LTQwNzQtYWVkNS02Y2Y3MTYxYmYxNTYvYTU3MTBhYTItNmI5Zi0z
MGFmLWJmYzAtMmM2NGNjOWMzZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmNjZjM2MDQtMDNjNS00MDc0LWFl
ZDUtNmNmNzE2MWJmMTU2L2ZjY2YzNjA0LTAzYzUtNDA3NC1hZWQ1LTZjZjcxNjFi
ZjE1Ni5jcmwwHwYDVR0jBBgwFoAUuzof+JJiW44WQsSXOGWDGIMkAJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mY2NmMzYwNC0wM2M1LTQwNzQtYWVkNS02Y2Y3
MTYxYmYxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3gwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFu8g1YzQlgI5um0YYfvAHffL1I66FcrRuoVctUstda+Jj9t5ioXN/8A
VxscE2c/+mVsX+cZKXwYp+D3v9DAkgKSw6L2WWQ0i/u4whUakfgT3HLjzYMAZ7OC
l99JC+YzbPxsb+e9zqgfUrijDTDlVxXWeaUBEX7Ft1wzEfkQVKsWDbfucngRSM6+
nV4ECf/g1I40h0FrGeprP36D/zE9ygf4GCOlWVYk/YxUKZw+E+hf0wOhoMrbgWq+
675YoJBsGhpBHTPC/cD7YMoHstSLjaof+fQxYnNWjiP2GURTseyhXgPslocEKbvB
F2iXtuIe1DqZiwC399+cR2DkQ79ti1s=
-----END CERTIFICATE-----
Generated at Sun May 11 06:22:38 2025 by rpki-client