Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4e36acbb-2de0-32b8-846d-516675132c4c.roa
File:                     4e36acbb-2de0-32b8-846d-516675132c4c.roa (raw, json)
Hash identifier:          noFgLu4o2BA63snp0ph0ziytwLJTzI9+qHK828WBNBI=
Subject key identifier:   86:A1:1A:B3:BF:8F:04:76:E2:F6:6F:D4:A6:81:A2:1F:47:0C:41:62
Certificate issuer:       /CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
Certificate serial:       010D0C9F4328584A3FAAD3BDDB626B37164D5F80
Authority key identifier: B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4e36acbb-2de0-32b8-846d-516675132c4c.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     399055
IP address blocks:        103.143.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d3:bd:db:62:6b:37:16:4d:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=1e334a79-ab85-428c-86c9-a3b10131a85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:86:0e:34:cd:2b:12:fa:34:40:96:ff:6e:
                    74:a2:1b:87:55:6e:2b:65:2c:97:b3:46:af:c2:ff:
                    79:a8:f1:a5:25:d7:c1:0d:2f:92:d3:8f:eb:12:87:
                    f0:d3:d4:44:69:06:63:ba:6c:f9:62:bd:a1:a3:bd:
                    0f:53:1c:e1:fe:b7:3f:6d:17:73:c1:16:8a:d3:e4:
                    76:ae:ee:05:cf:11:21:ba:12:c9:96:82:d5:fb:e6:
                    0d:32:50:e4:de:4a:47:16:d8:08:a0:30:3e:18:31:
                    70:51:d0:9c:54:85:f2:e7:5e:55:5f:58:e4:59:47:
                    b4:37:00:b5:7e:c2:2f:66:2b:d2:b8:74:ec:d4:40:
                    01:31:d2:02:01:bb:3a:63:da:7c:f1:55:d7:68:c7:
                    10:12:eb:4c:80:b5:ed:c8:ea:a1:c6:49:08:ee:7e:
                    92:82:74:ad:0c:ae:8d:21:90:6d:97:db:06:f0:41:
                    38:73:a6:1a:33:c3:5a:fb:7c:c5:06:52:87:a6:8a:
                    2d:cd:fa:75:39:f2:c9:67:9d:8c:86:4d:b9:a4:c8:
                    45:de:2f:44:69:d4:69:8b:ab:09:e1:15:7d:0c:da:
                    c7:6b:95:e5:e5:2f:7b:bd:f7:9c:87:63:2b:e6:8b:
                    0f:37:d0:2f:60:4a:68:e7:07:8c:a9:e5:44:d9:e0:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A1:1A:B3:BF:8F:04:76:E2:F6:6F:D4:A6:81:A2:1F:47:0C:41:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4e36acbb-2de0-32b8-846d-516675132c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.crl

            X509v3 Authority Key Identifier:
                keyid:B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:9a:6d:72:64:94:40:f3:24:11:6c:be:d8:2a:30:cb:b4:b3:
         10:f8:67:64:86:43:9f:1f:8b:ee:8d:7e:7d:f7:a3:62:f3:62:
         5e:eb:03:e3:e0:92:79:d2:e3:c0:c1:da:b1:f1:c3:dd:5c:13:
         3b:b8:39:0e:84:11:8a:e2:03:08:fc:4e:8c:45:65:42:f1:3c:
         f8:59:0b:9d:8c:69:df:f0:60:bf:cc:de:48:2f:ea:77:3c:d6:
         80:13:64:bc:27:23:d1:52:1a:ea:c0:08:76:b7:29:da:2d:62:
         8b:45:6a:39:cc:6c:81:9e:4d:5e:df:ff:8e:00:32:05:ec:1a:
         9c:bb:8a:51:57:84:52:4e:97:49:de:8d:3a:7a:5e:90:6b:29:
         ea:7e:6e:63:05:91:13:4e:d1:d2:9a:85:af:f4:24:9c:02:fc:
         8d:22:51:ef:ec:7d:36:33:02:08:01:7b:0d:0b:1f:72:eb:db:
         e9:03:ba:5b:aa:c9:d1:be:1d:e2:aa:25:67:64:5a:49:ca:29:
         b9:a5:42:8f:55:f6:12:3c:95:ca:87:77:ca:53:25:dd:ab:a2:
         82:22:74:dd:ef:aa:90:92:2d:e7:af:aa:2a:42:62:b5:41:f5:
         9a:ef:c0:52:88:17:2d:b2:8f:b1:df:6b:11:7a:ca:ac:30:81:
         e4:93:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:08:04 2025 by rpki-client