Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
File:                     c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa (raw, json)
Hash identifier:          clthbH9SQiLgrYzR71xcgaYvLef3qclJQro/8dQEJbs=
Subject key identifier:   F0:BA:BB:66:03:86:3C:59:9B:7B:E6:C8:5F:D5:DE:9D:5A:DF:83:4F
Certificate issuer:       /CN=69dba5e3-26fb-440c-884d-525d04a32b0f
Certificate serial:       010D0C9F4328584AD506604636481D8988A181A0
Authority key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     17034
IP address blocks:        103.229.152.0/23 maxlen: 23
                          103.229.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:60:46:36:48:1d:89:88:a1:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dba5e3-26fb-440c-884d-525d04a32b0f
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=bbc9534b-ff79-458c-aede-86b19b0c8b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:d0:e5:e7:1e:d1:1e:44:f0:23:1b:9c:d0:
                    e5:34:e5:b8:78:f8:81:31:26:9d:27:21:19:f9:4d:
                    06:16:97:58:59:9a:d4:ee:90:b0:ba:01:17:77:b2:
                    33:39:80:94:ff:7e:1c:5d:a4:8d:59:c5:97:0b:30:
                    ef:44:32:d3:0e:43:40:20:0c:9e:43:76:9c:f8:b5:
                    cd:57:79:73:d1:72:91:b3:1c:a7:6d:4d:96:d4:df:
                    8f:df:2c:52:b1:52:0c:d7:df:d8:bf:a9:00:c1:2f:
                    12:9f:40:32:ca:a4:a7:28:b0:19:a7:5f:fe:f7:42:
                    0d:88:c4:e9:ca:fe:30:4f:66:20:42:45:f9:1c:10:
                    53:cd:4f:ad:50:e2:c0:3e:ed:17:e9:52:3a:9c:2f:
                    b1:6c:49:12:c1:0a:7b:75:70:b5:4b:ef:10:77:8a:
                    d2:d4:7a:f1:99:46:c4:9c:69:77:f9:dc:13:0b:44:
                    db:de:cd:d0:90:5b:ad:9c:0b:33:42:48:44:33:a4:
                    9c:2f:b0:03:87:ab:d4:18:ac:54:be:58:3d:cf:4d:
                    72:20:00:54:fe:dd:23:b4:ab:6a:61:cf:6f:f0:2a:
                    04:4d:d3:2a:d1:0e:e3:ea:91:b2:ea:a1:ea:9b:e2:
                    63:e2:d3:c8:75:3a:ed:ff:9c:00:59:3a:c9:f1:87:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BA:BB:66:03:86:3C:59:9B:7B:E6:C8:5F:D5:DE:9D:5A:DF:83:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:83:06:62:34:7e:31:6e:b4:9a:67:82:5f:80:48:25:3c:cf:
         58:ac:68:c7:9d:a5:2d:65:a7:5c:d5:8f:a4:28:54:f5:a9:79:
         f3:ee:2b:01:c4:aa:4e:78:6a:4f:95:45:f8:a8:db:3a:08:01:
         f8:ea:f2:33:1a:94:0b:54:be:3f:40:8b:7c:75:8a:56:f2:50:
         cd:54:d2:d2:a7:f4:ff:d5:69:e2:f3:26:09:52:5e:4c:3f:31:
         6d:3f:a7:bf:44:8d:44:36:61:05:75:fb:4d:f8:73:0f:e8:f0:
         29:e9:f9:8e:b2:11:13:ab:2c:a6:cd:ca:24:0c:b1:6e:b8:60:
         1f:1c:a8:41:1a:e1:df:e9:69:1a:f1:32:89:82:43:d3:1e:07:
         c8:93:a0:11:2c:25:f7:13:21:ad:02:66:a0:0c:d7:92:24:02:
         46:54:92:cf:13:94:96:da:fe:bc:51:3c:6f:a4:e6:ac:08:e5:
         24:80:9e:f8:f4:14:aa:d6:0b:98:d5:14:10:68:aa:e0:de:c4:
         0a:5f:bf:54:f4:d9:c3:ce:43:c2:37:d9:17:c7:e0:74:38:a8:
         95:29:9e:a5:93:72:be:0f:17:3d:87:08:99:d1:4a:5b:88:89:
         d8:3f:d0:26:51:6c:c9:4d:48:e3:4b:64:f2:06:bc:c2:5d:e0:
         73:ea:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:47:12 2025 by rpki-client