Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
File:                     c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa (raw, json)
Hash identifier:          payuEMc2Hb2wQf+5XhaBgbOMeZH7+40fWMg4Vlzcw9k=
Subject key identifier:   19:8D:4F:10:EC:8E:BA:95:D2:82:84:02:A2:B2:7D:C2:02:8D:89:82
Certificate issuer:       /CN=69dba5e3-26fb-440c-884d-525d04a32b0f
Certificate serial:       010D0C9F43285849F44A5C31D3376BF182488480
Authority key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     17034
IP address blocks:        103.229.152.0/23 maxlen: 23
                          103.229.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:5c:31:d3:37:6b:f1:82:48:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dba5e3-26fb-440c-884d-525d04a32b0f
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=8212712d-a1d5-4749-b1c0-95b25be6ff4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:82:8e:d0:19:ed:47:ab:7c:2a:27:6c:09:
                    c1:53:3c:f9:71:c9:ff:d2:a1:a9:53:55:d6:11:ee:
                    de:dc:cf:71:26:cc:94:0e:eb:a3:fd:30:4f:57:33:
                    e2:e2:f0:13:21:18:da:f6:59:ea:03:48:17:7d:06:
                    5d:cc:2d:5b:38:aa:05:e0:b6:4b:39:cf:7f:8b:1c:
                    80:f9:91:2b:b9:c2:1c:25:da:f9:30:8a:8b:b7:6e:
                    0f:5c:31:34:58:51:71:b7:d3:65:30:4e:4b:65:59:
                    1b:92:cb:e7:af:67:9a:30:b9:4b:fd:85:22:4a:6e:
                    95:b8:9f:f4:0d:65:68:bf:2a:48:c8:4a:56:b6:b9:
                    b6:86:df:ea:46:80:95:9f:32:86:a3:eb:d3:8b:e4:
                    fc:3b:8b:3e:dd:5d:0c:1f:56:8d:1a:03:62:a1:cc:
                    f5:95:8e:42:6c:db:34:4a:7e:b2:78:52:35:fa:e6:
                    91:48:85:ed:62:dc:ae:9a:b0:ea:74:0e:b5:e6:a3:
                    37:20:54:0e:b8:5b:12:70:6b:35:8a:91:4b:e4:a1:
                    77:15:d3:7b:2b:94:08:ad:a3:c7:88:6c:97:92:e4:
                    af:d1:8e:54:20:02:36:c2:2b:c4:15:16:46:ad:93:
                    4a:36:13:86:58:f2:b9:35:d2:59:24:4d:77:19:aa:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8D:4F:10:EC:8E:BA:95:D2:82:84:02:A2:B2:7D:C2:02:8D:89:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:7e:00:18:13:28:75:41:77:18:96:1e:36:ab:43:51:20:af:
         94:6b:63:f3:36:f8:5f:2b:a0:79:d9:95:c8:c2:8b:e4:71:29:
         01:95:87:8a:d1:82:fb:51:ed:5b:38:28:6b:78:3c:7f:32:94:
         87:cc:f5:97:ad:9f:7e:02:b0:21:30:4f:8b:b2:d6:75:d0:d0:
         5e:37:97:d9:df:cf:06:3e:73:8e:78:c6:8d:b3:05:f6:1d:f2:
         5b:8f:d4:6c:22:a8:30:bb:d7:97:33:7e:88:6c:55:76:13:d8:
         ba:36:f5:44:32:32:71:8d:ef:85:a5:74:0f:2e:d0:77:8f:70:
         8a:29:95:26:2e:f3:cb:5f:0e:8d:05:b8:cf:e7:ae:d3:f7:62:
         df:8e:f2:52:0e:7e:7d:58:02:e8:fb:ed:d8:d2:04:4c:07:9a:
         52:08:83:45:6b:71:d9:8d:29:43:52:21:c3:f6:ca:b5:51:9f:
         d5:c1:99:00:a6:40:94:6a:35:44:06:ad:e2:08:44:65:52:66:
         b2:e8:a3:d0:7a:6f:00:6d:d3:8a:51:33:54:c2:67:53:74:99:
         2d:40:cc:43:4f:37:e2:e0:0b:67:1f:75:48:a8:2d:f1:52:7b:
         0e:55:47:95:6a:10:15:c1:9b:c1:c7:bb:da:93:05:8d:67:21:
         9c:c7:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:18:28 2025 by rpki-client