Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa
File:                     2ac55f39-0179-3626-9f0f-32171775be3e.roa (raw, json)
Hash identifier:          hp2K9d0t5UsQ09eNKbKppupyOXZp8ipdMWBHHG0k8FY=
Subject key identifier:   F4:59:B3:55:73:02:73:CE:A2:8C:CA:4F:CF:E7:64:30:6E:0E:BB:81
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584988CF2115FE95482061AC1980
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     396949
IP address blocks:        103.101.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:21:15:fe:95:48:20:61:ac:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=a9c6205f-9221-4f72-b603-75c18cc5cd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:16:30:cc:01:ce:d4:44:b0:1d:99:fd:4a:
                    5d:8b:1f:61:de:28:11:16:33:44:f5:f3:54:fd:4c:
                    d0:4c:b9:e9:45:84:e4:e1:55:b9:ca:33:34:48:9d:
                    19:d8:54:68:10:ff:d1:1b:78:58:00:18:0a:f7:d3:
                    ca:5b:84:64:ca:ed:8f:21:97:7c:b5:aa:3a:08:fe:
                    f7:eb:ab:e6:9e:98:17:af:5c:23:bc:9c:c5:e9:f7:
                    13:2e:5a:29:b0:04:ee:be:e0:2c:77:13:88:06:37:
                    c7:38:5e:5e:96:47:b3:94:f1:c4:bd:03:75:4b:22:
                    95:71:c4:d1:47:1a:86:12:c8:c6:4d:86:40:87:26:
                    58:23:bf:76:e9:1b:ed:44:1e:d3:f0:65:05:2a:d2:
                    2f:8a:3d:5e:4d:c5:bd:af:bf:ac:e9:4f:cc:a0:e4:
                    9e:67:48:12:63:8b:d9:57:77:9d:70:6c:54:69:d6:
                    62:66:bb:ac:54:bb:26:c8:89:b2:87:89:e7:ba:36:
                    20:49:62:34:a5:31:eb:4a:84:7b:57:f3:c1:6b:df:
                    66:3e:71:86:df:12:3f:39:4d:a0:b6:b4:a3:68:4d:
                    3c:ab:8f:5e:92:9a:4d:fc:18:c8:ee:36:f1:87:dd:
                    ca:09:c3:1b:3f:a3:e8:39:c2:4b:90:8e:c0:f8:84:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:59:B3:55:73:02:73:CE:A2:8C:CA:4F:CF:E7:64:30:6E:0E:BB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f3:80:7e:99:2f:c3:1e:26:2f:d4:d9:66:5e:fb:2c:04:8f:
         cd:8b:37:51:ed:fe:b4:06:5f:6f:7f:6f:b6:19:1c:00:5a:7a:
         9d:77:b7:99:b0:85:9f:8f:58:8f:aa:00:48:36:e3:82:5b:bb:
         6d:71:41:18:bb:a8:9c:d7:eb:2e:d8:24:a3:ba:91:83:1c:98:
         f3:3c:81:64:7c:61:bd:9f:a8:95:1c:9c:c0:cb:29:7b:ed:34:
         ad:21:4d:5b:bf:c6:ff:7e:ce:83:cd:d3:a1:7c:7d:70:7b:99:
         0b:5c:b2:35:f2:f9:d3:8c:5d:f5:22:18:46:97:56:ab:27:aa:
         fc:93:80:05:f2:6c:18:be:08:a4:9d:71:2e:14:43:09:63:a5:
         57:e3:d2:d4:18:df:fc:54:8d:52:15:e7:6d:58:68:73:82:20:
         f2:44:8d:53:9b:3f:51:6b:c4:3c:d5:09:70:76:32:4d:3c:55:
         d3:bf:eb:d6:70:8a:e0:da:9a:23:32:42:32:2d:9a:54:9c:09:
         1d:72:f0:b3:e9:c2:4d:33:36:7a:ad:e2:5e:f4:2a:f7:7e:13:
         8d:38:3d:50:31:63:20:8f:d1:8e:8f:0e:ea:2c:af:d2:c1:e5:
         9a:54:9a:d8:86:b2:d7:ab:e1:dd:90:ea:55:fe:b2:ad:a7:03:
         71:0a:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:21 2025 by rpki-client