Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa
File:                     bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa (raw, json)
Hash identifier:          7OFM8cILoL/rXHNwgR+8SWAuEq/n0i1MQTugJuH4wXI=
Subject key identifier:   12:39:2E:7C:65:5E:03:8A:6F:5E:35:C7:61:56:A8:CB:9F:FB:19:B9
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584A2C2021C60AA17F9D94018900
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     852
IP address blocks:        103.120.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:21:c6:0a:a1:7f:9d:94:01:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=c0f024a9-2168-4ee4-9d17-cc5ea53f8b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:f1:7a:8f:53:01:00:db:39:79:b2:0e:0e:
                    82:a4:a2:aa:0b:fd:da:c6:79:d5:03:f5:4b:c3:1b:
                    37:38:05:dd:08:5c:13:72:36:41:4f:fd:7b:f6:97:
                    96:d3:c1:32:d4:60:5d:a8:f5:33:29:e9:af:1d:d1:
                    6b:06:a8:1b:a3:22:20:38:93:60:83:62:31:7e:73:
                    fd:5b:aa:13:1b:05:2f:81:dd:13:25:a8:db:07:63:
                    d7:a5:4f:7c:7c:56:1c:c8:e2:a8:d6:6b:f4:3b:96:
                    19:02:da:1e:0f:ff:8e:47:bc:3d:10:cb:85:89:b9:
                    cb:59:ee:61:8a:e0:3e:2e:9d:61:f1:fc:c4:39:0b:
                    c2:69:5e:f7:f8:82:04:db:4d:e3:a3:d1:32:6a:26:
                    ed:bc:f7:39:24:27:02:26:82:63:69:cf:b5:00:56:
                    18:9d:dd:1c:12:18:74:14:06:b5:3e:0c:2c:a1:1e:
                    83:c0:02:81:dc:0f:68:88:e2:aa:ba:c5:84:de:40:
                    88:be:4f:1d:0e:83:da:56:00:03:8c:e2:15:36:1a:
                    be:bc:f9:79:7a:ca:5e:a9:f5:bc:f9:3d:fc:ed:a8:
                    b5:dd:47:e1:59:7f:4b:b7:1d:94:b3:f9:c3:f5:6a:
                    d4:fe:25:5d:b9:57:20:5a:d4:6b:52:ea:29:c1:04:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:39:2E:7C:65:5E:03:8A:6F:5E:35:C7:61:56:A8:CB:9F:FB:19:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:c4:53:f8:4b:74:b7:de:50:e9:ee:a7:ea:02:13:b8:b8:
         89:bf:41:6f:b8:1a:a6:c0:bc:bb:57:50:e4:a1:e7:ef:de:bf:
         64:6b:75:ab:5e:e2:15:69:5a:a6:27:f0:09:a8:25:50:b2:f2:
         fc:20:85:b4:0e:67:44:ea:c8:97:82:16:17:61:b1:d0:e0:cf:
         52:51:bb:31:11:72:e0:7d:21:03:02:f1:52:69:cb:ed:bc:3c:
         74:33:26:1b:6d:03:ab:a1:9f:f1:b4:76:15:a1:c1:50:1f:97:
         ab:05:5b:10:a7:7f:58:8d:63:e0:48:06:62:44:05:c8:48:ef:
         0c:c9:0e:ab:f7:a8:25:37:fc:6c:32:b1:29:9e:05:19:e3:73:
         ea:d7:ba:38:22:96:43:80:af:68:ec:8b:d7:dc:6b:48:c2:21:
         41:5f:b4:24:8d:51:70:e4:c5:ff:2d:d7:68:a2:c2:2e:58:f8:
         fb:df:42:cb:e0:40:61:6a:4a:d5:4b:63:d3:0d:da:40:b8:65:
         f5:ae:82:63:28:98:cd:c6:94:c7:3b:13:33:84:6e:e0:ec:a0:
         4a:7a:41:33:91:02:e1:34:2e:46:84:cd:c4:ad:ce:cf:5b:c0:
         7c:98:c3:71:02:a4:85:a0:18:fd:bc:d8:0e:fd:68:bf:fe:b8:
         25:94:df:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICHGCqF/nZQBiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw
ZGU5MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk
YzBmMDI0YTktMjE2OC00ZWU0LTlkMTctY2M1ZWE1M2Y4YjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Xxeo9TAQDbOXmyDg6CpKKqC/3axnnVA/VL
wxs3OAXdCFwTcjZBT/179peW08Ey1GBdqPUzKemvHdFrBqgboyIgOJNgg2IxfnP9
W6oTGwUvgd0TJajbB2PXpU98fFYcyOKo1mv0O5YZAtoeD/+OR7w9EMuFibnLWe5h
iuA+Lp1h8fzEOQvCaV73+IIE203jo9EyaibtvPc5JCcCJoJjac+1AFYYnd0cEhh0
FAa1PgwsoR6DwAKB3A9oiOKqusWE3kCIvk8dDoPaVgADjOIVNhq+vPl5espeqfW8
+T387ai13UfhWX9Ltx2Us/nD9WrU/iVduVcgWtRrUuopwQSgcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBI5LnxlXgOKb141x2FWqMuf+xm5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk
YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvYmMwZWI0MDAtMDMzYi0z
Y2E1LWE0NDAtNGMxMWVhZjQ2NjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw
MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw
MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0
ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3gkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5XxFP4S3S33lDp7qfqAhO4uIm/QW+4GqbAvLtXUOSh5+/ev2Rrdate
4hVpWqYn8AmoJVCy8vwghbQOZ0TqyJeCFhdhsdDgz1JRuzERcuB9IQMC8VJpy+28
PHQzJhttA6uhn/G0dhWhwVAfl6sFWxCnf1iNY+BIBmJEBchI7wzJDqv3qCU3/Gwy
sSmeBRnjc+rXujgilkOAr2jsi9fca0jCIUFftCSNUXDkxf8t12iiwi5Y+PvfQsvg
QGFqStVLY9MN2kC4ZfWugmMomM3GlMc7EzOEbuDsoEp6QTORAuE0LkaEzcStzs9b
wHyYw3ECpIWgGP282A79aL/+uCWU3+4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:33 2025 by rpki-client