Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa
File:                     5defbc32-1cf4-3d58-be45-b2975f3026fa.roa (raw, json)
Hash identifier:          nTS/GG2SeuHP3pLesxeGfNDBybxL2FYO7wXFpIZm9z8=
Subject key identifier:   50:18:78:72:DB:03:39:C8:DC:63:E2:B4:66:63:DA:14:73:8C:84:18
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F43285849CE9A5F9592B5883969629170
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        103.109.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5f:95:92:b5:88:39:69:62:91:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=4c580190-3319-41e0-aecb-187dabac8184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:b0:df:3c:ea:f6:f0:bf:93:1a:06:5d:82:
                    09:b5:0a:6b:8f:c0:18:c2:2d:f2:af:a7:86:30:06:
                    99:a2:91:1c:fe:0c:12:75:66:bd:e4:c8:10:7f:2b:
                    b2:e4:a0:b0:c3:0f:8e:62:b4:a4:a9:09:ad:d0:41:
                    26:1c:b4:13:be:47:10:67:9f:99:48:76:ea:1a:56:
                    c4:71:5f:02:1e:43:14:ab:2d:ef:d8:63:e8:56:38:
                    37:2b:99:5d:5d:87:5c:e4:1c:7a:85:15:9a:51:14:
                    12:bd:18:82:5b:ac:8b:1c:bb:ec:91:d8:f4:05:1d:
                    e7:0d:d9:99:03:be:85:32:b9:0c:0f:51:d4:8a:16:
                    37:d2:64:6a:9b:c5:9f:38:6d:a0:1f:e7:d1:bf:0d:
                    0a:25:77:b4:43:a8:0f:9d:38:f3:5c:90:4c:49:ca:
                    ae:55:89:9a:ed:84:ee:bf:1f:88:38:54:76:3f:a6:
                    cf:a5:f8:53:51:6d:2d:c1:94:8b:6e:77:8b:9b:a1:
                    3c:e7:79:88:21:b6:09:00:a7:c7:31:af:01:33:b9:
                    f2:2f:3f:71:cc:6a:4a:8f:c8:61:3d:97:d6:9b:b5:
                    c7:03:79:7f:30:1b:78:55:ab:81:69:42:13:6a:29:
                    7d:80:1d:a4:49:12:41:ba:fd:72:14:7e:58:9b:37:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:78:72:DB:03:39:C8:DC:63:E2:B4:66:63:DA:14:73:8C:84:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/5defbc32-1cf4-3d58-be45-b2975f3026fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ae:e9:ef:9a:92:24:2d:a6:e9:31:3a:48:67:45:ac:0c:7e:
         af:03:2c:48:c7:6c:65:0a:33:26:7c:d1:16:16:31:52:d7:e9:
         2a:0e:7f:25:80:b4:aa:57:28:2f:7e:82:90:19:a9:71:af:f0:
         c8:85:61:10:12:03:d8:bd:7a:6f:80:12:02:c4:9c:53:3e:64:
         27:d9:cf:d8:2c:97:4c:81:b5:0a:18:e1:04:ee:0a:e2:a5:29:
         9d:ae:06:d4:0c:de:d9:2c:78:ab:1c:f0:f4:7a:06:50:2d:04:
         d4:c2:7d:4a:08:09:cf:97:c2:8c:01:a5:7e:f1:52:f6:8f:13:
         f9:5e:45:17:58:7c:c2:31:39:56:4b:66:5f:05:da:49:2f:52:
         d9:6b:9f:3d:80:45:e3:a1:4f:78:76:af:fd:27:96:38:55:02:
         cb:77:d0:35:0d:2b:c1:39:52:c6:e9:96:c2:c0:04:75:4c:a9:
         4b:a8:7c:01:3f:96:fe:88:20:75:7c:8b:25:8d:0e:da:49:e8:
         e5:37:6a:ba:bf:3e:43:d6:d3:2c:68:0d:22:61:fb:4a:0e:42:
         a8:e7:80:1e:17:6e:1a:bf:8e:87:b5:20:e4:22:09:55:3a:33:
         7f:60:c6:be:c7:e9:b7:8e:3d:f1:78:0b:53:84:5d:3e:60:81:
         85:25:03:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:03:26 2025 by rpki-client