Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8c97f246-483a-3937-a5b5-9d784617a491.roa
File:                     8c97f246-483a-3937-a5b5-9d784617a491.roa (raw, json)
Hash identifier:          5kILlSFHGV0KL7aCdKUfuT/agFsZgy1JE8u0cwfXm6g=
Subject key identifier:   11:83:1F:76:7E:3E:18:73:6C:E7:42:26:6C:A1:D9:F4:6C:DD:40:F6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858499AF482391F024AE9F2AF96C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8c97f246-483a-3937-a5b5-9d784617a491.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        103.56.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:82:39:1f:02:4a:e9:f2:af:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=9fec5305-5bb0-452b-8df6-c1a2d8c0123f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:21:af:b5:d7:c5:fd:26:58:61:3e:d9:2b:e4:
                    58:6d:70:c1:e6:55:99:bd:b1:5c:9d:a8:7d:2e:0c:
                    94:ae:dd:51:38:08:df:0e:04:b6:62:10:c9:8a:af:
                    a2:c9:fa:e2:46:fd:84:23:4b:e1:c4:c3:07:f8:7d:
                    d5:52:38:de:7d:d4:0a:6f:56:e2:2e:8f:a9:61:95:
                    dd:3f:3d:11:64:91:a8:4c:80:cb:35:dc:3c:ff:0a:
                    b9:a5:ac:78:7d:3a:e7:ce:4d:a8:33:7a:37:59:11:
                    f8:a8:77:47:92:77:2b:12:d2:ef:fd:aa:7d:d9:d7:
                    a3:21:ad:bb:10:da:92:ea:b9:0b:b9:13:9e:09:94:
                    72:f7:35:76:80:6c:36:78:43:70:80:ee:f7:d3:16:
                    6c:91:52:bb:f1:f2:ae:b2:73:a9:b5:4c:9f:e5:b1:
                    3f:85:c2:4f:fe:a8:47:fb:c6:52:17:d8:db:cc:85:
                    1d:87:25:5b:de:4a:95:a2:58:ea:42:87:36:82:d1:
                    c5:3a:e2:1d:6d:2a:74:6d:54:42:8f:e0:e0:2f:8d:
                    cf:d8:8c:4b:06:64:4b:ec:bf:b5:3f:0a:20:37:f6:
                    3d:8a:f0:cf:95:6d:53:17:f2:a0:3b:82:cc:1b:ef:
                    75:ff:d3:f2:9d:fc:bf:9e:7c:91:d9:80:52:75:c5:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:83:1F:76:7E:3E:18:73:6C:E7:42:26:6C:A1:D9:F4:6C:DD:40:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8c97f246-483a-3937-a5b5-9d784617a491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:fa:6f:e9:fc:a7:e3:9e:b6:ea:0f:b2:0d:0e:a4:be:cc:
         50:e6:60:57:08:fc:aa:9b:01:34:8f:e2:76:89:cd:98:1c:1a:
         48:b3:28:92:e9:14:43:3e:01:2f:44:24:5b:0f:f5:fa:29:31:
         1d:0d:f7:2b:17:bf:e4:ca:bd:7a:52:a8:ff:ac:54:95:81:fc:
         0f:e4:74:8f:9a:47:55:d3:0f:9a:e6:98:1c:8d:9a:1e:ab:29:
         07:7b:33:c6:cb:4c:9f:e4:b8:86:b4:fa:d5:2d:bd:77:5a:3b:
         0e:4d:66:6c:e3:61:cc:a8:e8:72:1c:1d:ef:e4:d2:49:dd:85:
         b9:68:69:2e:30:69:ec:b2:0f:c5:ea:d5:d3:4c:79:3d:7a:d8:
         2b:4c:3c:2d:fc:22:77:5f:79:d0:48:e5:8c:49:2c:64:0d:93:
         c3:54:ef:64:53:ec:45:0f:f4:0c:d4:84:a5:67:a4:de:0a:b4:
         d8:8b:63:64:4a:6a:63:26:c5:a7:71:d7:56:66:6d:59:12:eb:
         1c:23:80:c3:27:b6:f9:f9:5a:75:18:22:8c:9b:e6:b2:95:67:
         17:13:cf:6c:18:25:08:d0:71:45:de:dc:6d:6d:08:8a:30:87:
         98:16:8d:c3:4c:9b:8d:32:08:94:a1:6f:5e:c0:18:4e:91:71:
         7e:a9:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:40 2025 by rpki-client