Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c7af7368-6d04-3c08-88df-0e1b7e3c007e.roa
File:                     c7af7368-6d04-3c08-88df-0e1b7e3c007e.roa (raw, json)
Hash identifier:          /ohW3qNo1u8oza0U+iXpaXRnWqreDesCZg0IJMMwQb4=
Subject key identifier:   52:CD:FD:15:35:69:62:62:9A:40:F2:E6:B4:BD:58:80:42:EB:09:41
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A74B5DE4B6E95BE5225DFD580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c7af7368-6d04-3c08-88df-0e1b7e3c007e.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     54103
IP address blocks:        103.87.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:de:4b:6e:95:be:52:25:df:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=6b11f48b-8af6-4ea7-84c7-be7f82ffebed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:60:96:ae:07:26:80:b8:e8:90:71:07:c0:
                    b7:75:9b:ac:af:53:82:53:e7:38:62:5f:27:96:34:
                    01:4c:c2:10:ca:08:bf:a9:8c:44:1b:9a:73:b6:1b:
                    d2:33:12:02:92:74:d0:a1:87:31:dd:c9:9f:77:76:
                    a6:d6:1c:af:af:5d:76:a3:47:50:8a:55:e6:e6:a6:
                    8b:0c:ba:ae:75:43:d8:92:1f:26:f7:8c:54:03:d6:
                    1f:70:df:05:cd:12:b3:fb:2c:54:c6:0b:34:f2:fd:
                    68:16:31:2e:65:fd:23:db:17:3d:47:e3:4c:ff:07:
                    55:9c:64:4b:54:12:5b:b0:f8:5b:9e:2b:a2:65:8b:
                    e2:2a:1d:46:25:f8:49:8e:88:4a:46:d0:ff:ba:88:
                    34:94:37:05:ab:69:2d:44:3c:c0:80:dc:57:0f:e8:
                    5b:0c:0b:ec:37:3b:2a:5c:7a:af:96:a5:bb:c1:6a:
                    d7:d2:ae:22:4d:41:eb:56:ba:32:3e:99:28:4d:00:
                    5d:a5:65:93:8a:0b:9f:95:ff:b5:f8:31:62:a4:2c:
                    f1:9d:9b:3a:e8:88:e7:fa:d7:02:54:78:71:fd:b3:
                    88:bb:e6:6e:4f:09:41:de:ae:1c:1a:75:13:9f:b9:
                    08:1e:a6:15:0e:20:f5:f4:3e:98:df:48:b4:06:d2:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CD:FD:15:35:69:62:62:9A:40:F2:E6:B4:BD:58:80:42:EB:09:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c7af7368-6d04-3c08-88df-0e1b7e3c007e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:67:d1:45:cc:dc:4b:84:19:0b:a6:f0:0d:3f:87:60:7f:78:
         4f:0b:0f:5d:68:47:bd:40:f6:ec:71:00:3d:e1:7c:d9:91:cf:
         d6:bf:15:ac:d4:37:e6:c4:07:7a:b8:6f:f4:10:4d:6f:5a:14:
         f8:e4:e6:eb:9d:4d:6f:1c:d9:51:be:6f:bf:25:de:0d:b7:0e:
         fb:68:47:96:59:39:f3:aa:5b:55:58:85:b8:20:63:e8:3a:e6:
         72:f8:6b:cb:0b:b8:09:74:d3:87:3b:ed:f5:17:75:22:9f:9b:
         1f:cc:ab:13:42:e5:7d:9b:ca:71:b4:1a:35:78:7d:16:b7:5c:
         07:a2:fa:e5:c9:ad:47:0f:3a:ac:db:32:c2:3e:a3:8a:48:5a:
         ee:4c:a6:c5:00:a5:4f:b6:b8:db:fe:52:fa:8b:de:b5:0f:1b:
         c9:86:b7:bc:b6:a2:92:69:3a:ab:0b:64:0f:87:4a:8f:da:fa:
         c1:a6:e9:9d:a0:be:3d:ca:49:08:26:09:c7:52:78:89:ec:e4:
         73:27:9a:00:da:58:04:ea:9f:38:60:86:e5:35:6e:16:70:0d:
         37:89:bc:1e:ca:88:e9:49:51:9f:23:de:e6:d4:65:d1:97:d7:
         cd:96:ec:7d:e2:d8:00:73:86:98:58:f9:f5:b3:0e:9f:1c:6c:
         05:66:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:27 2025 by rpki-client