Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0b53f24-e928-32cf-bcf5-21cb94c752f0.roa
File:                     e0b53f24-e928-32cf-bcf5-21cb94c752f0.roa (raw, json)
Hash identifier:          1WKDN0OqHDhEJzlpQmAKk+IZ7Lkw0+ZBUlWYxAYyYfg=
Subject key identifier:   55:CF:75:4E:44:B2:21:ED:CF:FA:36:65:F6:5C:83:37:86:EE:C3:A1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A7A4B414BF20D8605203B35C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0b53f24-e928-32cf-bcf5-21cb94c752f0.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        103.48.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:41:4b:f2:0d:86:05:20:3b:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=149b1ebd-d6b3-4205-a95d-7206eda12f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:ee:7d:a1:05:17:64:38:bd:5d:03:46:49:
                    eb:cd:5e:60:7f:1c:e9:1a:08:56:23:92:30:36:62:
                    4e:f3:7a:8f:fa:16:cb:d4:9e:4c:ff:70:ce:c5:d6:
                    be:92:40:38:4c:13:64:17:5d:31:29:5b:a3:d1:36:
                    00:a7:c8:1b:08:98:40:68:28:e5:e6:47:23:35:4c:
                    d5:8c:ac:1a:89:7d:80:57:92:a6:00:41:e4:2a:a2:
                    d2:c0:62:f2:9a:e3:ee:a0:00:31:91:05:bc:e0:58:
                    a2:7b:67:9a:de:e7:f1:2e:e7:aa:10:ab:27:14:03:
                    e8:b3:c4:43:b0:cb:b3:d8:13:dc:0d:78:09:ea:9f:
                    66:a8:b3:d7:9e:ea:bb:17:f6:5e:9f:fb:6f:42:95:
                    06:d4:66:14:36:ae:db:f7:bc:8e:89:5c:51:5e:0e:
                    54:2b:60:5b:58:db:66:10:6d:75:2c:c4:0b:3d:2c:
                    d8:e4:52:98:7b:85:92:82:92:e8:6e:18:ca:6b:61:
                    bf:f5:05:7f:ea:36:0d:54:30:c9:d8:31:96:07:b3:
                    95:ab:76:d3:1a:e5:b2:1a:94:2f:60:81:7f:e3:1e:
                    47:95:83:8d:d4:fc:9f:03:15:ce:6f:f5:97:a4:4f:
                    c9:2b:7e:3e:9a:9f:f1:2a:af:94:81:6b:83:02:48:
                    99:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CF:75:4E:44:B2:21:ED:CF:FA:36:65:F6:5C:83:37:86:EE:C3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0b53f24-e928-32cf-bcf5-21cb94c752f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3d:71:8e:45:7f:8e:29:9e:ed:c0:16:32:48:48:2c:85:67:
         d7:6a:33:2a:df:f8:47:d3:7e:87:aa:9c:2c:17:08:ae:eb:32:
         83:f2:43:ff:53:2e:0b:68:25:68:9b:61:ce:a4:34:d4:e9:8d:
         d3:c4:00:3f:4c:42:70:56:71:e5:4a:76:b6:12:01:37:18:c6:
         28:bc:92:c7:02:f4:bc:62:ab:83:99:0d:59:d2:3d:81:ec:7c:
         63:40:f1:eb:71:e5:ae:af:ed:71:26:2a:59:f7:a4:06:24:c6:
         ad:79:6f:f1:68:d7:40:30:c4:4f:eb:88:9f:52:5b:fa:a3:f1:
         74:b5:cf:89:f9:7e:b9:cc:68:a6:e8:fd:ff:d2:ab:d7:33:03:
         3a:09:42:33:ea:1b:ea:d7:35:34:f8:9c:5d:92:62:ab:1a:e8:
         2c:29:f8:f3:01:0f:bb:55:cb:03:b5:2b:2f:08:a1:25:5a:0c:
         8c:ef:0f:03:7f:bf:99:28:a0:b2:16:0c:82:64:f7:99:6a:ee:
         55:46:7f:86:12:1e:d0:7e:36:92:d9:4c:f6:6a:ce:40:86:d3:
         cb:36:84:0d:7a:9e:bc:80:87:c0:65:a4:09:a5:ca:50:2e:da:
         fd:94:92:35:32:8a:a0:0d:e2:71:31:b3:14:3a:2b:8b:d7:66:
         84:b4:67:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:34 2025 by rpki-client