Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/77b760de-4f7c-3a1f-b692-67f4adac6bce.roa
File:                     77b760de-4f7c-3a1f-b692-67f4adac6bce.roa (raw, json)
Hash identifier:          Cyk873p+bGJBaWM2t0OBWS/RoCT9cGOU3aCko/sBJSs=
Subject key identifier:   E0:D9:1A:D7:41:0E:15:48:3E:0B:88:4A:21:E1:BF:45:FF:24:74:53
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584AAC0FD0093B7AB8E873DB9B58
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/77b760de-4f7c-3a1f-b692-67f4adac6bce.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     63086
IP address blocks:        103.50.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:0f:d0:09:3b:7a:b8:e8:73:db:9b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=cba02baa-bdfa-4ca1-bbd8-af63a5c2e045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:7d:3c:af:40:be:26:22:8a:e1:12:6c:3e:
                    74:a6:91:4d:3a:ec:d2:9e:20:c6:dd:f1:f4:54:e0:
                    c1:81:6e:f6:47:c2:ef:9a:c2:cc:71:ea:50:82:92:
                    72:91:02:ef:53:b6:0b:da:76:b6:bb:18:af:99:8b:
                    51:7e:a3:09:2a:a4:4a:1d:42:b7:cc:ed:37:2a:0f:
                    9f:7b:8d:1b:9f:2d:73:19:ff:ef:bd:16:16:23:c1:
                    48:b1:10:68:99:70:f9:df:96:d0:e1:77:80:bb:e9:
                    8d:59:35:a8:7a:7f:60:eb:30:f1:02:95:53:74:b8:
                    e8:15:81:85:6c:64:e5:61:c4:81:88:f1:e3:5c:76:
                    36:dc:3b:ab:68:69:b5:33:78:2d:72:8a:49:0a:7b:
                    72:a0:69:08:8f:c2:bb:19:8d:5c:e0:9f:e9:f2:72:
                    b1:e7:6c:5a:5e:48:7a:08:2c:97:0d:94:10:2c:c7:
                    57:79:b4:46:6a:91:4e:6a:74:cf:a2:d8:cc:8f:fd:
                    25:3a:52:7f:7c:d3:a8:5a:b9:89:1c:55:49:5f:89:
                    84:4a:20:a0:c7:33:7f:af:01:c2:12:77:19:c4:50:
                    9d:ce:37:ee:8f:b2:91:52:c8:54:49:d7:fa:10:31:
                    20:20:f9:23:b2:23:50:34:3f:f9:79:60:9e:0f:ae:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D9:1A:D7:41:0E:15:48:3E:0B:88:4A:21:E1:BF:45:FF:24:74:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/77b760de-4f7c-3a1f-b692-67f4adac6bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:e6:06:e7:83:ba:72:e9:29:94:9b:1a:13:e1:b5:0e:a5:
         6f:68:28:65:ea:3c:50:bc:8c:9f:ee:b8:49:60:21:2a:37:b4:
         54:40:5c:d1:83:f8:fe:ac:78:04:f5:c2:b7:a3:15:31:c8:75:
         cb:91:eb:e7:db:23:7f:83:42:c1:d1:55:f2:9f:fd:d8:fe:c0:
         9f:df:1c:34:60:e8:0b:36:f9:90:9e:a7:dc:3e:76:c9:62:0f:
         4e:ba:24:74:d1:29:0e:0f:8f:e6:d5:31:cf:75:c5:a4:76:63:
         36:64:cb:5f:01:9f:05:84:24:d5:fb:28:5a:e0:b0:ba:02:7d:
         71:b1:cc:f3:e3:7c:ad:a1:30:f3:c8:a8:3a:2b:b3:a7:03:1d:
         6b:65:6b:56:27:95:4a:d4:5b:09:77:ba:cc:c1:24:06:8e:9a:
         ff:cf:32:1b:19:d2:31:93:12:1f:51:21:f0:48:ce:5f:c8:87:
         ad:8f:40:e0:ce:52:87:f2:11:c3:f3:27:6f:1b:3c:f1:ba:37:
         7c:da:41:77:db:c7:6e:5c:c9:94:59:92:fb:94:2f:56:7c:24:
         6e:93:4c:56:7c:a6:39:fd:ab:78:cf:eb:4a:b6:be:d8:97:f2:
         d6:9a:04:d4:04:df:86:e4:7e:03:5c:2a:e6:49:13:a1:45:b8:
         27:89:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:13 2025 by rpki-client