Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/9514ea24-161e-3948-9edf-8e3efaf79278.roa
File:                     9514ea24-161e-3948-9edf-8e3efaf79278.roa (raw, json)
Hash identifier:          OKD3ke1CeOIoaGOWgu7SPQR4tbOeAyypvCdnuFNZpqg=
Subject key identifier:   38:9B:1E:62:C9:81:14:FF:C1:FD:50:22:CF:22:BB:E5:C9:99:81:79
Certificate issuer:       /CN=e9769409-4db3-443e-9837-3afd4dca595d
Certificate serial:       010D0C9F43285849A559462934176FF69A40A380
Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/9514ea24-161e-3948-9edf-8e3efaf79278.roa
Signing time:             Fri 25 Apr 2025 18:22:05 +0000
ROA not before:           Fri 25 Apr 2025 18:22:05 +0000
ROA not after:            Thu 24 Jul 2025 18:22:05 +0000
asID:                     23316
IP address blocks:        103.103.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a5:59:46:29:34:17:6f:f6:9a:40:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d
        Validity
            Not Before: Apr 25 18:22:05 2025 GMT
            Not After : Jul 24 18:22:05 2025 GMT
        Subject: CN=b8b40f6b-8b9f-4fd3-a4af-30ed6e7935a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:e0:3c:41:3d:7d:bf:a3:4f:fb:3a:fa:60:
                    92:f5:49:7c:df:03:38:76:54:db:94:2a:2f:c0:48:
                    1c:3c:6d:e7:d5:cb:6e:cc:f3:a7:76:6c:59:83:45:
                    51:eb:c7:74:64:c9:c5:d6:05:e7:b9:99:52:c3:62:
                    6b:87:8b:11:52:1b:1a:cb:78:8a:95:1f:e5:45:fc:
                    62:d8:d0:b3:43:5d:c3:8c:fb:a6:02:98:65:e0:bf:
                    5d:49:5f:56:f8:c2:39:72:b6:e7:8c:06:23:0f:f3:
                    79:d8:24:c0:f4:48:14:c7:8d:56:fe:d8:62:1b:9b:
                    69:c2:2b:99:5f:1b:84:08:ed:8b:a3:94:19:ad:55:
                    c1:b1:b6:3e:c3:92:d5:93:7d:80:5a:04:88:ad:e5:
                    9d:47:96:9d:ea:b0:0e:80:0b:9f:f0:f0:ce:81:4a:
                    ab:db:8d:f1:cc:a4:7f:88:63:44:f9:3b:96:98:fc:
                    02:c1:e9:91:22:00:b5:a9:5e:0d:1b:bb:2b:26:6a:
                    57:db:ae:53:f9:8e:43:e8:37:bb:ba:a3:27:e3:dd:
                    58:a5:6a:2a:13:31:1f:58:07:1b:dc:c4:1a:1c:78:
                    a6:70:25:45:4c:ef:8e:62:10:72:84:fe:3c:07:4c:
                    0d:8b:15:55:73:bd:33:ae:11:e0:af:1c:63:04:59:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9B:1E:62:C9:81:14:FF:C1:FD:50:22:CF:22:BB:E5:C9:99:81:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/9514ea24-161e-3948-9edf-8e3efaf79278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:01:ca:9b:3e:4a:15:69:c2:4f:fb:c0:25:ae:23:af:f3:50:
         21:ba:3b:cb:6a:08:ec:67:a2:27:b1:09:6a:6a:ec:27:dc:1f:
         b1:93:78:7a:0d:89:18:e3:3e:e8:9e:a6:e0:21:f3:23:63:96:
         be:8f:4c:76:99:80:2b:f4:8c:5f:12:5e:8b:67:61:f1:a6:84:
         9c:38:e5:ff:d6:38:50:53:8c:93:c0:d5:68:23:a9:41:96:4a:
         eb:72:ad:64:76:e6:a8:22:72:5b:51:c6:ed:c6:e6:ce:39:4a:
         60:5a:a8:cf:24:48:b9:e0:6c:7f:4c:d0:18:ea:be:f6:05:33:
         9c:eb:bf:82:d4:b7:70:56:34:71:57:68:6c:80:79:9a:b3:d1:
         48:8f:9a:19:e0:21:ac:5c:c0:f9:24:4f:53:73:ab:0e:fe:aa:
         bc:b3:49:e7:02:34:6a:c8:9a:c9:48:e4:a3:ac:48:de:82:c4:
         ef:92:4a:8e:21:da:39:1d:61:72:1d:33:f7:18:eb:ce:89:26:
         e9:fb:e2:f3:40:b0:a4:82:30:47:9a:b7:e1:87:87:6c:37:98:
         da:e8:53:e7:fe:ec:8f:bf:fc:cc:cf:88:f8:17:be:2f:93:65:
         7c:4c:c9:f1:1a:55:3a:61:ca:61:cf:57:a2:18:af:d9:ee:33:
         ef:ca:74:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmlWUYpNBdv9ppAo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1
OTVkMB4XDTI1MDQyNTE4MjIwNVoXDTI1MDcyNDE4MjIwNVowLzEtMCsGA1UEAxMk
YjhiNDBmNmItOGI5Zi00ZmQzLWE0YWYtMzBlZDZlNzkzNWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J7gPEE9fb+jT/s6+mCS9Ul83wM4dlTblCov
wEgcPG3n1ctuzPOndmxZg0VR68d0ZMnF1gXnuZlSw2Jrh4sRUhsay3iKlR/lRfxi
2NCzQ13DjPumAphl4L9dSV9W+MI5crbnjAYjD/N52CTA9EgUx41W/thiG5tpwiuZ
XxuECO2Lo5QZrVXBsbY+w5LVk32AWgSIreWdR5ad6rAOgAuf8PDOgUqr243xzKR/
iGNE+TuWmPwCwemRIgC1qV4NG7srJmpX265T+Y5D6De7uqMn491YpWoqEzEfWAcb
3MQaHHimcCVFTO+OYhByhP48B0wNixVVc70zrhHgrxxjBFlaswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDibHmLJgRT/wf1QIs8iu+XJmYF5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2
OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvOTUxNGVhMjQtMTYxZS0z
OTQ4LTllZGYtOGUzZWZhZjc5Mjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4
MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh
NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk
NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2fwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUByps+ShVpwk/7wCWuI6/zUCG6O8tqCOxnoiexCWpq7CfcH7GTeHoN
iRjjPuiepuAh8yNjlr6PTHaZgCv0jF8SXotnYfGmhJw45f/WOFBTjJPA1WgjqUGW
SutyrWR25qgicltRxu3G5s45SmBaqM8kSLngbH9M0BjqvvYFM5zrv4LUt3BWNHFX
aGyAeZqz0UiPmhngIaxcwPkkT1Nzqw7+qryzSecCNGrImslI5KOsSN6CxO+SSo4h
2jkdYXIdM/cY686JJun74vNAsKSCMEeat+GHh2w3mNroU+f+7I+//MzPiPgXvi+T
ZXxMyfEaVTphymHPV6IYr9nuM+/KdCA=
-----END CERTIFICATE-----
Generated at Thu May 1 06:11:39 2025 by rpki-client