Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
File:                     da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa (raw, json)
Hash identifier:          RV7xNx1rX0YvZ0y+TLo7kGlOOb3Jw26nR3RbqK3HwX0=
Subject key identifier:   20:4F:54:C9:03:AC:64:EB:F2:91:B6:05:B9:C3:E6:80:29:1F:08:FB
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F432858480EA512369C3FE34D0AA17C90
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        103.109.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:12:36:9c:3f:e3:4d:0a:a1:7c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=83fbd6d1-06de-40f1-9e96-66d0fb98c281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:fb:a4:96:d5:68:7d:85:9a:ad:14:fa:30:
                    1d:48:1c:41:58:aa:18:eb:b4:03:29:b8:3f:fe:98:
                    9f:8b:4a:7a:a6:95:97:1a:dc:2d:41:a5:d4:be:f1:
                    64:e4:9c:73:27:8d:c8:b8:1a:f9:9b:42:a8:41:da:
                    e8:4b:7d:a3:92:d3:29:34:7d:34:98:d4:13:50:02:
                    92:3c:4c:9b:9b:3a:3e:98:c5:ea:6d:46:96:75:53:
                    ea:bb:03:01:42:76:70:3b:9c:1e:4c:e0:c0:ff:09:
                    c9:07:09:4e:fe:fa:70:30:81:51:1d:4c:1b:46:b3:
                    d7:5a:99:89:84:b2:20:75:ac:a6:65:36:e1:d6:ad:
                    5e:bc:d9:7c:7f:7b:88:47:c5:37:6d:45:b4:f4:9c:
                    2f:10:dc:5a:e4:ad:1a:31:73:ee:1d:13:39:b1:3b:
                    b3:29:ce:d7:d6:c2:63:5c:bd:ce:c6:01:59:29:59:
                    00:09:74:9a:b3:aa:b0:f3:cf:02:75:3a:68:56:cb:
                    f2:9a:d2:92:b3:54:5f:3e:f7:c0:ad:0e:2c:f1:e4:
                    72:84:d4:33:c1:a8:93:94:37:47:64:a4:90:a4:b0:
                    6f:eb:b2:6d:7c:85:bb:71:57:9b:f2:0f:a7:fd:f1:
                    2e:5a:8d:fa:9f:8c:0a:ed:64:f8:cf:23:b1:87:2b:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4F:54:C9:03:AC:64:EB:F2:91:B6:05:B9:C3:E6:80:29:1F:08:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a8:ae:cc:29:33:13:1f:3f:1c:79:10:1d:b3:9a:17:67:95:
         6a:29:07:a9:ba:e1:40:3c:fe:2a:73:a5:10:5d:8d:73:a9:12:
         dd:44:c6:cd:af:0f:35:a7:42:01:58:7b:66:fc:05:a8:ad:06:
         30:13:bd:4e:97:33:ce:c9:b8:67:57:88:b3:91:42:f5:61:da:
         3a:25:fe:6f:69:90:a5:ff:54:8b:81:fb:e8:56:3f:1f:ab:29:
         84:c8:b8:79:00:a4:92:d6:b7:d0:02:a9:3e:c7:25:03:83:71:
         78:d2:68:ff:f1:c4:2e:3c:9b:53:9e:4f:d2:79:67:c4:45:fe:
         1b:14:2d:a0:54:13:8c:62:cb:f0:79:4f:5a:3b:25:df:33:47:
         f2:a6:ab:e3:6d:9a:e0:8b:39:86:29:38:bb:53:8a:f5:d0:3a:
         ee:b6:c5:ad:d8:23:d0:0b:10:6d:aa:09:55:3e:f1:5f:65:9e:
         b0:c2:bd:06:b6:94:9a:d8:6f:d2:27:5d:ac:83:26:d9:06:72:
         1d:f7:7c:a1:c4:43:21:c6:38:57:5b:50:c3:35:16:c3:7e:6f:
         6c:a1:0d:5f:4c:e4:13:ff:4b:93:a3:2f:a9:14:5f:36:11:10:
         a4:8c:9a:3e:ea:00:c3:92:5a:77:24:4f:d8:c0:22:e4:51:d0:
         2a:1b:f0:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpRI2nD/jTQqhfJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NkMTVmZTEtOTZlOS00NWFkLTk2ZmQtMjIwNDFlMTFj
ZThkMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
ODNmYmQ2ZDEtMDZkZS00MGYxLTllOTYtNjZkMGZiOThjMjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwP7pJbVaH2Fmq0U+jAdSBxBWKoY67QDKbg/
/pifi0p6ppWXGtwtQaXUvvFk5JxzJ43IuBr5m0KoQdroS32jktMpNH00mNQTUAKS
PEybmzo+mMXqbUaWdVPquwMBQnZwO5weTODA/wnJBwlO/vpwMIFRHUwbRrPXWpmJ
hLIgdaymZTbh1q1evNl8f3uIR8U3bUW09JwvENxa5K0aMXPuHRM5sTuzKc7X1sJj
XL3OxgFZKVkACXSas6qw888CdTpoVsvymtKSs1RfPvfArQ4s8eRyhNQzwaiTlDdH
ZKSQpLBv67JtfIW7cVeb8g+n/fEuWo36n4wK7WT4zyOxhyvatwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBPVMkDrGTr8pG2BbnD5oApHwj7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jY2Qx
NWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0MWUxMWNlOGQvZGEwN2Y4YTItNDBjYS0z
YjZhLWFkMDItZTY3MTMxZDU4ZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2NkMTVmZTEtOTZlOS00NWFkLTk2
ZmQtMjIwNDFlMTFjZThkL2NjZDE1ZmUxLTk2ZTktNDVhZC05NmZkLTIyMDQxZTEx
Y2U4ZC5jcmwwHwYDVR0jBBgwFoAUF+48LZzKNILz25syzErq4kkNEMUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jY2QxNWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0
MWUxMWNlOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ21TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaorswpMxMfPxx5EB2zmhdnlWopB6m64UA8/ipzpRBdjXOpEt1Exs2v
DzWnQgFYe2b8BaitBjATvU6XM87JuGdXiLORQvVh2jol/m9pkKX/VIuB++hWPx+r
KYTIuHkApJLWt9ACqT7HJQODcXjSaP/xxC48m1OeT9J5Z8RF/hsULaBUE4xiy/B5
T1o7Jd8zR/Kmq+NtmuCLOYYpOLtTivXQOu62xa3YI9ALEG2qCVU+8V9lnrDCvQa2
lJrYb9InXayDJtkGch33fKHEQyHGOFdbUMM1FsN+b2yhDV9M5BP/S5OjL6kUXzYR
EKSMmj7qAMOSWnckT9jAIuRR0Cob8CE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:08 2025 by rpki-client