Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
File:                     da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa (raw, json)
Hash identifier:          ARlqeVAtxNbNk5eqhkAAxwoIy+MbVrSfPaa3wDAWVuA=
Subject key identifier:   37:CB:76:5A:70:53:5F:D5:A3:01:35:89:8A:29:C2:E3:59:9D:27:7D
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F43285848EF613C943C1C491970FF3300
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        103.109.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3c:94:3c:1c:49:19:70:ff:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=41aecf7b-66be-4454-848e-ea0977a8ca6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:68:4f:2a:96:17:5c:5f:60:53:74:d6:fd:
                    df:ae:12:11:dd:94:de:dc:59:ec:91:2c:21:b9:39:
                    b0:5c:8b:3d:01:2c:62:5e:39:fc:f4:0e:d6:45:e9:
                    8f:4c:57:25:78:fb:41:fa:e9:91:03:c6:be:8e:dd:
                    a0:a3:3e:92:61:8e:7b:a4:52:99:f4:ed:ed:01:3a:
                    3c:11:89:83:86:0e:76:c6:c3:aa:f8:6b:cd:fa:fa:
                    2f:9f:29:66:d1:f4:9f:8f:81:f4:1a:5f:e3:e8:ff:
                    fa:ba:13:7a:3d:a6:14:28:9b:b5:5d:6f:a3:87:3d:
                    ab:10:7d:cf:cd:6e:a8:74:bd:54:04:1e:bc:61:8c:
                    dd:a9:d7:df:f1:3c:92:b3:b5:1c:83:f6:79:ea:38:
                    0b:70:25:4f:78:5c:22:4c:f9:56:56:0b:74:12:b2:
                    1a:1a:a0:79:28:1c:2b:9e:a4:e4:ba:22:e5:68:71:
                    71:0b:6e:7f:2a:98:a8:ea:72:93:fc:35:35:b1:fc:
                    18:82:4b:6d:a2:52:dc:c0:85:ea:cb:b2:2d:18:cf:
                    30:0c:5e:17:92:df:3d:0f:2c:d7:3c:25:13:e0:56:
                    a3:ba:27:eb:d8:ee:d3:4e:dd:5c:ee:53:c3:23:cc:
                    25:91:e8:56:ac:c4:9b:2c:c8:e6:85:6c:49:bd:99:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CB:76:5A:70:53:5F:D5:A3:01:35:89:8A:29:C2:E3:59:9D:27:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:39:a8:72:63:83:28:a9:fa:ae:ca:a7:14:12:c1:23:b8:9f:
         d8:dc:b2:66:99:ef:6f:82:c8:ad:85:ed:59:1e:a6:6f:56:05:
         b7:ef:cd:c0:46:7b:55:ac:c3:95:60:b0:a7:18:17:53:fe:be:
         7a:28:1d:1a:13:26:3d:5b:fd:34:10:5b:c7:fe:b7:5b:a0:ea:
         6f:ba:e3:44:ee:3f:0a:7e:63:2e:c3:0f:bf:3c:c5:e9:11:27:
         f8:ac:e5:3d:82:07:e9:e8:83:1a:ea:6a:a8:5b:bd:c6:31:29:
         4a:97:97:78:a4:b2:5e:1a:9a:c5:9f:1c:53:6e:b2:c6:60:e4:
         ef:cf:65:f7:6a:55:82:46:66:6d:72:ba:27:55:e0:a6:c1:e9:
         bd:0c:81:51:f2:59:fc:d6:4f:04:20:e9:f3:71:73:69:b4:17:
         90:8d:cd:f7:2b:48:27:92:30:43:85:cb:97:d9:d4:cb:d4:18:
         33:8a:fa:9a:13:05:da:a5:37:66:df:ad:50:d8:e1:aa:06:61:
         2c:c1:96:e5:e0:79:3c:9a:65:78:aa:5f:25:43:57:36:5e:a3:
         e1:a2:7e:b9:0a:e6:4e:aa:c9:ff:40:80:be:b4:65:1c:ee:d9:
         c8:b3:61:33:9a:ef:68:51:a3:ac:82:63:7d:8c:2e:18:f1:0d:
         cc:7c:3e:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTyUPBxJGXD/MwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NkMTVmZTEtOTZlOS00NWFkLTk2ZmQtMjIwNDFlMTFj
ZThkMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NDFhZWNmN2ItNjZiZS00NDU0LTg0OGUtZWEwOTc3YThjYTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoloTyqWF1xfYFN01v3frhIR3ZTe3FnskSwh
uTmwXIs9ASxiXjn89A7WRemPTFclePtB+umRA8a+jt2goz6SYY57pFKZ9O3tATo8
EYmDhg52xsOq+GvN+vovnylm0fSfj4H0Gl/j6P/6uhN6PaYUKJu1XW+jhz2rEH3P
zW6odL1UBB68YYzdqdff8TySs7Ucg/Z56jgLcCVPeFwiTPlWVgt0ErIaGqB5KBwr
nqTkuiLlaHFxC25/Kpio6nKT/DU1sfwYgkttolLcwIXqy7ItGM8wDF4Xkt89DyzX
PCUT4Fajuifr2O7TTt1c7lPDI8wlkehWrMSbLMjmhWxJvZmfcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfLdlpwU1/VowE1iYopwuNZnSd9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jY2Qx
NWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0MWUxMWNlOGQvZGEwN2Y4YTItNDBjYS0z
YjZhLWFkMDItZTY3MTMxZDU4ZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2NkMTVmZTEtOTZlOS00NWFkLTk2
ZmQtMjIwNDFlMTFjZThkL2NjZDE1ZmUxLTk2ZTktNDVhZC05NmZkLTIyMDQxZTEx
Y2U4ZC5jcmwwHwYDVR0jBBgwFoAUF+48LZzKNILz25syzErq4kkNEMUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jY2QxNWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0
MWUxMWNlOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ21TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAE5qHJjgyip+q7KpxQSwSO4n9jcsmaZ72+CyK2F7Vkepm9WBbfvzcBG
e1Wsw5VgsKcYF1P+vnooHRoTJj1b/TQQW8f+t1ug6m+640TuPwp+Yy7DD788xekR
J/is5T2CB+nogxrqaqhbvcYxKUqXl3iksl4amsWfHFNussZg5O/PZfdqVYJGZm1y
uidV4KbB6b0MgVHyWfzWTwQg6fNxc2m0F5CNzfcrSCeSMEOFy5fZ1MvUGDOK+poT
BdqlN2bfrVDY4aoGYSzBluXgeTyaZXiqXyVDVzZeo+GifrkK5k6qyf9AgL60ZRzu
2cizYTOa72hRo6yCY32MLhjxDcx8Ps0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:28:48 2025 by rpki-client