Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53f53f3e-52d0-3160-85a6-218a002fc7d3.roa
File:                     53f53f3e-52d0-3160-85a6-218a002fc7d3.roa (raw, json)
Hash identifier:          WuNjsRBUM7G5ZHx4qHT13oXpfZ9zqOhY7IVBa/c+ajA=
Subject key identifier:   37:1C:FB:D6:EF:2E:79:41:5E:B1:D5:78:05:03:27:24:45:33:89:41
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D211015787AE276E08C1AE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53f53f3e-52d0-3160-85a6-218a002fc7d3.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     22773
IP address blocks:        166.102.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:01:57:87:ae:27:6e:08:c1:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=355f3183-96c6-433a-a74d-d02b0a666ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:cb:2b:e5:fd:38:3b:40:08:d3:6b:00:3c:
                    f7:ed:0c:ff:66:5a:75:d3:85:1d:05:ae:f3:71:cf:
                    19:6d:d0:09:32:3e:d9:f3:c5:0e:8d:33:b4:0c:8f:
                    58:51:f5:46:ff:8c:de:2b:3a:7f:8a:13:8d:3d:ce:
                    d7:fd:cb:bc:c1:af:d6:ba:17:84:6c:71:5a:d8:f8:
                    de:2f:c3:78:24:cd:5c:6c:ff:cc:9d:09:a9:c9:9e:
                    cd:16:4b:fa:03:c5:7e:f5:ae:cd:f0:fe:13:35:dd:
                    c8:d4:e7:19:e5:34:ed:62:48:87:80:50:ef:4a:dd:
                    e8:40:4b:93:a6:bd:f5:6f:6e:32:b3:95:22:eb:a9:
                    98:78:13:1a:27:5f:ea:50:15:e4:e8:d2:ee:f9:21:
                    df:b7:15:cd:e7:37:09:59:12:ee:94:1d:27:75:c5:
                    61:4a:70:cd:4a:5e:8a:23:9d:af:72:34:0b:c3:9c:
                    82:ab:d2:7c:3a:35:99:c7:ce:2b:90:23:63:d7:62:
                    e1:d1:5d:bb:02:69:8a:5a:c8:7b:fe:79:d0:eb:a1:
                    37:6c:55:92:db:c5:89:d3:f4:7c:0e:d5:c6:5a:aa:
                    a0:76:73:7e:58:3a:61:de:1f:0c:30:25:df:ce:ec:
                    7f:eb:e1:98:94:a8:1b:7a:0b:89:13:e9:4c:ff:87:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1C:FB:D6:EF:2E:79:41:5E:B1:D5:78:05:03:27:24:45:33:89:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53f53f3e-52d0-3160-85a6-218a002fc7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.102.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:da:be:cb:f5:69:89:8a:b3:d0:c0:2a:81:4a:ad:9f:1f:
         28:4a:40:97:24:47:c1:33:11:67:89:0b:87:b9:64:03:f9:5f:
         a5:af:88:d0:ab:48:de:30:9d:b8:38:88:33:1e:0a:3a:53:54:
         5c:dd:d1:2d:fe:6a:9c:ad:c9:9f:3e:ef:b7:05:ea:3c:02:fc:
         e7:fe:6a:66:ad:59:dc:c4:24:6a:bf:55:88:0c:66:bb:21:5f:
         63:bb:60:4f:1a:43:70:56:cc:86:b2:92:7d:d6:ad:3a:9b:0e:
         cf:98:4c:bf:1f:52:99:38:d0:1c:ad:52:91:b1:65:e2:05:97:
         db:4e:c9:2d:7e:0d:f2:9f:93:7e:9b:15:08:02:bc:d9:c5:86:
         5e:01:76:66:66:fa:90:97:79:3b:97:83:39:a2:1c:16:78:b3:
         7d:4f:17:1b:6b:13:45:84:08:fe:dc:fa:bc:66:71:98:42:6a:
         fa:f8:be:4d:7e:10:c0:0c:67:e6:37:a3:02:6d:fc:7e:d7:67:
         a7:55:e4:4e:2c:c6:d5:49:cc:b1:d8:fb:82:12:31:4a:9f:1e:
         de:70:c2:5f:97:71:1a:bd:93:35:a3:bb:dc:0f:8e:f8:81:c4:
         83:4d:29:b1:d1:25:46:6e:b7:42:38:83:91:cb:29:8c:01:3a:
         5c:cf:6f:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQFXh64nbgjBrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
MzU1ZjMxODMtOTZjNi00MzNhLWE3NGQtZDAyYjBhNjY2YWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvzLK+X9ODtACNNrADz37Qz/Zlp104UdBa7z
cc8ZbdAJMj7Z88UOjTO0DI9YUfVG/4zeKzp/ihONPc7X/cu8wa/WuheEbHFa2Pje
L8N4JM1cbP/MnQmpyZ7NFkv6A8V+9a7N8P4TNd3I1OcZ5TTtYkiHgFDvSt3oQEuT
pr31b24ys5Ui66mYeBMaJ1/qUBXk6NLu+SHftxXN5zcJWRLulB0ndcVhSnDNSl6K
I52vcjQLw5yCq9J8OjWZx84rkCNj12Lh0V27AmmKWsh7/nnQ66E3bFWS28WJ0/R8
DtXGWqqgdnN+WDph3h8MMCXfzux/6+GYlKgbeguJE+lM/4d2qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcc+9bvLnlBXrHVeAUDJyRFM4lBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTNmNTNmM2UtNTJkMC0z
MTYwLTg1YTYtMjE4YTAwMmZjN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmYJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0v2r7L9WmJirPQwCqBSq2fHyhKQJckR8EzEWeJC4e5ZAP5X6WviNCr
SN4wnbg4iDMeCjpTVFzd0S3+apytyZ8+77cF6jwC/Of+amatWdzEJGq/VYgMZrsh
X2O7YE8aQ3BWzIaykn3WrTqbDs+YTL8fUpk40BytUpGxZeIFl9tOyS1+DfKfk36b
FQgCvNnFhl4BdmZm+pCXeTuXgzmiHBZ4s31PFxtrE0WECP7c+rxmcZhCavr4vk1+
EMAMZ+Y3owJt/H7XZ6dV5E4sxtVJzLHY+4ISMUqfHt5wwl+XcRq9kzWju9wPjviB
xINNKbHRJUZut0I4g5HLKYwBOlzPb2U=
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:00 2025 by rpki-client