Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/e30f92fd-d5a1-3bb1-806c-8929f756ac67.roa
File:                     e30f92fd-d5a1-3bb1-806c-8929f756ac67.roa (raw, json)
Hash identifier:          ESxmP59TxRKzFxq8rGd7qFTGMF4PWTmVURtMjvNvnjg=
Subject key identifier:   26:23:4B:5A:3B:F6:0D:C1:B5:A5:35:21:C0:C9:C6:CE:B9:BD:21:57
Certificate issuer:       /CN=910396e7-2d32-4040-a73d-ad686b8445b3
Certificate serial:       010D0C9F432858495C24281A57D89B29F9DA9A40
Authority key identifier: 4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/e30f92fd-d5a1-3bb1-806c-8929f756ac67.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     64541
IP address blocks:        110.172.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:28:1a:57:d8:9b:29:f9:da:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910396e7-2d32-4040-a73d-ad686b8445b3
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=757b1942-344c-4474-a431-3d313a6f844c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a9:ba:fe:e5:ff:df:28:83:2a:b5:5b:85:80:
                    77:42:9c:99:af:1c:33:e0:a9:48:12:2a:f9:10:e5:
                    55:66:4e:b5:26:49:6c:ae:3c:75:43:8a:57:25:c9:
                    92:03:3e:1e:46:8b:c2:b6:4b:26:5e:d8:f8:a8:74:
                    4b:69:54:26:36:f8:37:3f:0f:6b:38:63:f8:e4:a9:
                    c8:33:80:df:93:00:ee:ac:f5:4a:94:00:89:93:96:
                    85:87:bb:ac:aa:81:3b:41:e8:5e:29:6c:3d:2f:70:
                    d6:ec:da:6e:f1:fb:3b:27:4e:51:48:5b:71:06:2b:
                    2b:d0:78:65:e5:5e:26:14:d1:a5:97:ef:6e:6a:95:
                    a0:43:9c:35:6f:7e:02:c6:dd:9e:be:50:f8:32:2f:
                    ca:f5:ef:b8:6a:da:97:9c:64:0a:66:04:40:a3:b4:
                    92:72:dd:00:53:a8:c0:97:90:ef:0c:eb:7a:27:4e:
                    55:99:23:88:86:c1:54:2f:31:02:5d:c5:80:0f:06:
                    0a:62:57:8f:3f:9f:83:ca:4a:43:2d:29:44:d6:57:
                    c7:d9:fd:2c:4d:4f:fb:fb:6f:86:e8:1c:d3:9e:de:
                    b2:f4:ff:96:b8:cb:48:39:39:7e:6a:a7:78:f2:b0:
                    21:6d:13:91:ed:2d:62:5e:4a:cf:6b:4d:9d:98:73:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:23:4B:5A:3B:F6:0D:C1:B5:A5:35:21:C0:C9:C6:CE:B9:BD:21:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/e30f92fd-d5a1-3bb1-806c-8929f756ac67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:85:ea:c3:fd:d8:f3:6b:24:ed:ec:55:56:97:7b:ad:2b:ea:
         b1:e1:c2:85:10:78:0a:a8:91:a3:53:cc:45:4d:85:bb:46:f0:
         ab:37:f5:a1:e0:9a:6f:41:59:13:19:a8:18:29:2c:e8:67:24:
         1d:b6:67:be:b0:f6:0f:ae:8a:d4:a7:7c:df:5d:b5:e7:fe:f0:
         39:ac:15:9f:93:f5:23:1e:f1:d6:7c:3b:88:fa:9e:37:c9:a2:
         57:b2:2a:62:4b:62:f8:da:75:d3:db:d2:7e:a9:b5:0f:1d:c8:
         88:71:3c:77:fd:74:06:20:cb:70:b6:11:8a:ef:b4:ff:7e:f6:
         2a:9a:bc:3b:fd:a9:cd:d6:d2:1f:2b:71:79:a3:98:61:3b:4f:
         71:cb:1f:db:61:26:6f:55:87:fe:99:4c:ba:3e:f7:38:af:f2:
         1b:d6:55:17:51:7b:a2:ef:2d:fb:ac:c0:2e:3c:d2:63:c0:85:
         b8:22:c9:d9:b4:3c:d9:f4:c4:a2:43:b5:93:25:0e:33:81:19:
         fd:7b:62:e8:e1:ae:84:73:a5:58:33:22:ae:d8:bb:30:13:c1:
         72:43:43:f2:97:fe:5e:88:86:61:32:31:29:84:8c:32:dc:9d:
         6e:b8:a0:82:1d:a3:70:29:fb:88:e2:b2:4c:e6:87:4c:59:f9:
         3f:3e:4d:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJCgaV9ibKfnamkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEwMzk2ZTctMmQzMi00MDQwLWE3M2QtYWQ2ODZiODQ0
NWIzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
NzU3YjE5NDItMzQ0Yy00NDc0LWE0MzEtM2QzMTNhNmY4NDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqm6/uX/3yiDKrVbhYB3QpyZrxwz4KlIEir5
EOVVZk61Jklsrjx1Q4pXJcmSAz4eRovCtksmXtj4qHRLaVQmNvg3Pw9rOGP45KnI
M4DfkwDurPVKlACJk5aFh7usqoE7QeheKWw9L3DW7Npu8fs7J05RSFtxBisr0Hhl
5V4mFNGll+9uapWgQ5w1b34Cxt2evlD4Mi/K9e+4atqXnGQKZgRAo7SSct0AU6jA
l5DvDOt6J05VmSOIhsFULzECXcWADwYKYlePP5+DykpDLSlE1lfH2f0sTU/7+2+G
6BzTnt6y9P+WuMtIOTl+aqd48rAhbROR7S1iXkrPa02dmHOOzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYjS1o79g3BtaU1IcDJxs65vSFXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MTAz
OTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4NmI4NDQ1YjMvZTMwZjkyZmQtZDVhMS0z
YmIxLTgwNmMtODkyOWY3NTZhYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTEwMzk2ZTctMmQzMi00MDQwLWE3
M2QtYWQ2ODZiODQ0NWIzLzkxMDM5NmU3LTJkMzItNDA0MC1hNzNkLWFkNjg2Yjg0
NDViMy5jcmwwHwYDVR0jBBgwFoAUS0UWU6Iph5VS3e22r13PCiGEzTowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MTAzOTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4
NmI4NDQ1YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbqyVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWF6sP92PNrJO3sVVaXe60r6rHhwoUQeAqokaNTzEVNhbtG8Ks39aHg
mm9BWRMZqBgpLOhnJB22Z76w9g+uitSnfN9dtef+8DmsFZ+T9SMe8dZ8O4j6njfJ
oleyKmJLYvjaddPb0n6ptQ8dyIhxPHf9dAYgy3C2EYrvtP9+9iqavDv9qc3W0h8r
cXmjmGE7T3HLH9thJm9Vh/6ZTLo+9ziv8hvWVRdRe6LvLfuswC480mPAhbgiydm0
PNn0xKJDtZMlDjOBGf17YujhroRzpVgzIq7YuzATwXJDQ/KX/l6IhmEyMSmEjDLc
nW64oIIdo3Ap+4jiskzmh0xZ+T8+Teo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:39:56 2025 by rpki-client