Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/81264d5d-8441-322d-88fd-751de65028e9.roa
File:                     81264d5d-8441-322d-88fd-751de65028e9.roa (raw, json)
Hash identifier:          uPON02c5KZ8XNPDS/+6tAmbDkD0bNmL1GdCKmDRWuo4=
Subject key identifier:   24:35:DD:1D:79:12:45:1D:55:A0:7B:2E:DB:BF:D0:EB:8A:B6:94:6C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584855D59D0019C9C0EC47B45880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/81264d5d-8441-322d-88fd-751de65028e9.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     21769
IP address blocks:        103.56.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9d:00:19:c9:c0:ec:47:b4:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=e41ad48a-cce6-41e7-a8a4-b927e97a0d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:37:08:d3:9f:dd:e1:44:0e:2c:f5:67:d8:
                    60:11:a1:46:4a:a4:76:e7:b5:d2:83:31:58:b8:77:
                    c5:df:42:c3:d8:ee:54:3b:07:94:3b:1c:26:93:4f:
                    89:c8:91:0f:cf:8c:b1:2e:cf:75:8b:52:db:10:3f:
                    79:61:96:f6:d9:03:10:c9:ba:56:07:57:ae:ff:87:
                    f9:d8:09:61:f8:75:b2:db:49:cb:4e:eb:d6:74:94:
                    95:6d:52:e6:bb:33:5b:44:10:58:71:e9:5c:28:32:
                    07:3e:bb:ac:5e:30:24:a6:45:04:46:ce:9d:29:03:
                    5a:31:12:9f:89:05:93:9f:ec:8f:16:c7:7d:df:1d:
                    aa:2e:0a:78:2e:69:74:5d:3d:41:60:90:02:32:7f:
                    f1:a4:3a:92:6e:40:5f:bf:0b:f7:03:09:ab:5b:4a:
                    49:30:f6:68:5b:c3:05:5f:d9:29:d9:94:8f:43:6e:
                    a2:87:1a:19:96:8f:63:3a:7f:c4:9f:92:6b:d0:26:
                    af:02:5a:1a:2b:b4:e7:dd:58:85:7a:91:54:7e:ef:
                    f5:d6:25:a9:9d:a7:3b:f4:ae:b2:c8:79:55:e4:ee:
                    83:99:32:dd:f9:a6:4c:a7:5f:81:37:63:16:59:54:
                    9b:1a:df:17:65:9c:16:ed:7c:96:d2:5b:42:c2:52:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:35:DD:1D:79:12:45:1D:55:A0:7B:2E:DB:BF:D0:EB:8A:B6:94:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/81264d5d-8441-322d-88fd-751de65028e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:55:0a:7d:36:6c:b5:fe:1e:52:95:16:9c:46:a0:0d:fe:
         30:1e:f5:58:6a:0a:75:8c:d0:63:a6:78:e3:09:fe:0a:eb:b0:
         c7:ea:0b:e2:7c:07:7b:4f:69:fd:f1:84:37:00:90:55:3e:ee:
         29:01:5c:4f:b5:21:8a:19:a1:2a:c2:7e:99:d3:85:c4:31:4e:
         48:e9:b7:06:5d:0d:6b:f0:52:cb:a3:47:ce:bb:86:e6:a0:b3:
         6c:db:f2:66:79:cb:6a:8f:5c:36:b1:cd:16:2d:9e:63:fd:7a:
         74:0f:42:2d:22:7b:df:0b:3a:a5:89:4a:7a:0b:33:93:51:24:
         a8:31:cd:cd:f5:ec:3c:da:5b:22:80:75:b3:82:1c:52:1c:31:
         26:96:71:81:89:2e:4a:6e:84:60:9e:41:c8:e8:ab:8c:fd:6c:
         eb:64:22:f8:b4:70:7e:cc:4d:84:9d:34:85:30:0f:b9:3b:4f:
         ef:e4:0d:38:68:c0:85:68:ad:be:fa:91:f4:88:b5:db:06:c9:
         79:7e:28:6f:6d:2d:94:80:bd:1e:43:d1:c2:c5:1d:12:b6:30:
         4b:3b:77:03:25:82:4b:04:6f:84:5a:e8:21:33:5f:3f:0e:0b:
         9e:f2:ef:d9:47:78:26:d0:bf:a8:8c:cd:6a:5b:d1:eb:74:b8:
         a0:06:55:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1Z0AGcnA7Ee0WIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZTQxYWQ0OGEtY2NlNi00MWU3LWE4YTQtYjkyN2U5N2EwZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7c3CNOf3eFEDiz1Z9hgEaFGSqR257XSgzFY
uHfF30LD2O5UOweUOxwmk0+JyJEPz4yxLs91i1LbED95YZb22QMQybpWB1eu/4f5
2Alh+HWy20nLTuvWdJSVbVLmuzNbRBBYcelcKDIHPrusXjAkpkUERs6dKQNaMRKf
iQWTn+yPFsd93x2qLgp4Lml0XT1BYJACMn/xpDqSbkBfvwv3AwmrW0pJMPZoW8MF
X9kp2ZSPQ26ihxoZlo9jOn/En5Jr0CavAloaK7Tn3ViFepFUfu/11iWpnac79K6y
yHlV5O6DmTLd+aZMp1+BN2MWWVSbGt8XZZwW7XyW0ltCwlLhbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQ13R15EkUdVaB7Ltu/0OuKtpRsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvODEyNjRkNWQtODQ0MS0z
MjJkLTg4ZmQtNzUxZGU2NTAyOGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZzhWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDIVQp9Nmy1/h5SlRacRqAN/jAe9VhqCnWM0GOmeOMJ/grrsMfqC+J8
B3tPaf3xhDcAkFU+7ikBXE+1IYoZoSrCfpnThcQxTkjptwZdDWvwUsujR867huag
s2zb8mZ5y2qPXDaxzRYtnmP9enQPQi0ie98LOqWJSnoLM5NRJKgxzc317DzaWyKA
dbOCHFIcMSaWcYGJLkpuhGCeQcjoq4z9bOtkIvi0cH7MTYSdNIUwD7k7T+/kDTho
wIVorb76kfSItdsGyXl+KG9tLZSAvR5D0cLFHRK2MEs7dwMlgksEb4Ra6CEzXz8O
C57y79lHeCbQv6iMzWpb0et0uKAGVcc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:35 2025 by rpki-client