Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/99d2ed0c-4a14-3830-be28-7be64d0706c0.roa
File:                     99d2ed0c-4a14-3830-be28-7be64d0706c0.roa (raw, json)
Hash identifier:          2LRzQFAjJrQQx2wtVqRlgDWf40MCl2q2+0SoKhG8pto=
Subject key identifier:   61:BE:A8:B5:5A:DB:D1:93:FC:C7:86:52:1E:D5:56:F4:D6:15:4B:69
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848D21137CFFC44297578F64780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/99d2ed0c-4a14-3830-be28-7be64d0706c0.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     16276
IP address blocks:        180.149.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:37:cf:fc:44:29:75:78:f6:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=bbb5205d-cbd0-40c0-8e54-354270626cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:23:a6:7b:83:bc:fe:c4:4b:8b:16:23:a9:b5:
                    69:78:38:8c:44:3d:c8:5a:e5:b1:48:98:5f:b6:0a:
                    7e:58:ee:03:f9:a8:56:19:53:df:aa:6c:40:97:fe:
                    84:45:bc:b2:49:73:0c:d0:e4:d6:48:5b:8f:d8:47:
                    43:20:2f:d8:a9:21:61:28:25:86:d2:69:54:d4:66:
                    a7:19:cb:da:df:82:cf:02:4b:16:e0:c9:11:43:e6:
                    e3:ef:a6:4d:ae:81:60:04:96:f5:5a:fb:9d:e7:6e:
                    ea:52:10:04:a9:15:55:5b:64:2c:7e:82:6c:8b:7a:
                    3e:85:8c:64:47:f4:57:a0:8e:f1:9a:ae:81:d3:f7:
                    17:72:51:c8:20:c0:82:a7:11:c7:4b:a8:0a:11:1b:
                    ab:db:71:bb:fe:37:54:54:83:a3:c2:08:6a:79:e5:
                    85:33:f3:43:bb:82:b6:67:80:53:14:77:eb:75:a4:
                    22:2f:ea:dd:14:14:ff:c7:ab:f6:af:2d:fb:95:1f:
                    b7:de:5e:3c:93:9e:5b:84:15:50:55:b0:ce:3d:3c:
                    3b:be:b2:f1:f9:6e:09:0f:87:54:67:ad:8e:e9:24:
                    e3:8e:1b:7b:04:fd:a9:73:81:f3:0e:e3:e5:18:a9:
                    47:bf:3e:91:e0:43:5f:9c:6c:6c:fc:6f:9e:73:29:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BE:A8:B5:5A:DB:D1:93:FC:C7:86:52:1E:D5:56:F4:D6:15:4B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/99d2ed0c-4a14-3830-be28-7be64d0706c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:46:1d:ef:30:b3:4c:29:44:87:66:f4:84:03:df:56:42:cc:
         d0:2e:63:a9:fb:c9:ee:84:cc:5f:4b:07:75:6b:69:1c:9c:de:
         71:ba:51:b6:04:7a:f6:a7:52:f9:b8:ab:28:06:d8:bf:c6:cc:
         43:87:65:64:79:c4:1d:41:80:c7:27:9f:f7:e6:32:1f:e1:a8:
         eb:3c:75:97:1e:19:98:1d:cc:00:eb:fc:9b:60:91:e7:3d:47:
         40:94:e2:b5:51:38:4e:91:09:61:e3:3d:0f:7a:bb:18:92:d2:
         d8:41:ed:3b:e2:36:8d:3a:52:0f:ef:fb:ca:cc:51:27:7f:e2:
         46:e1:82:86:1f:bd:de:bd:c2:fa:81:fc:94:86:c0:bc:b8:94:
         4a:e3:c8:88:c2:42:cc:13:f1:fe:e8:3d:ce:e8:5c:fc:b8:0a:
         fd:e8:29:90:52:b9:34:e3:59:10:e3:57:e3:5b:a1:f0:29:cb:
         ca:49:8b:9e:c0:f9:75:ee:d8:09:b1:f6:a9:c6:23:86:bc:2f:
         5d:2c:9d:4d:6e:00:ce:03:63:dd:7e:5f:b1:8f:1b:13:4f:c5:
         b3:01:cd:32:24:1c:00:9c:86:2c:2b:33:b9:25:4b:3e:97:59:
         be:8d:cb:17:e4:9d:d2:12:13:0e:0c:a7:5c:c2:bb:47:6d:7f:
         9d:7c:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 20:08:07 2025 by rpki-client