Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa
File:                     8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa (raw, json)
Hash identifier:          ftQdWY+DyFO/PxUO1kjWAzs5wajBkOI5UziL1I7ALvU=
Subject key identifier:   C8:CE:A3:C6:2F:FA:D0:22:EF:55:ED:81:7B:0A:93:D0:2D:E3:00:CB
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584902EC300F8E21CC1FECB1EA80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     19905
IP address blocks:        103.204.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:30:0f:8e:21:cc:1f:ec:b1:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=7b8da177-de86-4b28-b0aa-245d25d971e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3f:81:b7:de:29:8d:a2:50:59:46:5d:ce:49:
                    b9:1c:06:82:80:68:d8:00:90:d5:e0:94:d2:fc:e1:
                    59:10:59:c9:b5:7b:3e:d5:59:72:92:7b:4e:6f:09:
                    ef:a2:4e:e7:92:31:ad:a0:19:7e:ff:7d:ea:8e:57:
                    18:26:56:9d:b2:dc:28:4b:11:44:31:8b:d7:0f:56:
                    bc:f8:0c:e8:04:e1:05:1d:79:d4:fa:78:4a:d7:f4:
                    b9:2f:03:f9:76:52:8e:a6:ba:66:a5:e2:8c:e5:74:
                    60:76:45:ee:46:a3:5e:ef:23:35:c6:fa:e6:3d:a8:
                    3a:dc:dc:d6:28:70:59:b5:05:ca:71:a0:f3:17:e2:
                    db:39:4e:d7:4f:90:3a:9e:d1:bb:e0:9b:19:cf:5e:
                    2c:b7:16:9f:c3:a9:4f:25:d1:2b:81:b8:c9:83:9f:
                    b3:21:99:2c:cb:13:b8:bc:cd:ce:93:4a:5e:13:26:
                    0a:63:cf:ac:68:05:4d:6e:ff:ec:0f:38:5f:ca:6e:
                    98:ae:46:20:29:e9:18:c2:7d:78:d6:78:c4:79:47:
                    23:42:da:9a:e7:1c:dc:74:db:1e:63:83:3e:9c:b9:
                    33:9e:e6:14:4c:1a:cc:f6:9f:3f:81:9f:d9:ab:9f:
                    26:d4:6b:bf:90:aa:8a:04:83:3f:f3:1f:e3:0d:1f:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CE:A3:C6:2F:FA:D0:22:EF:55:ED:81:7B:0A:93:D0:2D:E3:00:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:02:d2:35:54:30:90:70:03:88:29:db:61:19:5e:3f:56:
         18:22:59:cf:32:07:a7:0d:fb:c4:59:77:68:67:31:78:45:7e:
         22:54:a8:e0:65:b1:fa:66:71:89:2b:83:88:15:fb:d0:8e:11:
         01:c5:9d:13:78:8a:1e:a5:cb:da:ef:4f:e8:73:59:0b:26:d4:
         d9:8c:7c:48:50:b1:13:9a:75:21:0c:ea:28:f3:e4:fb:25:f5:
         a4:e3:03:ef:5e:41:bf:18:6f:9b:eb:c7:a4:a6:08:69:6d:c1:
         d4:e9:0c:02:b8:5e:aa:50:c8:64:c9:4f:2e:fd:a2:da:be:6d:
         a2:6c:5f:4c:32:7f:e2:50:b6:fc:69:08:22:7a:56:b3:0d:3f:
         8f:d8:71:e5:c0:77:e4:92:af:3f:e7:96:4b:d9:e7:7e:95:2c:
         d2:e3:a4:05:ee:1c:56:57:e7:15:d1:ed:cb:c3:70:a3:95:bb:
         c8:ad:44:b2:58:2e:a9:8f:3b:c7:6e:28:2a:0a:1e:c8:81:17:
         21:cb:c3:b1:7d:93:0b:c3:40:e7:83:29:b6:4f:0d:26:4c:48:
         1b:98:d9:c3:64:2e:2e:fa:ec:5f:48:fc:57:29:8a:06:e9:7c:
         25:7f:bd:90:ec:3e:1a:44:f3:e9:78:5b:d4:b2:8c:98:74:95:
         e4:52:c5:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DAPjiHMH+yx6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
N2I4ZGExNzctZGU4Ni00YjI4LWIwYWEtMjQ1ZDI1ZDk3MWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT+Bt94pjaJQWUZdzkm5HAaCgGjYAJDV4JTS
/OFZEFnJtXs+1VlykntObwnvok7nkjGtoBl+/33qjlcYJladstwoSxFEMYvXD1a8
+AzoBOEFHXnU+nhK1/S5LwP5dlKOprpmpeKM5XRgdkXuRqNe7yM1xvrmPag63NzW
KHBZtQXKcaDzF+LbOU7XT5A6ntG74JsZz14stxafw6lPJdErgbjJg5+zIZksyxO4
vM3Ok0peEyYKY8+saAVNbv/sDzhfym6YrkYgKekYwn141njEeUcjQtqa5xzcdNse
Y4M+nLkznuYUTBrM9p8/gZ/Zq58m1Gu/kKqKBIM/8x/jDR+jdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMjOo8Yv+tAi71XtgXsKk9At4wDLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvOGFkN2ZhN2ItNzNhMS0z
Nzc4LWFkNzktM2Q5ZmVjNzYxYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8yAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOeAtI1VDCQcAOIKdthGV4/VhgiWc8yB6cN+8RZd2hnMXhFfiJUqOBl
sfpmcYkrg4gV+9COEQHFnRN4ih6ly9rvT+hzWQsm1NmMfEhQsROadSEM6ijz5Psl
9aTjA+9eQb8Yb5vrx6SmCGltwdTpDAK4XqpQyGTJTy79otq+baJsX0wyf+JQtvxp
CCJ6VrMNP4/YceXAd+SSrz/nlkvZ536VLNLjpAXuHFZX5xXR7cvDcKOVu8itRLJY
LqmPO8duKCoKHsiBFyHLw7F9kwvDQOeDKbZPDSZMSBuY2cNkLi767F9I/Fcpigbp
fCV/vZDsPhpE8+l4W9SyjJh0leRSxQQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:52 2025 by rpki-client