Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/56784652-e0a7-3927-8131-5cdcc8c8b57d.roa
File:                     56784652-e0a7-3927-8131-5cdcc8c8b57d.roa (raw, json)
Hash identifier:          zGXTOv5hsYjc7JQioaQ0n2bXg51aRLdVPQ/UIf7yza8=
Subject key identifier:   18:5B:5C:52:90:60:D8:E1:02:1F:7F:21:CA:E4:2E:1D:92:EF:0A:E7
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584953C41C46012DBF2A92098800
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/56784652-e0a7-3927-8131-5cdcc8c8b57d.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     60558
IP address blocks:        103.67.200.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:1c:46:01:2d:bf:2a:92:09:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=ba158c6e-0135-4f5d-a23b-dfe28affe079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:66:a9:48:50:3e:33:64:69:67:a1:f1:f6:
                    39:03:ca:a7:a0:78:cf:b3:71:57:43:5f:66:1e:c0:
                    ab:87:aa:31:38:88:e7:86:74:62:3d:cd:55:8a:3f:
                    23:c5:ee:58:3f:d9:37:ad:a8:fa:3e:34:14:75:95:
                    a7:14:7e:ff:57:ce:fd:8e:f4:1b:e6:af:1a:20:ba:
                    a4:3c:b7:1f:ad:60:82:2d:7e:6a:a9:0e:e9:86:df:
                    10:c5:e9:b0:93:a9:61:c0:9f:29:27:05:b6:8a:e4:
                    35:76:3f:63:50:8d:1a:20:c4:14:df:ca:de:7f:6d:
                    2b:99:78:42:46:fa:fa:d7:8c:5a:93:6b:ad:19:77:
                    09:9b:62:63:6a:8e:8e:a7:7b:f6:6a:a8:1b:2b:9a:
                    f4:f1:fe:b6:10:15:cd:04:c9:39:01:c4:f4:78:e2:
                    a5:01:cb:1c:92:f8:35:f8:b2:5e:19:21:68:17:cb:
                    c9:31:33:fb:f9:c7:77:f0:8e:b0:7c:a7:22:cb:42:
                    3f:75:2d:38:1b:39:6d:24:ba:57:87:bb:55:38:d1:
                    ce:bc:25:c9:0b:78:95:dd:19:a3:26:54:6b:67:eb:
                    6d:3e:f2:b7:2d:58:bd:71:11:c9:15:da:32:10:5a:
                    dc:78:be:90:87:c9:b4:5d:3d:16:1f:ae:3f:05:ea:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5B:5C:52:90:60:D8:E1:02:1F:7F:21:CA:E4:2E:1D:92:EF:0A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/56784652-e0a7-3927-8131-5cdcc8c8b57d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:b8:1b:62:9c:a7:c4:5b:fc:c5:0f:a9:13:f9:85:78:11:
         be:f0:eb:bd:55:8c:9e:c6:03:9c:8f:18:6b:2c:61:91:a3:7f:
         06:49:b9:2a:32:12:92:ba:cd:de:ae:2e:9b:7a:0c:b7:5b:02:
         1c:94:c1:a3:58:42:57:d6:3a:23:7e:4c:9f:69:97:48:b9:45:
         1d:66:61:9e:8d:71:8e:b2:3f:10:b9:5a:fa:0a:e7:c3:1d:06:
         21:cc:09:0a:4b:29:b6:75:d1:36:1e:9d:99:26:37:0e:2f:22:
         b4:29:bd:ff:84:5f:21:4d:4d:4d:1d:85:a7:e3:4a:2c:a2:7d:
         ee:27:7a:f8:d1:ed:a5:28:62:ff:a6:57:35:7e:63:57:da:09:
         55:38:08:f1:33:87:91:e3:c9:db:22:f8:c8:52:b8:a4:f2:62:
         f1:f8:24:98:29:d7:b2:49:43:a9:87:22:1e:bc:66:d9:82:4b:
         a3:8e:de:c5:37:41:31:ac:24:89:93:b0:6f:aa:0b:6f:ac:0c:
         a7:ee:49:04:11:cc:e4:e0:aa:c3:3c:b1:af:06:38:9d:75:41:
         ba:0c:0b:0f:90:68:70:d9:cf:eb:ba:ab:1f:5c:0b:69:a6:fb:
         a5:21:c5:ac:25:7d:61:ee:20:3c:a1:e6:47:b4:f2:26:3f:83:
         81:22:9c:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBxGAS2/KpIJiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YmExNThjNmUtMDEzNS00ZjVkLWEyM2ItZGZlMjhhZmZlMDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmFmqUhQPjNkaWeh8fY5A8qnoHjPs3FXQ19m
HsCrh6oxOIjnhnRiPc1Vij8jxe5YP9k3raj6PjQUdZWnFH7/V879jvQb5q8aILqk
PLcfrWCCLX5qqQ7pht8Qxemwk6lhwJ8pJwW2iuQ1dj9jUI0aIMQU38ref20rmXhC
Rvr614xak2utGXcJm2Jjao6Op3v2aqgbK5r08f62EBXNBMk5AcT0eOKlAcsckvg1
+LJeGSFoF8vJMTP7+cd38I6wfKciy0I/dS04GzltJLpXh7tVONHOvCXJC3iV3Rmj
JlRrZ+ttPvK3LVi9cRHJFdoyEFrceL6Qh8m0XT0WH64/BepslwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhbXFKQYNjhAh9/IcrkLh2S7wrnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNTY3ODQ2NTItZTBhNy0z
OTI3LTgxMzEtNWNkY2M4YzhiNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0PIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAy8uBtinKfEW/zFD6kT+YV4Eb7w671VjJ7GA5yPGGssYZGjfwZJuSoy
EpK6zd6uLpt6DLdbAhyUwaNYQlfWOiN+TJ9pl0i5RR1mYZ6NcY6yPxC5WvoK58Md
BiHMCQpLKbZ10TYenZkmNw4vIrQpvf+EXyFNTU0dhafjSiyife4nevjR7aUoYv+m
VzV+Y1faCVU4CPEzh5Hjydsi+MhSuKTyYvH4JJgp17JJQ6mHIh68ZtmCS6OO3sU3
QTGsJImTsG+qC2+sDKfuSQQRzOTgqsM8sa8GOJ11QboMCw+QaHDZz+u6qx9cC2mm
+6UhxawlfWHuIDyh5ke08iY/g4EinOU=
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:34:05 2025 by rpki-client