Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
File:                     da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa (raw, json)
Hash identifier:          HWEwxk/4PjoHKpBU8abMUHU8G70pr9nZvSRW8KQIDhQ=
Subject key identifier:   43:72:E0:45:97:C7:D8:FD:81:7F:7F:3D:CA:BF:27:2A:8C:00:D0:90
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F43285849CE9A5FB3F8DC1D023E094400
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        103.109.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5f:b3:f8:dc:1d:02:3e:09:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=05f2ec91-bd14-4733-a85c-abcef166177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:94:f8:f0:03:ef:a0:40:30:ed:1f:3b:63:
                    9f:93:29:49:7b:af:07:4e:22:5b:10:44:78:4f:d3:
                    29:1b:98:9c:8f:7c:b2:b1:0c:1c:7a:e6:65:fc:0f:
                    86:01:3c:12:28:c7:24:d9:fa:e5:03:d4:d7:f8:e2:
                    2f:10:3c:43:d5:f0:0c:70:39:29:b9:80:37:e0:7b:
                    e3:f7:6c:a6:53:a3:ae:a4:e9:b8:cc:4b:9e:d7:5e:
                    28:19:c7:91:21:dc:bc:35:4b:c1:e6:53:82:e9:be:
                    ca:65:7f:b1:9d:7c:47:7b:2f:20:7f:63:86:07:b9:
                    7e:7a:e4:48:e0:e3:d3:67:a4:76:ea:43:da:0a:0e:
                    d2:66:cf:f6:3d:65:f0:55:a7:9c:b3:f5:35:09:c4:
                    a6:b7:3f:45:4c:dc:d0:29:15:93:44:41:f6:42:ad:
                    de:fc:14:1b:63:ab:7a:db:ff:c9:57:35:6d:5b:4e:
                    b1:1b:6e:ae:e3:4c:3d:86:f9:07:25:60:01:4f:a9:
                    5a:45:9c:61:a5:bc:06:99:d1:d7:9a:cf:cd:2e:e5:
                    8f:e1:f4:91:4a:87:0e:74:4c:99:12:6b:b0:28:c8:
                    4e:84:63:2f:60:32:56:3a:c4:17:63:e5:88:d5:b0:
                    c2:3a:58:89:c6:a7:57:c3:dc:d5:73:7b:b6:0b:01:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:72:E0:45:97:C7:D8:FD:81:7F:7F:3D:CA:BF:27:2A:8C:00:D0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/da07f8a2-40ca-3b6a-ad02-e67131d58f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c5:a2:3b:c3:ae:5c:6e:ed:57:82:04:88:c9:9e:c5:63:db:
         6e:18:c8:ae:26:a1:fd:3f:ec:a9:f5:11:db:cf:28:1d:c9:ab:
         cd:dd:94:66:b2:74:dd:58:91:04:ba:13:2e:a6:5a:86:cd:d3:
         c9:66:95:1f:b5:a0:f0:b9:e3:f0:05:e7:32:15:7d:cb:a8:d0:
         10:66:d0:b0:07:94:eb:c2:89:31:df:5f:97:34:35:64:50:4d:
         d0:26:ed:3b:ad:89:08:75:2b:5a:2c:1b:8d:42:4b:7e:df:85:
         12:17:5b:e7:4c:b0:b8:dd:c8:74:b0:aa:6f:e3:46:82:0d:56:
         69:10:02:5b:14:4d:36:39:70:03:42:06:02:17:18:f3:62:43:
         5c:63:0f:18:52:65:6b:26:b6:cc:eb:b5:47:f5:a2:11:f2:92:
         11:1a:74:c1:17:bf:8a:13:3f:bb:77:fa:f8:14:01:dc:95:35:
         d7:52:e7:42:a5:74:68:e9:7e:cd:ff:dc:ed:f5:b5:6f:de:c3:
         3c:df:29:f1:c1:92:e7:44:61:be:22:cc:52:e8:7a:25:e7:84:
         1a:60:81:a4:a1:30:ea:87:20:04:c6:b7:77:14:c1:30:bc:64:
         2c:e1:a2:e7:1c:1e:e5:41:3a:92:9e:e3:81:00:95:59:c3:6c:
         7b:86:67:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOml+z+NwdAj4JRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NkMTVmZTEtOTZlOS00NWFkLTk2ZmQtMjIwNDFlMTFj
ZThkMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
MDVmMmVjOTEtYmQxNC00NzMzLWE4NWMtYWJjZWYxNjYxNzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOqU+PAD76BAMO0fO2OfkylJe68HTiJbEER4
T9MpG5icj3yysQwceuZl/A+GATwSKMck2frlA9TX+OIvEDxD1fAMcDkpuYA34Hvj
92ymU6OupOm4zEue114oGceRIdy8NUvB5lOC6b7KZX+xnXxHey8gf2OGB7l+euRI
4OPTZ6R26kPaCg7SZs/2PWXwVaecs/U1CcSmtz9FTNzQKRWTREH2Qq3e/BQbY6t6
2//JVzVtW06xG26u40w9hvkHJWABT6laRZxhpbwGmdHXms/NLuWP4fSRSocOdEyZ
EmuwKMhOhGMvYDJWOsQXY+WI1bDCOliJxqdXw9zVc3u2CwGiEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENy4EWXx9j9gX9/Pcq/JyqMANCQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jY2Qx
NWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0MWUxMWNlOGQvZGEwN2Y4YTItNDBjYS0z
YjZhLWFkMDItZTY3MTMxZDU4ZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2NkMTVmZTEtOTZlOS00NWFkLTk2
ZmQtMjIwNDFlMTFjZThkL2NjZDE1ZmUxLTk2ZTktNDVhZC05NmZkLTIyMDQxZTEx
Y2U4ZC5jcmwwHwYDVR0jBBgwFoAUF+48LZzKNILz25syzErq4kkNEMUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jY2QxNWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0
MWUxMWNlOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ21TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzFojvDrlxu7VeCBIjJnsVj224YyK4mof0/7Kn1EdvPKB3Jq83dlGay
dN1YkQS6Ey6mWobN08lmlR+1oPC54/AF5zIVfcuo0BBm0LAHlOvCiTHfX5c0NWRQ
TdAm7TutiQh1K1osG41CS37fhRIXW+dMsLjdyHSwqm/jRoINVmkQAlsUTTY5cANC
BgIXGPNiQ1xjDxhSZWsmtszrtUf1ohHykhEadMEXv4oTP7t3+vgUAdyVNddS50Kl
dGjpfs3/3O31tW/ewzzfKfHBkudEYb4izFLoeiXnhBpggaShMOqHIATGt3cUwTC8
ZCzhouccHuVBOpKe44EAlVnDbHuGZ2w=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:47:33 2025 by rpki-client