Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/dcc6e090-edd5-303b-98ef-1ad13c46b312.roa
File:                     dcc6e090-edd5-303b-98ef-1ad13c46b312.roa (raw, json)
Hash identifier:          sxZTFlcSwnBhRoYnQm23lUs6zF+Sye6D6TFVQfPA/DE=
Subject key identifier:   89:A2:7B:53:DC:9A:82:02:BC:42:4A:7E:F3:BA:51:2A:35:4A:66:90
Certificate issuer:       /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
Certificate serial:       010D0C9F43285849C7AE30D5BF451302601690C0
Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/dcc6e090-edd5-303b-98ef-1ad13c46b312.roa
Signing time:             Thu 08 May 2025 01:30:40 +0000
ROA not before:           Thu 08 May 2025 01:30:40 +0000
ROA not after:            Wed 06 Aug 2025 01:30:40 +0000
asID:                     135402
IP address blocks:        45.41.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:ae:30:d5:bf:45:13:02:60:16:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
        Validity
            Not Before: May  8 01:30:40 2025 GMT
            Not After : Aug  6 01:30:40 2025 GMT
        Subject: CN=5e77c3ac-e29c-4a2f-8e33-bfb343113cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:8d:de:67:1c:a9:83:76:3f:7c:f9:45:71:
                    e2:d1:c7:5b:b2:a9:71:db:b8:8a:7f:2e:eb:be:d6:
                    e0:58:33:7c:71:13:70:c4:58:8d:79:42:c3:40:53:
                    83:6b:88:ce:5b:0e:82:ea:1b:61:ff:93:01:9f:bb:
                    f9:06:95:d5:af:2b:66:b9:66:bc:db:25:0b:90:59:
                    c4:90:f5:ba:63:0b:cb:01:b6:b8:3e:7b:35:01:6d:
                    05:50:63:2a:06:56:b3:9b:08:d9:35:fa:b6:d0:b3:
                    3c:0c:c5:7e:0d:e0:07:00:cf:94:0c:d4:f0:58:74:
                    8a:f9:52:68:d8:b9:26:1e:d2:ba:cf:ed:ce:ed:0b:
                    27:ef:1e:ad:9c:95:77:38:1b:66:cd:e1:12:e8:2c:
                    0b:e8:b7:bf:4b:8b:62:b4:7b:27:cc:49:38:49:db:
                    d4:de:46:2f:eb:4c:21:5e:6c:52:a7:eb:72:4b:38:
                    74:ba:2f:b8:1a:9d:6c:bf:a2:1c:ab:8a:e9:5a:07:
                    bc:42:51:20:e9:d3:8f:81:22:2a:66:a1:33:b0:51:
                    90:23:d0:b1:78:ea:a4:40:35:2d:d0:9f:d8:e0:96:
                    3a:3d:5c:03:1d:62:82:f1:c9:eb:f0:c3:34:02:02:
                    9d:eb:17:3b:a9:1e:c4:3f:4a:1e:cc:b0:ad:52:39:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A2:7B:53:DC:9A:82:02:BC:42:4A:7E:F3:BA:51:2A:35:4A:66:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/dcc6e090-edd5-303b-98ef-1ad13c46b312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl

            X509v3 Authority Key Identifier:
                keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:68:65:48:c9:e2:f7:c9:06:62:ea:44:08:71:6a:91:73:
         71:dd:17:3b:53:21:e4:d5:36:c2:b0:54:27:6e:19:f7:29:1c:
         fa:8a:2d:dd:b1:1e:99:db:20:4b:de:e5:80:79:63:3c:26:51:
         c8:a1:06:7f:62:b0:21:48:2b:fd:4a:b2:a9:79:6b:0f:b3:1a:
         17:5a:45:db:c1:63:3b:3a:c5:78:ee:08:18:05:8c:dc:93:cb:
         2e:35:99:96:84:51:af:76:37:5a:4c:62:eb:3f:1c:8e:b3:c6:
         35:34:30:df:ce:c5:a0:78:82:13:f3:50:a3:da:ba:aa:2e:62:
         be:10:62:29:98:b3:26:f0:84:90:a2:97:df:dc:13:87:c5:26:
         8e:0d:36:a9:57:86:fe:94:66:6a:7a:02:71:21:5f:33:7d:b6:
         59:a4:97:28:05:85:e9:68:d5:b2:7a:40:fc:0b:76:d5:2d:e5:
         92:57:5b:38:7b:5b:ed:c0:36:4b:42:90:36:e6:59:f3:c7:48:
         ba:8c:c6:7f:52:0c:e8:dd:d9:40:2c:7f:14:40:d2:2e:41:4c:
         fe:99:c6:1e:97:1a:35:c8:45:2b:05:b4:02:91:88:ed:ac:6d:
         b2:a7:3d:9c:6b:88:28:d4:2b:d2:16:07:8a:6e:5b:3e:aa:99:
         34:11:b7:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHrjDVv0UTAmAWkMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRkMThkNTMtNTljOC00MjdmLTljMmYtMWY2MmVhYjk3
Y2IyMB4XDTI1MDUwODAxMzA0MFoXDTI1MDgwNjAxMzA0MFowLzEtMCsGA1UEAxMk
NWU3N2MzYWMtZTI5Yy00YTJmLThlMzMtYmZiMzQzMTEzY2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1aN3mccqYN2P3z5RXHi0cdbsqlx27iKfy7r
vtbgWDN8cRNwxFiNeULDQFODa4jOWw6C6hth/5MBn7v5BpXVrytmuWa82yULkFnE
kPW6YwvLAba4Pns1AW0FUGMqBlazmwjZNfq20LM8DMV+DeAHAM+UDNTwWHSK+VJo
2LkmHtK6z+3O7Qsn7x6tnJV3OBtmzeES6CwL6Le/S4titHsnzEk4SdvU3kYv60wh
XmxSp+tySzh0ui+4Gp1sv6Icq4rpWge8QlEg6dOPgSIqZqEzsFGQI9CxeOqkQDUt
0J/Y4JY6PVwDHWKC8cnr8MM0AgKd6xc7qR7EP0oezLCtUjmVvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImie1PcmoICvEJKfvO6USo1SmaQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQx
OGQ1My01OWM4LTQyN2YtOWMyZi0xZjYyZWFiOTdjYjIvZGNjNmUwOTAtZWRkNS0z
MDNiLTk4ZWYtMWFkMTNjNDZiMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmRkMThkNTMtNTljOC00MjdmLTlj
MmYtMWY2MmVhYjk3Y2IyLzJkZDE4ZDUzLTU5YzgtNDI3Zi05YzJmLTFmNjJlYWI5
N2NiMi5jcmwwHwYDVR0jBBgwFoAUCbrTA0tqLMF0QYmByxVbZWRC/80wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQxOGQ1My01OWM4LTQyN2YtOWMyZi0xZjYy
ZWFiOTdjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSk2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJTjaGVIyeL3yQZi6kQIcWqRc3HdFztTIeTVNsKwVCduGfcpHPqKLd2x
HpnbIEve5YB5YzwmUcihBn9isCFIK/1Ksql5aw+zGhdaRdvBYzs6xXjuCBgFjNyT
yy41mZaEUa92N1pMYus/HI6zxjU0MN/OxaB4ghPzUKPauqouYr4QYimYsybwhJCi
l9/cE4fFJo4NNqlXhv6UZmp6AnEhXzN9tlmklygFhelo1bJ6QPwLdtUt5ZJXWzh7
W+3ANktCkDbmWfPHSLqMxn9SDOjd2UAsfxRA0i5BTP6Zxh6XGjXIRSsFtAKRiO2s
bbKnPZxriCjUK9IWB4puWz6qmTQRt2A=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:15 2025 by rpki-client