Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/abbda74d-0a61-31ad-bb81-b8324303cd4a.roa
File:                     abbda74d-0a61-31ad-bb81-b8324303cd4a.roa (raw, json)
Hash identifier:          5Xrwl07aiPQvmJMdMuc9DI+IdRa50/GYMxAv1CrQA9U=
Subject key identifier:   DC:1D:C8:29:F9:83:E3:DC:E8:C8:1B:C4:99:D7:C7:9C:15:10:A4:D2
Certificate issuer:       /CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
Certificate serial:       010D0C9F43285849CE9A5F877FDF96E581D10140
Authority key identifier: 17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/abbda74d-0a61-31ad-bb81-b8324303cd4a.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        103.109.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5f:87:7f:df:96:e5:81:d1:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=18a7e4c4-7565-47ca-8a3b-a05c43846007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:19:e2:4f:46:59:81:01:e9:e4:96:ba:c5:
                    2f:b8:a5:b3:e7:6b:c8:34:01:2f:4f:25:87:3a:76:
                    c4:14:f1:cf:41:05:14:b8:a3:08:2d:c2:c6:e0:ba:
                    a1:8b:00:a2:a5:3c:e3:34:92:8b:24:50:e1:fb:b9:
                    be:f6:10:c2:7f:7f:7a:3d:15:2d:78:8f:98:fb:09:
                    33:6a:92:9a:dd:79:0a:90:d8:8f:05:a8:f1:f9:6d:
                    2d:9b:6d:98:15:87:c3:6b:7e:a8:15:ff:47:29:3f:
                    26:20:86:c2:a0:e3:13:ac:f9:34:78:76:1d:ef:da:
                    f8:4c:63:b1:70:0a:a8:9c:21:ce:79:a7:75:10:14:
                    cb:72:ef:8b:52:c2:ea:a7:8a:c0:b5:1f:5a:47:e2:
                    e8:e3:e3:ae:e1:02:c1:69:cc:a7:e4:5d:e8:dd:f0:
                    0e:85:68:0a:02:b3:6e:1c:a7:b2:d8:d0:25:fa:f6:
                    03:57:64:1b:0f:fd:e5:84:99:fe:35:00:30:41:40:
                    06:30:a9:fd:0e:85:d1:a5:f5:8b:1c:f3:f0:5f:9e:
                    2d:c8:18:4e:92:3c:82:23:59:25:d2:85:51:9b:a0:
                    10:96:2f:7c:02:53:2c:41:26:db:98:15:04:ed:0b:
                    34:ca:91:50:4f:02:42:ad:e2:4d:8d:88:7b:3c:0b:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1D:C8:29:F9:83:E3:DC:E8:C8:1B:C4:99:D7:C7:9C:15:10:A4:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/abbda74d-0a61-31ad-bb81-b8324303cd4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.crl

            X509v3 Authority Key Identifier:
                keyid:17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:2b:8e:09:66:55:c3:39:14:fe:14:34:91:09:6d:1c:24:7e:
         e6:0c:45:c0:fc:38:58:d3:e0:c5:76:76:90:86:48:c0:09:71:
         5f:2c:39:34:f6:ba:8a:d9:a2:0e:c5:72:62:98:02:de:40:45:
         15:2a:9f:34:a5:1b:30:7e:3c:26:e0:12:fb:f5:86:fa:b5:c6:
         5a:02:db:77:f4:b9:17:a2:fe:d1:66:9e:d8:af:7d:81:3b:f2:
         2d:1c:5e:ef:60:f9:c1:be:d9:ee:16:f9:80:01:72:00:e0:9f:
         68:62:22:7f:00:81:35:54:15:be:af:d3:a5:92:27:df:07:f7:
         ad:56:58:81:a2:f9:13:9e:a1:ed:b3:8e:2d:04:3b:30:fb:5b:
         5d:2a:0b:9f:9b:31:09:3e:5c:d7:2c:74:9e:9a:75:a3:4c:88:
         23:c3:c4:12:40:59:c9:3f:1b:bc:78:c7:38:d3:49:f9:7e:4f:
         f2:a6:22:fb:fe:d0:da:71:e7:59:c5:a9:86:b5:84:f5:eb:9d:
         ab:47:da:3f:c1:c2:47:ef:6d:7a:4b:bf:cc:b5:20:a7:3a:68:
         e9:98:bf:2c:02:a4:0f:96:17:b0:d2:da:64:7c:c2:f0:02:06:
         b1:2b:61:1c:32:ed:bc:31:55:55:82:f5:3d:33:cb:1e:bc:a9:
         37:c6:bb:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOml+Hf9+W5YHRAUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NkMTVmZTEtOTZlOS00NWFkLTk2ZmQtMjIwNDFlMTFj
ZThkMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
MThhN2U0YzQtNzU2NS00N2NhLThhM2ItYTA1YzQzODQ2MDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueQZ4k9GWYEB6eSWusUvuKWz52vINAEvTyWH
OnbEFPHPQQUUuKMILcLG4LqhiwCipTzjNJKLJFDh+7m+9hDCf396PRUteI+Y+wkz
apKa3XkKkNiPBajx+W0tm22YFYfDa36oFf9HKT8mIIbCoOMTrPk0eHYd79r4TGOx
cAqonCHOead1EBTLcu+LUsLqp4rAtR9aR+Lo4+Ou4QLBacyn5F3o3fAOhWgKArNu
HKey2NAl+vYDV2QbD/3lhJn+NQAwQUAGMKn9DoXRpfWLHPPwX54tyBhOkjyCI1kl
0oVRm6AQli98AlMsQSbbmBUE7Qs0ypFQTwJCreJNjYh7PAt+AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwdyCn5g+Pc6MgbxJnXx5wVEKTSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jY2Qx
NWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0MWUxMWNlOGQvYWJiZGE3NGQtMGE2MS0z
MWFkLWJiODEtYjgzMjQzMDNjZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2NkMTVmZTEtOTZlOS00NWFkLTk2
ZmQtMjIwNDFlMTFjZThkL2NjZDE1ZmUxLTk2ZTktNDVhZC05NmZkLTIyMDQxZTEx
Y2U4ZC5jcmwwHwYDVR0jBBgwFoAUF+48LZzKNILz25syzErq4kkNEMUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jY2QxNWZlMS05NmU5LTQ1YWQtOTZmZC0yMjA0
MWUxMWNlOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ21SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0rjglmVcM5FP4UNJEJbRwkfuYMRcD8OFjT4MV2dpCGSMAJcV8sOTT2
uorZog7FcmKYAt5ARRUqnzSlGzB+PCbgEvv1hvq1xloC23f0uRei/tFmntivfYE7
8i0cXu9g+cG+2e4W+YABcgDgn2hiIn8AgTVUFb6v06WSJ98H961WWIGi+ROeoe2z
ji0EOzD7W10qC5+bMQk+XNcsdJ6adaNMiCPDxBJAWck/G7x4xzjTSfl+T/KmIvv+
0Npx51nFqYa1hPXrnatH2j/BwkfvbXpLv8y1IKc6aOmYvywCpA+WF7DS2mR8wvAC
BrErYRwy7bwxVVWC9T0zyx68qTfGu0U=
-----END CERTIFICATE-----
Generated at Sun May 11 13:41:27 2025 by rpki-client