Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/99d2ed0c-4a14-3830-be28-7be64d0706c0.roa
File:                     99d2ed0c-4a14-3830-be28-7be64d0706c0.roa (raw, json)
Hash identifier:          NlZ2WVqrVyXXigR1jFDA1Edqtx9HgPvN0rBfrmN5myQ=
Subject key identifier:   5B:57:CD:38:7E:8D:D3:E8:97:66:E5:CF:63:C6:2D:77:FB:2A:43:A2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849B14A0B6773FE47A61EDC71C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/99d2ed0c-4a14-3830-be28-7be64d0706c0.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     16276
IP address blocks:        180.149.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0b:67:73:fe:47:a6:1e:dc:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=ab609b14-1419-444f-a24d-8fdd212bc427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:da:8a:5a:2d:f1:95:b4:5c:43:b7:89:19:
                    68:7a:c0:16:24:e8:d0:3f:4e:25:a5:5e:e6:63:a9:
                    e9:f5:64:aa:2d:2e:8f:63:7e:17:52:9f:8c:92:51:
                    13:03:43:e3:54:d2:8e:ab:65:10:3b:b4:56:da:c2:
                    ca:47:0a:c9:ed:91:53:fa:d8:2e:c2:85:2a:a6:0b:
                    d0:28:61:42:34:95:e0:be:ee:d9:01:e5:72:b2:1d:
                    f6:c0:7e:d0:58:c7:fc:88:4e:fd:07:b4:b1:b8:07:
                    ea:60:67:a8:a8:2d:37:65:50:1c:69:47:38:cb:25:
                    42:d1:6a:ec:0a:30:68:6b:b6:c5:a5:27:ec:3d:25:
                    33:28:6e:21:ad:cf:bb:78:3a:80:90:e6:04:9b:f3:
                    d4:e7:75:d0:7e:62:2a:e5:83:35:8f:47:dc:5d:50:
                    a3:4d:44:b6:0c:39:11:e5:e3:e1:ab:9f:b8:14:9e:
                    ce:5e:b2:c5:32:c1:12:84:3b:30:db:09:46:4b:8d:
                    59:fc:85:29:1b:3a:bb:04:83:35:99:1d:cb:aa:d1:
                    e4:27:13:81:c6:88:4a:5e:ca:bb:4a:94:db:b6:2c:
                    a6:f3:a2:4e:fb:a6:b7:74:37:0c:11:92:47:4f:9f:
                    d6:45:a8:27:6c:fe:db:06:a7:f5:fc:e7:eb:10:fe:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:CD:38:7E:8D:D3:E8:97:66:E5:CF:63:C6:2D:77:FB:2A:43:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/99d2ed0c-4a14-3830-be28-7be64d0706c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:39:5d:0f:79:00:5c:8e:0b:37:2e:5e:00:5e:6d:e6:d9:
         cc:41:9c:98:54:4a:9d:3b:c6:a1:db:d9:ba:f0:ec:ad:7f:62:
         02:b0:aa:5c:bc:86:78:32:0e:da:5e:77:ad:ba:1c:fe:ea:b3:
         8e:50:de:98:6a:d1:c4:48:83:65:1a:31:ea:66:d4:c0:a2:cb:
         2d:33:a9:91:04:87:61:fb:03:12:9e:94:cf:f0:ca:01:5a:06:
         7f:8c:00:1c:49:ba:c6:27:8d:64:4e:65:4b:19:dc:10:f5:77:
         3d:91:d6:5c:32:31:07:3c:f6:0e:0b:4d:df:6a:46:00:99:b6:
         c6:65:bd:5f:92:dd:8c:b1:e9:55:1e:b9:fe:34:91:26:b7:02:
         38:4e:85:64:29:89:3a:8f:0c:bf:f5:84:b5:43:c7:40:87:19:
         89:01:29:f8:01:ce:f0:6e:b7:32:0f:ab:03:ee:88:7d:f0:71:
         12:12:c4:74:a5:e1:a0:28:72:38:42:50:58:74:ba:ec:3d:24:
         ed:ee:be:17:fc:59:da:5d:94:92:57:20:aa:27:97:59:41:60:
         62:db:ac:49:d1:84:3f:95:e3:de:71:ab:2a:25:23:e9:03:cc:
         54:02:75:99:c9:e2:8c:d3:c1:e2:92:1b:53:b1:0f:28:2d:19:
         eb:7d:40:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:48:58 2025 by rpki-client