Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa
File:                     454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa (raw, json)
Hash identifier:          Ni6NVnszFsScp+JBeJuq5FC1T9wzuXIxVO5CYztS07Y=
Subject key identifier:   AA:AD:D4:E1:8C:83:10:B2:8D:D8:0A:F8:8B:99:4F:83:80:61:EA:16
Certificate issuer:       /CN=502018d6-5414-4889-b679-53ff6a9e5685
Certificate serial:       010D0C9F43285847213B0FD1337CD58E47444B00
Authority key identifier: F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     28086
IP address blocks:        209.213.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:0f:d1:33:7c:d5:8e:47:44:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502018d6-5414-4889-b679-53ff6a9e5685
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=7838142a-9f06-4a37-8aad-2d6b3ef41191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:67:f8:a0:06:ff:b1:c0:a0:f8:2b:c4:88:
                    59:18:28:69:63:3a:8f:5c:55:4f:9d:35:f0:00:6b:
                    1e:49:ac:a9:04:fd:96:15:44:8c:00:46:7f:b6:b8:
                    0b:dd:30:bc:7d:7e:ce:c0:3c:9d:ab:78:61:0c:ad:
                    df:f4:35:3b:68:be:4a:97:e8:f4:25:2e:85:ee:64:
                    c1:3c:11:c6:58:41:6a:d1:5b:3c:89:32:9a:6f:63:
                    c8:94:67:75:b2:a2:3e:4a:25:b7:a1:45:42:bc:17:
                    55:80:46:94:ef:ff:0a:28:3e:66:e8:fd:68:42:2f:
                    e3:26:6e:40:26:e7:74:34:3c:24:f6:ef:c3:a9:0e:
                    08:84:8a:b3:9a:81:28:f6:c1:ff:38:e3:4c:11:cd:
                    d7:42:be:fd:a9:51:8a:ae:29:7b:0f:77:da:f0:d3:
                    aa:21:c2:cf:b0:36:a6:e3:5c:d5:6f:1d:d5:af:f4:
                    dc:22:89:b6:e0:08:60:c4:fd:2f:38:17:a5:4c:5f:
                    aa:14:3c:42:02:eb:1e:a1:a1:1a:e4:7c:57:14:2a:
                    26:b2:ae:80:55:6b:59:78:ac:c5:67:13:77:7f:d4:
                    2f:82:a4:e5:f1:fd:dd:3d:4d:3c:6b:bf:00:49:c2:
                    7a:c5:05:89:dd:d6:3c:36:df:16:40:e8:17:e1:87:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AD:D4:E1:8C:83:10:B2:8D:D8:0A:F8:8B:99:4F:83:80:61:EA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl

            X509v3 Authority Key Identifier:
                keyid:F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.213.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:48:77:4b:d8:c3:6b:62:e1:58:0d:8f:0d:25:69:6d:23:b0:
         4a:e5:68:5f:27:b6:b3:ae:72:5a:7d:31:d8:2f:c7:59:84:75:
         97:53:6c:8e:29:bc:e5:53:b6:41:bb:03:91:da:a5:80:20:a3:
         e4:f7:b8:f7:db:18:3a:8b:4d:a7:db:79:3f:7e:02:d5:0b:e1:
         8a:19:1c:ed:fd:dd:58:0c:32:29:1c:83:2c:70:f6:1a:c9:d3:
         2d:97:21:3d:1d:54:21:1c:6a:e5:40:1c:4f:74:14:50:ce:9a:
         b8:f2:07:8d:5c:73:ca:39:a8:5b:dc:3e:66:86:c7:ac:75:5f:
         69:d3:94:e0:ec:27:38:4c:ce:18:46:09:61:e4:a5:e5:b1:9d:
         f8:5b:5c:ba:dc:59:c7:1a:92:ee:a9:26:9b:36:40:de:79:33:
         8e:31:e7:42:c3:aa:44:9b:57:cd:4a:f1:a3:44:5c:b6:a0:33:
         d4:d7:68:59:63:c0:ef:64:f2:f5:99:bf:b9:20:d2:08:40:06:
         92:29:08:56:c3:c6:43:10:6a:d0:18:3a:82:20:05:94:21:4e:
         2f:63:5a:7d:14:79:db:02:d1:6e:d8:1f:ce:f0:fd:a4:1d:8a:
         8e:40:eb:80:ac:a5:fc:15:d5:71:28:92:bb:19:36:aa:d5:7c:
         7c:4f:83:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEchOw/RM3zVjkdESwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAyMDE4ZDYtNTQxNC00ODg5LWI2NzktNTNmZjZhOWU1
Njg1MB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk
NzgzODE0MmEtOWYwNi00YTM3LThhYWQtMmQ2YjNlZjQxMTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcNn+KAG/7HAoPgrxIhZGChpYzqPXFVPnTXw
AGseSaypBP2WFUSMAEZ/trgL3TC8fX7OwDydq3hhDK3f9DU7aL5Kl+j0JS6F7mTB
PBHGWEFq0Vs8iTKab2PIlGd1sqI+SiW3oUVCvBdVgEaU7/8KKD5m6P1oQi/jJm5A
Jud0NDwk9u/DqQ4IhIqzmoEo9sH/OONMEc3XQr79qVGKril7D3fa8NOqIcLPsDam
41zVbx3Vr/TcIom24AhgxP0vOBelTF+qFDxCAuseoaEa5HxXFComsq6AVWtZeKzF
ZxN3f9QvgqTl8f3dPU08a78AScJ6xQWJ3dY8Nt8WQOgX4YcAmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqt1OGMgxCyjdgK+IuZT4OAYeoWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIw
MThkNi01NDE0LTQ4ODktYjY3OS01M2ZmNmE5ZTU2ODUvNDU0Zjg2YzYtZWM2ZC0z
MWY2LWI2MmItMGEzYmM3MzZmZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTAyMDE4ZDYtNTQxNC00ODg5LWI2
NzktNTNmZjZhOWU1Njg1LzUwMjAxOGQ2LTU0MTQtNDg4OS1iNjc5LTUzZmY2YTll
NTY4NS5jcmwwHwYDVR0jBBgwFoAU+WuL7LyEht6T63skHtJKMM1MTUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIwMThkNi01NDE0LTQ4ODktYjY3OS01M2Zm
NmE5ZTU2ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0dWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFId0vYw2ti4VgNjw0laW0jsErlaF8ntrOuclp9Mdgvx1mEdZdTbI4p
vOVTtkG7A5HapYAgo+T3uPfbGDqLTafbeT9+AtUL4YoZHO393VgMMikcgyxw9hrJ
0y2XIT0dVCEcauVAHE90FFDOmrjyB41cc8o5qFvcPmaGx6x1X2nTlODsJzhMzhhG
CWHkpeWxnfhbXLrcWccaku6pJps2QN55M44x50LDqkSbV81K8aNEXLagM9TXaFlj
wO9k8vWZv7kg0ghABpIpCFbDxkMQatAYOoIgBZQhTi9jWn0UedsC0W7YH87w/aQd
io5A64CspfwV1XEokrsZNqrVfHxPgyI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:37 2024 by rpki-client on console-fra.rpki-client.org