Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa
File:                     454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa (raw, json)
Hash identifier:          SYKYtY0p/xZ3w7zP91Ecc5xiMrHgx6bLqxd/QaUQmHg=
Subject key identifier:   60:FE:C8:60:F5:A3:4B:57:C8:32:17:D6:EF:FB:B5:04:03:6B:85:A7
Certificate issuer:       /CN=502018d6-5414-4889-b679-53ff6a9e5685
Certificate serial:       010D0C9F4328584561285670DBEA1079799195C0
Authority key identifier: F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     28086
IP address blocks:        209.213.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:56:70:db:ea:10:79:79:91:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502018d6-5414-4889-b679-53ff6a9e5685
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=f146937c-c1e9-42b1-a55d-6287badd85bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:1f:3c:bc:08:a9:db:80:44:1e:2c:8a:93:
                    8a:78:fc:b1:77:55:7a:f7:30:9a:d2:7f:51:ad:79:
                    21:cb:ff:f9:0d:10:e2:40:ec:08:48:ed:7e:ad:c3:
                    34:ec:90:af:c9:b4:b6:8c:7f:c6:70:a6:cf:4f:ef:
                    76:2d:04:ff:cc:90:d1:f9:d1:9c:0b:cc:c7:e7:f9:
                    43:95:7a:d4:6e:70:0c:7b:8a:dc:e8:d8:25:d4:48:
                    f8:eb:6b:55:b5:3f:4a:9c:59:d7:6a:ab:02:83:d6:
                    75:de:8f:5c:a2:bd:de:de:9c:e1:85:3c:88:86:30:
                    b0:69:61:b2:54:c1:a6:b8:71:81:9c:f3:34:9e:4d:
                    f6:58:9f:f0:27:3f:71:37:02:44:4c:d4:0b:ef:20:
                    69:47:bc:b7:47:c2:84:80:c2:ac:46:7d:f1:80:cc:
                    14:fc:5f:ca:11:76:65:11:04:aa:72:2b:fe:29:01:
                    c3:53:2c:42:c4:4d:65:92:66:d9:87:4a:3a:b1:69:
                    a2:30:11:2c:76:03:9e:13:9e:8e:3f:46:e9:2d:c1:
                    34:ca:fe:4a:52:06:e3:a1:0a:c8:73:a4:03:94:5b:
                    4a:f1:89:f6:b7:76:9d:ab:34:fc:13:9f:96:f1:85:
                    85:d3:d1:2b:c4:dc:35:c2:a3:1b:ce:8a:aa:a9:05:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FE:C8:60:F5:A3:4B:57:C8:32:17:D6:EF:FB:B5:04:03:6B:85:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl

            X509v3 Authority Key Identifier:
                keyid:F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.213.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1c:51:45:0b:a1:4c:6c:06:45:ef:48:0f:0b:a9:7a:1a:20:
         db:0a:b8:a1:e4:69:34:47:dc:0d:78:f7:2d:87:5c:2b:88:33:
         fa:2e:ee:c3:bb:82:b9:47:aa:43:e3:0e:bd:9d:6e:ce:ed:f3:
         ca:59:0f:76:29:65:25:51:69:42:08:13:32:e4:23:f7:2e:69:
         3d:f7:c7:55:c4:55:20:a1:3b:7f:a3:e7:08:6c:ba:fa:73:ed:
         c2:f6:ad:e8:7c:4e:99:ef:94:14:52:53:60:ae:a5:d6:94:f2:
         f2:55:6d:58:ba:86:6d:ff:85:1b:73:b8:86:87:46:26:f5:33:
         04:a0:01:98:e5:b7:31:46:6d:30:77:cd:df:fc:f6:2f:f1:72:
         9f:c0:ad:ec:17:9b:64:2e:a5:bd:6f:54:c8:ea:59:73:d4:d4:
         78:a3:e6:65:6e:3d:34:fa:d4:3f:34:28:40:13:97:a0:54:0c:
         d7:ee:28:1e:4f:86:d9:fb:18:ab:e0:1c:f1:4b:39:ef:78:83:
         e7:1e:c2:50:9d:9d:b8:c3:04:2d:6c:38:76:e4:81:d5:e1:6d:
         f1:ea:93:16:d7:2f:c4:ce:5a:cd:2d:59:14:0e:0d:12:15:a7:
         52:c5:63:93:d6:e7:19:03:43:eb:b4:72:89:97:9d:34:b7:7c:
         f0:75:7d:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKFZw2+oQeXmRlcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAyMDE4ZDYtNTQxNC00ODg5LWI2NzktNTNmZjZhOWU1
Njg1MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
ZjE0NjkzN2MtYzFlOS00MmIxLWE1NWQtNjI4N2JhZGQ4NWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlQfPLwIqduARB4sipOKePyxd1V69zCa0n9R
rXkhy//5DRDiQOwISO1+rcM07JCvybS2jH/GcKbPT+92LQT/zJDR+dGcC8zH5/lD
lXrUbnAMe4rc6Ngl1Ej462tVtT9KnFnXaqsCg9Z13o9cor3e3pzhhTyIhjCwaWGy
VMGmuHGBnPM0nk32WJ/wJz9xNwJETNQL7yBpR7y3R8KEgMKsRn3xgMwU/F/KEXZl
EQSqciv+KQHDUyxCxE1lkmbZh0o6sWmiMBEsdgOeE56OP0bpLcE0yv5KUgbjoQrI
c6QDlFtK8Yn2t3adqzT8E5+W8YWF09ErxNw1wqMbzoqqqQUrGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGD+yGD1o0tXyDIX1u/7tQQDa4WnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIw
MThkNi01NDE0LTQ4ODktYjY3OS01M2ZmNmE5ZTU2ODUvNDU0Zjg2YzYtZWM2ZC0z
MWY2LWI2MmItMGEzYmM3MzZmZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTAyMDE4ZDYtNTQxNC00ODg5LWI2
NzktNTNmZjZhOWU1Njg1LzUwMjAxOGQ2LTU0MTQtNDg4OS1iNjc5LTUzZmY2YTll
NTY4NS5jcmwwHwYDVR0jBBgwFoAU+WuL7LyEht6T63skHtJKMM1MTUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIwMThkNi01NDE0LTQ4ODktYjY3OS01M2Zm
NmE5ZTU2ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0dWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkcUUULoUxsBkXvSA8LqXoaINsKuKHkaTRH3A149y2HXCuIM/ou7sO7
grlHqkPjDr2dbs7t88pZD3YpZSVRaUIIEzLkI/cuaT33x1XEVSChO3+j5whsuvpz
7cL2reh8TpnvlBRSU2CupdaU8vJVbVi6hm3/hRtzuIaHRib1MwSgAZjltzFGbTB3
zd/89i/xcp/ArewXm2Qupb1vVMjqWXPU1Hij5mVuPTT61D80KEATl6BUDNfuKB5P
htn7GKvgHPFLOe94g+cewlCdnbjDBC1sOHbkgdXhbfHqkxbXL8TOWs0tWRQODRIV
p1LFY5PW5xkDQ+u0comXnTS3fPB1fV8=
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:28:45 2024 by rpki-client on console-ams.rpki-client.org