Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa
File:                     8b9911ad-f040-33b2-b95a-798133f79d2a.roa (raw, json)
Hash identifier:          CuSUJ42q1EN1Dm9HRoAcNfWbvWRuCzR+frN6AQ3sCjs=
Subject key identifier:   3B:3E:98:0E:8C:2B:5B:9D:76:DC:F3:F2:1D:56:76:74:CD:2E:3A:B0
Certificate issuer:       /CN=502018d6-5414-4889-b679-53ff6a9e5685
Certificate serial:       010D0C9F4328584968B4252D66979E84037F2200
Authority key identifier: F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     28086
IP address blocks:        209.213.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:25:2d:66:97:9e:84:03:7f:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502018d6-5414-4889-b679-53ff6a9e5685
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=e57eab94-384f-4ff4-bd3d-7d6faf3a542c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:c0:06:a9:d1:99:a0:a9:53:3c:3f:4f:98:
                    9b:d9:5d:0f:22:77:49:1c:15:57:91:72:c9:c5:02:
                    d4:8a:85:ac:13:c8:fb:ea:13:85:a4:8b:5c:14:8c:
                    02:08:0c:3d:4b:9a:54:9e:8c:23:ac:9c:69:8e:1f:
                    c1:97:94:8c:83:7a:e7:11:39:eb:1e:a3:15:59:fa:
                    98:57:f9:65:c1:69:ad:96:a2:c3:97:c2:4f:7f:06:
                    f3:36:bf:b4:56:61:4a:6d:cc:67:8c:61:6f:50:c3:
                    6e:a4:06:99:27:95:04:23:ec:53:89:54:2a:19:b4:
                    4d:ea:ae:f3:a1:03:8f:8a:58:18:60:c0:67:ef:75:
                    42:17:1b:c7:c7:36:2c:52:9a:e1:30:d4:34:6e:33:
                    86:f5:c9:d6:49:19:98:89:9d:c9:30:0f:53:ec:55:
                    6b:78:b3:6a:0e:65:05:57:6f:e8:1e:93:26:82:d1:
                    65:93:61:55:b6:8c:82:d0:d7:9b:3f:2c:9c:6f:fa:
                    02:27:f6:2e:60:4f:41:64:66:2c:41:de:53:a1:a4:
                    14:51:e0:b3:8f:ba:68:48:03:7e:7e:be:9f:fd:45:
                    a0:02:a5:0d:7c:28:4e:63:f3:a8:bd:1a:58:dc:6d:
                    a1:83:25:b9:47:3b:c3:e4:86:16:23:19:c1:d6:de:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3E:98:0E:8C:2B:5B:9D:76:DC:F3:F2:1D:56:76:74:CD:2E:3A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl

            X509v3 Authority Key Identifier:
                keyid:F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.213.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:17:11:a5:b9:f3:48:03:f6:12:31:a3:3f:9b:42:c7:49:a4:
         d9:72:7a:8d:72:d3:a6:51:7e:38:3d:29:36:dc:2e:4f:6a:4e:
         8d:1c:ee:fc:8d:32:d3:9f:1c:b4:33:b6:3f:80:16:bf:9c:bf:
         c9:5e:ea:84:b7:fb:9d:14:63:d9:55:d5:f3:0f:aa:18:fb:00:
         fb:8a:77:bb:60:80:1b:0a:e5:f4:fd:3b:b4:a0:97:50:27:3d:
         12:69:67:6d:d8:1b:2c:09:6a:13:78:57:a3:7f:c1:74:9b:c7:
         23:64:2f:0f:ae:d9:b6:58:18:a2:16:eb:2f:13:4e:b3:02:a4:
         0f:4e:5a:b8:5d:d3:d1:4c:07:9d:ca:c6:59:ce:54:2d:ea:d6:
         72:e0:d6:a3:90:15:03:49:de:e3:bd:66:28:a2:0b:33:e1:aa:
         60:23:60:dd:3c:97:f9:2f:42:cb:2b:3d:a2:e7:ef:b6:a6:8b:
         7f:72:ac:08:be:21:53:25:f8:c1:40:14:c7:56:34:fc:64:b7:
         22:6f:0e:9f:b8:84:d4:c4:d7:12:f9:97:d2:72:7e:24:c0:f9:
         e0:d8:b6:e5:ba:68:1a:ae:68:23:9d:c2:67:31:68:66:72:c6:
         86:cf:34:dc:43:12:f5:17:40:9b:60:d1:03:05:06:83:a1:37:
         d0:0c:01:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCUtZpeehAN/IgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAyMDE4ZDYtNTQxNC00ODg5LWI2NzktNTNmZjZhOWU1
Njg1MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk
ZTU3ZWFiOTQtMzg0Zi00ZmY0LWJkM2QtN2Q2ZmFmM2E1NDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArevABqnRmaCpUzw/T5ib2V0PIndJHBVXkXLJ
xQLUioWsE8j76hOFpItcFIwCCAw9S5pUnowjrJxpjh/Bl5SMg3rnETnrHqMVWfqY
V/llwWmtlqLDl8JPfwbzNr+0VmFKbcxnjGFvUMNupAaZJ5UEI+xTiVQqGbRN6q7z
oQOPilgYYMBn73VCFxvHxzYsUprhMNQ0bjOG9cnWSRmYiZ3JMA9T7FVreLNqDmUF
V2/oHpMmgtFlk2FVtoyC0NebPyycb/oCJ/YuYE9BZGYsQd5ToaQUUeCzj7poSAN+
fr6f/UWgAqUNfChOY/OovRpY3G2hgyW5RzvD5IYWIxnB1t7thQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDs+mA6MK1uddtzz8h1WdnTNLjqwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIw
MThkNi01NDE0LTQ4ODktYjY3OS01M2ZmNmE5ZTU2ODUvOGI5OTExYWQtZjA0MC0z
M2IyLWI5NWEtNzk4MTMzZjc5ZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTAyMDE4ZDYtNTQxNC00ODg5LWI2
NzktNTNmZjZhOWU1Njg1LzUwMjAxOGQ2LTU0MTQtNDg4OS1iNjc5LTUzZmY2YTll
NTY4NS5jcmwwHwYDVR0jBBgwFoAU+WuL7LyEht6T63skHtJKMM1MTUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIwMThkNi01NDE0LTQ4ODktYjY3OS01M2Zm
NmE5ZTU2ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0dW4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcXEaW580gD9hIxoz+bQsdJpNlyeo1y06ZRfjg9KTbcLk9qTo0c7vyN
MtOfHLQztj+AFr+cv8le6oS3+50UY9lV1fMPqhj7APuKd7tggBsK5fT9O7Sgl1An
PRJpZ23YGywJahN4V6N/wXSbxyNkLw+u2bZYGKIW6y8TTrMCpA9OWrhd09FMB53K
xlnOVC3q1nLg1qOQFQNJ3uO9ZiiiCzPhqmAjYN08l/kvQssrPaLn77ami39yrAi+
IVMl+MFAFMdWNPxktyJvDp+4hNTE1xL5l9JyfiTA+eDYtuW6aBquaCOdwmcxaGZy
xobPNNxDEvUXQJtg0QMFBoOhN9AMAWM=
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:20:26 2025 by rpki-client