Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/b8810354-d7a4-3c62-b48b-0de2af45e1a7.roa
File:                     b8810354-d7a4-3c62-b48b-0de2af45e1a7.roa (raw, json)
Hash identifier:          gbaK2qts7Ff6iyTnAP9qVMKBiKdq7moW2oE5Ok3llsI=
Subject key identifier:   03:52:42:FB:EC:3F:8C:8A:59:C6:62:F1:9B:2A:B2:BF:BC:EE:64:E4
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F432858487A2088457C08980897AA6100
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/b8810354-d7a4-3c62-b48b-0de2af45e1a7.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     7992
IP address blocks:        209.15.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:88:45:7c:08:98:08:97:aa:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=f6e99bef-497d-4b8c-89d8-079134ae0245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:b0:5e:df:7e:2b:14:48:d5:84:f0:46:48:
                    e1:45:1f:68:10:51:c4:9e:99:20:09:c2:72:e1:3d:
                    e4:82:a6:25:5a:be:0b:0b:65:0f:56:64:1f:5e:67:
                    02:e6:de:80:20:77:86:de:98:db:0a:7b:72:72:cb:
                    7f:89:05:25:15:fd:30:04:db:8d:77:69:09:39:a5:
                    8c:33:dd:71:90:fc:f5:db:41:13:d3:64:b1:1c:43:
                    a8:d1:d7:01:a6:6e:07:84:02:c4:29:88:df:1c:0b:
                    83:5a:5d:e9:2b:cd:24:d8:c8:a0:df:6c:90:05:82:
                    41:8e:7f:7f:76:09:1d:d9:1b:1b:f3:a1:6b:a6:3b:
                    d0:45:75:a2:c2:fd:2f:c9:2a:e4:a9:52:d5:05:f2:
                    3f:9e:ff:f2:d6:7c:e4:53:fd:e5:b2:43:b3:9a:79:
                    c0:f0:5e:e9:54:b6:73:07:39:07:09:4e:e3:ce:da:
                    1d:22:e2:37:0d:e7:b4:18:af:f1:c5:46:f3:bf:0b:
                    6e:90:b8:15:d6:2b:6c:cd:1a:e5:1c:9b:d6:dc:f6:
                    6e:b4:6a:8d:0a:9b:ae:09:7a:5c:3f:30:a2:81:17:
                    9e:9e:e3:82:b7:31:1e:cf:31:30:9e:32:51:41:ca:
                    b0:2f:e3:89:78:fb:97:b0:7a:ca:cd:60:73:8c:07:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:52:42:FB:EC:3F:8C:8A:59:C6:62:F1:9B:2A:B2:BF:BC:EE:64:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/b8810354-d7a4-3c62-b48b-0de2af45e1a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:e7:21:e5:c5:89:49:63:36:c5:c7:88:99:39:6e:b7:28:
         ae:a4:b1:9f:b0:5c:64:86:3a:1d:e7:03:df:98:76:61:c3:e1:
         78:fb:4f:f1:06:dc:50:08:bc:a8:97:59:43:6a:5a:3b:36:0f:
         ce:46:23:71:ba:b9:8f:75:73:7d:72:d3:e2:f1:78:c3:ad:65:
         ab:2c:4b:be:5b:0a:ca:88:9e:47:f0:2b:68:9d:1a:79:ee:34:
         d8:47:08:3a:21:aa:54:2a:5e:bb:98:95:e2:b0:b7:c1:33:b4:
         a5:f1:43:92:83:84:ea:6d:78:e5:38:64:7a:ef:fe:b0:3e:53:
         c8:62:e8:e2:7c:6b:c7:68:01:21:23:12:f9:f4:a0:55:41:24:
         a6:1a:2b:f9:92:24:ca:b8:36:6e:fa:fb:f1:62:77:b8:06:fe:
         1e:dc:85:63:61:e6:82:58:25:61:7a:82:af:bd:39:4e:18:38:
         ed:ab:f1:2e:9c:5b:ae:49:8d:59:d0:d0:20:f4:0b:54:4b:43:
         a7:fd:8f:b9:58:2c:ea:88:13:ef:4f:c0:66:2d:2a:f7:28:33:
         b6:72:f1:08:cf:90:65:74:0b:52:ba:fc:01:5f:fb:38:b8:bb:
         2a:bd:37:a9:14:64:78:07:cb:b3:6f:c6:b6:31:f5:43:b7:21:
         40:5c:d4:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IIhFfAiYCJeqYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm
Zjk4MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
ZjZlOTliZWYtNDk3ZC00YjhjLTg5ZDgtMDc5MTM0YWUwMjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgGwXt9+KxRI1YTwRkjhRR9oEFHEnpkgCcJy
4T3kgqYlWr4LC2UPVmQfXmcC5t6AIHeG3pjbCntycst/iQUlFf0wBNuNd2kJOaWM
M91xkPz120ET02SxHEOo0dcBpm4HhALEKYjfHAuDWl3pK80k2Mig32yQBYJBjn9/
dgkd2Rsb86FrpjvQRXWiwv0vySrkqVLVBfI/nv/y1nzkU/3lskOzmnnA8F7pVLZz
BzkHCU7jztodIuI3Dee0GK/xxUbzvwtukLgV1itszRrlHJvW3PZutGqNCpuuCXpc
PzCigReenuOCtzEezzEwnjJRQcqwL+OJePuXsHrKzWBzjAegWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANSQvvsP4yKWcZi8Zsqsr+87mTkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy
ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvYjg4MTAzNTQtZDdhNC0z
YzYyLWI0OGItMGRlMmFmNDVlMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1
ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3
ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5
OThjN2ZmOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0Q+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7e5yHlxYlJYzbFx4iZOW63KK6ksZ+wXGSGOh3nA9+YdmHD4Xj7T/EG
3FAIvKiXWUNqWjs2D85GI3G6uY91c31y0+LxeMOtZassS75bCsqInkfwK2idGnnu
NNhHCDohqlQqXruYleKwt8EztKXxQ5KDhOpteOU4ZHrv/rA+U8hi6OJ8a8doASEj
Evn0oFVBJKYaK/mSJMq4Nm76+/Fid7gG/h7chWNh5oJYJWF6gq+9OU4YOO2r8S6c
W65JjVnQ0CD0C1RLQ6f9j7lYLOqIE+9PwGYtKvcoM7Zy8QjPkGV0C1K6/AFf+zi4
uyq9N6kUZHgHy7NvxrYx9UO3IUBc1Gw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:12 2025 by rpki-client