Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa
File:                     52215577-a591-3e62-b438-ff08b1bba9ec.roa (raw, json)
Hash identifier:          FxbFM8Hv8VLMNEyEZ6jscIu7+Z8wX6ASNKatnYMAN9s=
Subject key identifier:   25:3B:56:4C:D1:2C:32:2F:F7:C8:CA:F6:1C:5C:F6:1E:55:DD:F6:61
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F43285848EF613734ECB562091C4FB300
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7782
IP address blocks:        209.193.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:37:34:ec:b5:62:09:1c:4f:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=63d99f8c-7ffd-45e0-8eba-4fd30e95072f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:a3:8a:09:5a:1d:c8:69:b2:e5:c9:10:8e:
                    2d:77:2c:87:97:79:d3:ac:26:fe:51:a1:f1:8a:56:
                    b2:d1:b4:76:a5:b4:4d:f9:8c:85:1e:d5:b5:5f:fc:
                    c6:91:81:ec:4e:8c:25:1f:e7:31:ff:ee:5e:e3:c3:
                    39:e6:77:be:4c:1e:ad:41:15:13:d8:48:0b:b1:c7:
                    b6:8a:d0:79:2c:4b:88:80:05:bb:62:43:d6:bd:ca:
                    32:26:04:b6:05:c7:52:c4:26:b5:1e:97:c3:35:67:
                    78:f5:74:55:8e:eb:12:b8:d9:9e:de:bb:47:ac:4a:
                    f5:8a:15:1c:64:b3:e3:1e:88:52:0e:14:0d:b8:14:
                    e3:c4:84:67:de:e5:cc:c6:2f:d9:f4:df:19:df:25:
                    b3:e3:dd:30:fc:89:e3:8e:c6:f2:a6:96:46:cb:7d:
                    8f:fb:10:4e:51:e3:a8:1b:f4:f5:71:0e:56:01:3c:
                    a4:16:dd:e8:88:f3:93:ce:16:ba:3c:58:dd:31:ee:
                    17:d1:b2:84:59:3c:11:fc:7a:a0:3f:15:e4:b5:ab:
                    8a:4c:b8:b5:ff:9b:e0:a9:57:c6:27:3a:c9:7f:24:
                    51:9b:48:42:87:4c:b3:7e:e7:c1:77:80:44:80:08:
                    ee:87:24:34:02:e8:4c:0a:3b:f9:9b:e9:51:67:a6:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3B:56:4C:D1:2C:32:2F:F7:C8:CA:F6:1C:5C:F6:1E:55:DD:F6:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.193.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:47:dc:f4:1d:25:b4:f4:c1:01:81:8e:af:c8:c5:0f:d1:
         f3:f9:66:f8:54:a9:78:4e:e8:ef:c6:6d:9d:de:41:00:04:fb:
         3b:45:55:86:7f:91:da:31:24:23:58:12:bf:14:2d:ea:fb:9b:
         46:fa:08:36:e0:0a:8a:97:ea:c0:0f:05:4f:9b:af:15:c5:df:
         a9:ae:ee:9c:a1:22:5a:bb:c1:e5:d6:59:82:ff:0a:6a:76:e1:
         8e:a4:16:4f:8e:3a:40:08:eb:a0:92:49:bb:5d:f1:ca:f7:30:
         05:68:c0:a9:8c:3c:25:32:5f:89:28:67:9e:c0:67:d7:f3:41:
         3b:d7:a7:44:66:20:00:f3:70:8f:0f:c1:28:e8:06:9b:6a:d7:
         0b:e7:6c:21:5d:89:4f:6e:4a:fe:a2:33:16:7b:71:9f:60:b9:
         51:ec:de:9b:41:b2:1f:d7:f6:b9:15:c2:fe:2c:34:76:b1:3a:
         80:a6:b0:ba:6f:51:ab:30:05:39:c3:1b:3e:bd:bb:2f:c0:39:
         c5:35:ee:56:e9:3f:15:5f:50:8c:bd:94:0b:dc:82:ca:b3:37:
         18:63:9f:5f:6c:54:fe:49:14:a9:81:30:36:0a:b2:ce:41:9e:
         ee:87:3b:ed:c6:eb:84:80:ce:a3:19:8a:7e:c7:a2:a9:56:69:
         73:bc:a9:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTc07LViCRxPswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj
ZGY3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NjNkOTlmOGMtN2ZmZC00NWUwLThlYmEtNGZkMzBlOTUwNzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst+jiglaHchpsuXJEI4tdyyHl3nTrCb+UaHx
ilay0bR2pbRN+YyFHtW1X/zGkYHsTowlH+cx/+5e48M55ne+TB6tQRUT2EgLsce2
itB5LEuIgAW7YkPWvcoyJgS2BcdSxCa1HpfDNWd49XRVjusSuNme3rtHrEr1ihUc
ZLPjHohSDhQNuBTjxIRn3uXMxi/Z9N8Z3yWz490w/InjjsbyppZGy32P+xBOUeOo
G/T1cQ5WATykFt3oiPOTzha6PFjdMe4X0bKEWTwR/HqgPxXktauKTLi1/5vgqVfG
JzrJfyRRm0hCh0yzfufBd4BEgAjuhyQ0AuhMCjv5m+lRZ6YgcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCU7VkzRLDIv98jK9hxc9h5V3fZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm
MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNTIyMTU1NzctYTU5MS0z
ZTYyLWI0MzgtZmYwOGIxYmJhOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw
NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh
Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy
MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0cEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxnR9z0HSW09MEBgY6vyMUP0fP5ZvhUqXhO6O/GbZ3eQQAE+ztFVYZ/
kdoxJCNYEr8ULer7m0b6CDbgCoqX6sAPBU+brxXF36mu7pyhIlq7weXWWYL/Cmp2
4Y6kFk+OOkAI66CSSbtd8cr3MAVowKmMPCUyX4koZ57AZ9fzQTvXp0RmIADzcI8P
wSjoBptq1wvnbCFdiU9uSv6iMxZ7cZ9guVHs3ptBsh/X9rkVwv4sNHaxOoCmsLpv
UaswBTnDGz69uy/AOcU17lbpPxVfUIy9lAvcgsqzNxhjn19sVP5JFKmBMDYKss5B
nu6HO+3G64SAzqMZin7HoqlWaXO8qaY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:15 2025 by rpki-client