Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdb1b0a-ccde-3521-aa95-538134e7e537.roa
File:                     6bdb1b0a-ccde-3521-aa95-538134e7e537.roa (raw, json)
Hash identifier:          uYX7v56iWn8d03rcr0MDyK6QC3TEAxwnAWzV+oFlAXM=
Subject key identifier:   E9:5E:6D:03:EA:08:F4:F6:0B:70:57:54:C8:47:8B:7C:46:D6:B9:F2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858490E16CCD814E65F369E768E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdb1b0a-ccde-3521-aa95-538134e7e537.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        184.51.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:cc:d8:14:e6:5f:36:9e:76:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=d024746e-25f4-4191-9229-e240f286c5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:31:8c:90:60:d8:37:95:00:70:0f:c6:9c:
                    4a:77:bc:6a:44:db:3e:ec:6d:5c:76:cf:95:80:48:
                    43:18:be:e2:9d:6b:28:38:22:05:2a:df:17:fd:db:
                    64:74:2e:cb:a5:1c:fa:d8:21:d1:ff:75:ea:72:fd:
                    8a:52:64:bd:ce:89:26:ef:88:91:a3:0f:a5:b7:34:
                    8d:bf:27:df:15:c7:84:91:58:dd:a1:19:80:2c:0e:
                    ff:c3:56:5e:ba:1a:01:f2:69:31:78:00:8c:7e:26:
                    45:0e:21:9d:29:44:04:34:03:83:7d:52:27:1e:a0:
                    bf:98:03:05:c9:34:07:8a:90:07:a4:9d:0e:2b:ca:
                    14:a6:8a:4c:72:49:8d:a2:72:6b:8c:fe:65:b3:cd:
                    16:64:44:b4:19:ce:20:28:5f:db:06:9c:69:26:16:
                    53:02:55:02:60:e5:96:fd:92:ff:ed:9c:ed:ae:b4:
                    90:86:14:dc:9f:f5:7e:4d:40:2f:ff:6e:eb:04:49:
                    cf:c7:da:7b:c8:ba:77:0e:c3:31:05:5b:0b:76:d8:
                    26:13:bb:55:90:33:03:68:21:3b:b7:92:c0:a8:7d:
                    89:01:a5:ad:34:68:5c:2e:e7:cf:5a:0d:e5:03:ae:
                    dd:26:26:ae:f9:13:c7:1f:9c:fd:d1:7f:08:7e:e0:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5E:6D:03:EA:08:F4:F6:0B:70:57:54:C8:47:8B:7C:46:D6:B9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdb1b0a-ccde-3521-aa95-538134e7e537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.51.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:ab:e0:fe:49:bc:ab:53:25:56:c1:a8:ea:84:8a:64:b4:
         2e:1c:6f:4c:83:06:df:93:20:27:95:55:7f:5a:65:e1:f6:ed:
         78:bd:d5:d1:92:fd:80:f3:de:32:41:e9:0b:2e:ee:27:43:8c:
         cf:b6:37:39:16:9d:0f:dd:90:c4:76:b1:1b:4e:69:9f:6f:21:
         38:0f:64:de:5e:b3:c7:c9:c9:b0:d2:6d:ef:21:e6:a0:65:f6:
         4b:8c:1b:bd:5c:bb:ab:f0:f6:af:15:c1:81:94:53:e4:b4:39:
         ad:2b:b5:4f:69:de:68:8f:99:78:46:15:51:0e:4b:5f:b5:80:
         ca:a2:67:0d:92:f5:aa:76:8b:aa:d6:9c:9f:10:c3:ee:26:db:
         31:a6:ac:e3:e3:af:3f:cc:07:ad:90:eb:3e:2e:30:f1:40:56:
         5f:50:74:74:b0:b4:27:de:ad:2b:a8:31:0a:29:80:80:0c:8d:
         df:5a:d6:06:62:91:ee:37:22:fb:a7:81:ba:32:b4:09:19:16:
         2d:9c:0e:f1:2b:65:cf:54:6a:1d:d9:8f:be:99:68:96:07:ba:
         3e:25:e3:7b:95:02:fb:f2:33:e3:ad:ba:04:89:58:4a:7f:62:
         ce:cd:cc:d6:5e:22:51:7d:42:31:cb:72:75:ff:38:24:c3:a6:
         e6:91:58:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFszYFOZfNp52joAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDAyNDc0NmUtMjVmNC00MTkxLTkyMjktZTI0MGYyODZjNWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnckxjJBg2DeVAHAPxpxKd7xqRNs+7G1cds+V
gEhDGL7inWsoOCIFKt8X/dtkdC7LpRz62CHR/3Xqcv2KUmS9zokm74iRow+ltzSN
vyffFceEkVjdoRmALA7/w1ZeuhoB8mkxeACMfiZFDiGdKUQENAODfVInHqC/mAMF
yTQHipAHpJ0OK8oUpopMckmNonJrjP5ls80WZES0Gc4gKF/bBpxpJhZTAlUCYOWW
/ZL/7ZztrrSQhhTcn/V+TUAv/27rBEnPx9p7yLp3DsMxBVsLdtgmE7tVkDMDaCE7
t5LAqH2JAaWtNGhcLufPWg3lA67dJiau+RPHH5z90X8IfuAkQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlebQPqCPT2C3BXVMhHi3xG1rnyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJkYjFiMGEtY2NkZS0z
NTIxLWFhOTUtNTM4MTM0ZTdlNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuDMkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqXq+D+SbyrUyVWwajqhIpktC4cb0yDBt+TICeVVX9aZeH27Xi91dGS
/YDz3jJB6Qsu7idDjM+2NzkWnQ/dkMR2sRtOaZ9vITgPZN5es8fJybDSbe8h5qBl
9kuMG71cu6vw9q8VwYGUU+S0Oa0rtU9p3miPmXhGFVEOS1+1gMqiZw2S9ap2i6rW
nJ8Qw+4m2zGmrOPjrz/MB62Q6z4uMPFAVl9QdHSwtCferSuoMQopgIAMjd9a1gZi
ke43IvungboytAkZFi2cDvErZc9Uah3Zj76ZaJYHuj4l43uVAvvyM+OtugSJWEp/
Ys7NzNZeIlF9QjHLcnX/OCTDpuaRWGY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:21 2025 by rpki-client