Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa
File:                     8b9911ad-f040-33b2-b95a-798133f79d2a.roa (raw, json)
Hash identifier:          9QHG4M29m1j/QN9WLODU4KGpI6ReGbfOX0oNQi8I9ks=
Subject key identifier:   B5:B5:F8:BD:26:88:43:EC:DA:15:4F:8B:F7:68:3A:C1:C5:AA:D4:8F
Certificate issuer:       /CN=502018d6-5414-4889-b679-53ff6a9e5685
Certificate serial:       010D0C9F4328584A480AE6CF136C123DFDF74700
Authority key identifier: F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     28086
IP address blocks:        209.213.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e6:cf:13:6c:12:3d:fd:f7:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502018d6-5414-4889-b679-53ff6a9e5685
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=3f0b1ba6-47af-4598-882e-ed6c6b14d36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:4a:48:17:1a:2c:37:68:fa:2b:d8:e6:e8:
                    0d:85:db:d7:60:be:28:0a:7d:14:6e:0f:42:3c:4b:
                    c1:44:43:e8:83:0a:3e:32:a3:df:a5:37:ff:fa:b3:
                    4c:6b:c7:6d:10:91:ab:1a:33:ac:2c:d6:a2:e9:b9:
                    ba:85:c9:e2:7a:26:1f:e6:5b:4b:79:2e:b3:66:1b:
                    45:1c:05:88:4b:47:ec:03:c1:82:45:38:9e:4c:ae:
                    6a:e8:65:e2:8c:ae:48:8f:ef:97:53:3c:fe:86:93:
                    b6:2b:58:1b:57:13:1b:f5:3b:36:7f:57:ef:b5:7e:
                    74:5a:d1:99:55:fe:d2:2c:45:63:1a:d7:c2:e8:91:
                    2e:64:c6:39:7c:10:52:e4:01:30:97:ad:54:76:5a:
                    14:dd:44:68:4b:9b:06:c3:04:63:e5:e5:a8:73:1a:
                    17:2e:af:59:c5:ed:d2:52:0d:d0:be:2a:60:5b:f3:
                    01:a8:b5:3a:c6:5a:ee:2d:e2:09:77:95:3b:52:ee:
                    e2:fe:56:dd:35:eb:48:44:e5:9c:a2:1a:b3:e5:b8:
                    82:fa:ba:08:76:8d:ea:51:6c:6b:52:80:e0:91:ad:
                    13:b7:30:e8:cc:db:49:53:80:18:71:02:00:27:63:
                    3a:43:d7:8f:14:47:82:a9:c5:7c:00:03:30:3d:05:
                    56:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B5:F8:BD:26:88:43:EC:DA:15:4F:8B:F7:68:3A:C1:C5:AA:D4:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl

            X509v3 Authority Key Identifier:
                keyid:F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.213.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:6f:91:72:b2:18:83:c0:7e:f1:d9:ac:70:59:4d:97:b6:
         b0:7f:86:cc:7d:45:64:06:d4:0a:12:47:2f:be:ce:fc:c4:c4:
         15:92:e9:2d:03:49:3b:b3:49:f8:00:e8:dd:79:cf:58:38:fc:
         66:1b:a8:11:f1:4b:d9:9e:ca:15:1c:ef:37:e5:43:de:3e:eb:
         d8:d8:2d:8c:f1:bc:30:fb:ba:15:83:26:2f:e0:c2:cb:bd:79:
         12:23:2d:2a:de:1c:cc:b9:26:db:0e:bb:41:cf:94:dd:c8:e5:
         0c:51:b8:47:cd:27:7f:f8:cc:15:06:07:b8:e6:f4:9c:be:34:
         b7:97:2b:a6:37:38:62:35:12:53:30:fd:8a:b7:da:db:be:d6:
         cd:b0:d7:65:76:cd:99:4d:a4:d4:7d:2e:7a:9f:7a:20:8f:d8:
         da:e0:65:0c:1f:a4:14:ce:3e:ee:11:9a:39:d9:aa:55:b4:2d:
         fc:37:bb:34:28:0f:0b:7b:38:e8:87:fa:3d:01:06:1f:4c:0f:
         3e:c4:73:d6:5f:f8:ae:0f:b5:e5:0f:f6:76:82:81:38:70:a3:
         2a:89:bb:6a:93:a8:b7:eb:c9:61:59:3f:52:11:72:84:cc:b7:
         9c:cc:a2:4b:c7:10:20:9f:71:36:c0:ec:2a:f4:d0:0b:55:07:
         59:a1:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:09:27 2025 by rpki-client