Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00c3c7c1-d3d6-3359-8b18-7f84492621be.roa
File:                     00c3c7c1-d3d6-3359-8b18-7f84492621be.roa (raw, json)
Hash identifier:          jYieM0ApOwlMY40VdjPa6v2RzkGtSV46R1NCz86TICU=
Subject key identifier:   F1:35:0B:E5:F5:8A:FE:69:93:B0:71:75:C0:44:CD:E1:A4:D2:3E:D6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584434CDD691932AA8933FAE2500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00c3c7c1-d3d6-3359-8b18-7f84492621be.roa
Signing time:             Tue 12 Dec 2023 12:00:00 +0000
ROA not before:           Tue 12 Dec 2023 12:00:00 +0000
ROA not after:            Wed 05 Feb 2025 05:00:00 +0000
asID:                     33363
IP address blocks:        97.97.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:34:cd:d6:91:93:2a:a8:93:3f:ae:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 12 12:00:00 2023 GMT
            Not After : Feb  5 05:00:00 2025 GMT
        Subject: CN=b8753c0a-1587-4d0c-95dd-e78976aa2b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:4b:6e:de:0b:ce:e3:42:20:4f:cc:8c:5b:
                    05:2b:35:24:d7:9d:c8:3a:3d:7e:ff:2c:3d:bd:f3:
                    86:19:4f:54:02:13:51:59:e1:81:81:d8:e7:2b:cd:
                    66:dd:75:a8:c9:61:af:54:9e:0a:5b:c1:54:2c:7e:
                    09:9f:ec:fc:50:36:00:f4:e1:4d:4f:3b:07:9d:ef:
                    57:4a:0a:18:52:99:ca:36:a3:e8:a3:3c:71:dc:e7:
                    d9:4f:96:d2:5a:ba:b7:49:25:21:23:e4:84:29:64:
                    5b:be:69:8c:56:71:12:5b:02:8d:83:85:8e:27:2f:
                    dd:b9:1a:0e:5c:3d:ee:ee:cc:b0:f5:7e:47:3b:8b:
                    87:6a:86:d9:dc:88:a5:bc:42:da:e8:aa:17:6c:e2:
                    27:dd:03:99:b0:5a:df:26:a6:ff:a9:69:52:86:f0:
                    15:4d:a7:a0:46:96:f3:a0:ed:3f:66:c4:78:34:d7:
                    38:1f:b1:9f:e8:c4:fd:33:61:7f:d6:c2:4c:6e:8a:
                    c1:1e:85:94:aa:5c:e9:47:88:cf:90:1b:67:80:12:
                    c1:6c:40:2d:91:3e:77:d4:d8:bd:a1:b1:f4:34:9b:
                    9d:19:dc:69:de:ec:18:93:fc:86:33:d8:69:38:4b:
                    ab:b4:63:43:61:ba:f0:31:df:59:a1:10:2b:71:25:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:35:0B:E5:F5:8A:FE:69:93:B0:71:75:C0:44:CD:E1:A4:D2:3E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00c3c7c1-d3d6-3359-8b18-7f84492621be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.97.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b0:a4:b0:f0:ae:ee:43:99:f2:5a:b8:5b:ab:b1:72:d8:7b:
         a8:b9:a1:f3:e9:9f:34:46:30:ac:32:c4:a9:6d:3e:28:16:5c:
         6a:32:18:35:81:18:e1:79:93:52:84:7a:80:3d:72:0f:d8:d0:
         58:6a:12:d2:fe:5e:f5:65:6d:a7:a7:1f:fd:24:2e:83:f7:4c:
         91:c8:bd:a7:57:58:08:c2:a5:ad:cb:fb:7a:cc:52:67:47:b7:
         18:ed:54:57:2b:5c:71:e8:66:af:62:c4:0d:f6:f7:95:c5:f5:
         d8:66:41:29:1e:50:ef:f9:d5:61:7b:9a:74:b4:a7:66:77:37:
         67:fd:62:54:ea:e5:a9:ef:e8:da:68:af:a1:d3:f5:44:a0:56:
         d8:a3:94:7b:fa:d7:38:a3:d5:60:ca:98:7e:dd:8d:52:a8:62:
         70:3e:33:76:20:52:04:bd:1d:98:9c:31:ec:96:5f:21:c7:29:
         25:28:c3:30:48:2b:3d:a3:ea:64:ee:a3:1e:b5:7a:a8:ad:b0:
         c8:86:da:3d:27:26:bd:db:7d:86:4b:5d:4a:3a:59:9a:f1:63:
         98:7c:db:92:47:25:8f:3b:4b:9f:13:f6:79:3c:89:1d:f3:ac:
         7a:34:c3:56:47:81:fb:85:27:a9:7f:af:d6:2c:8c:01:06:de:
         d0:4e:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----