Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/01401ee6-b2d2-3859-8d40-cdf1833f1fab.roa
File:                     01401ee6-b2d2-3859-8d40-cdf1833f1fab.roa (raw, json)
Hash identifier:          12qj+RBcZMkRZEhLBGusZeonBhFtaf2bIp97Dqjn2c8=
Subject key identifier:   EA:8A:9D:E6:D3:AC:4B:7E:DC:D7:62:12:A1:A6:5D:3D:09:CA:E7:0E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B627A2ABCC240FF964A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/01401ee6-b2d2-3859-8d40-cdf1833f1fab.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        24.172.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b6:27:a2:ab:cc:24:0f:f9:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=f6a6e857-ee9e-41d7-9439-c4548fbf6700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:23:d5:bb:12:d0:2d:9b:c3:41:a3:85:45:
                    fb:cd:f1:bd:9d:84:e4:b4:a1:62:32:8f:01:9f:f1:
                    95:8c:3e:7e:57:05:5d:ea:ea:37:65:83:f2:fa:c3:
                    14:bf:c7:44:e8:05:9b:62:04:6b:f9:7b:53:6e:14:
                    de:db:93:27:43:58:68:16:1e:70:4a:a3:fa:18:72:
                    e9:a8:b4:eb:98:bc:1f:3a:e7:d7:f7:8f:bb:5e:b4:
                    a0:64:63:f9:cc:17:d8:4d:68:ea:ee:52:18:45:0c:
                    c7:ec:7c:bf:cc:96:0b:7e:4f:80:3b:36:ee:b9:51:
                    f3:2f:86:ff:7f:47:cc:05:3b:1e:66:5d:f0:aa:75:
                    61:34:f0:65:ff:5b:d7:aa:69:8e:45:f1:3a:4a:8a:
                    df:13:59:c6:6b:0e:42:9e:2d:44:68:d1:2f:81:42:
                    01:36:98:41:8b:1c:bb:f1:84:36:76:fd:ae:9f:95:
                    d2:df:a5:fb:1c:0d:ea:57:b3:d0:11:66:60:7b:2d:
                    03:b8:4f:c2:14:2a:b2:c4:78:54:ca:6a:dc:0c:4b:
                    0c:d2:04:6c:8e:4f:32:79:48:20:b1:21:8f:0e:0b:
                    6b:ea:e4:f7:19:b9:00:96:19:2e:cc:be:da:54:81:
                    7f:6f:fa:b2:46:8b:45:c3:f4:62:9d:8f:67:f3:4e:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8A:9D:E6:D3:AC:4B:7E:DC:D7:62:12:A1:A6:5D:3D:09:CA:E7:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/01401ee6-b2d2-3859-8d40-cdf1833f1fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:4e:e2:33:86:88:76:56:01:b2:c2:ab:ec:d4:0a:51:e2:
         f7:29:22:c5:1e:b4:0e:52:04:3c:b8:9a:b3:ff:9c:fc:f9:33:
         82:74:ef:ee:67:8d:04:2e:f2:4f:d5:df:e6:c1:8e:52:81:c2:
         b9:04:ed:ee:d5:6d:f5:02:6d:a4:5c:2c:64:86:16:d7:09:fa:
         fe:c2:8b:0e:95:9d:0b:bc:2f:8c:66:ac:95:31:86:fb:ca:92:
         74:cd:04:5a:23:1a:a1:6c:ad:f2:f9:47:b9:d6:ee:0a:b3:75:
         93:79:4f:70:14:e9:e9:c1:ef:ed:78:f3:93:be:2b:0e:ef:88:
         93:1f:7c:da:32:81:34:b4:c6:50:91:c4:a8:3b:f2:da:1a:e6:
         ab:11:c2:54:f7:47:51:df:6c:63:aa:45:ba:d1:ba:f3:3b:97:
         44:ae:d1:5b:a5:37:6d:68:02:2c:0e:8a:fa:ba:b9:a2:f0:2c:
         a9:c3:f0:2e:d0:05:1b:58:fd:21:e4:2b:ff:c2:a9:cf:84:3a:
         59:72:b4:c0:57:46:21:bb:05:3b:a0:7c:72:29:d3:76:ab:b6:
         be:c0:ae:3a:6e:26:8d:a7:ed:25:21:2c:a2:48:d2:2a:12:07:
         20:9c:7f:5f:fb:be:d3:8d:43:46:42:7a:5b:98:08:35:b7:c8:
         62:fa:42:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0bYnoqvMJA/5ZKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZjZhNmU4NTctZWU5ZS00MWQ3LTk0MzktYzQ1NDhmYmY2NzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp0j1bsS0C2bw0GjhUX7zfG9nYTktKFiMo8B
n/GVjD5+VwVd6uo3ZYPy+sMUv8dE6AWbYgRr+XtTbhTe25MnQ1hoFh5wSqP6GHLp
qLTrmLwfOufX94+7XrSgZGP5zBfYTWjq7lIYRQzH7Hy/zJYLfk+AOzbuuVHzL4b/
f0fMBTseZl3wqnVhNPBl/1vXqmmORfE6SorfE1nGaw5Cni1EaNEvgUIBNphBixy7
8YQ2dv2un5XS36X7HA3qV7PQEWZgey0DuE/CFCqyxHhUymrcDEsM0gRsjk8yeUgg
sSGPDgtr6uT3GbkAlhkuzL7aVIF/b/qyRotFw/RinY9n806QrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOqKnebTrEt+3NdiEqGmXT0JyucOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMDE0MDFlZTYtYjJkMi0z
ODU5LThkNDAtY2RmMTgzM2YxZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGKzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADU+TuIzhoh2VgGywqvs1ApR4vcpIsUetA5SBDy4mrP/nPz5M4J07+5n
jQQu8k/V3+bBjlKBwrkE7e7VbfUCbaRcLGSGFtcJ+v7Ciw6VnQu8L4xmrJUxhvvK
knTNBFojGqFsrfL5R7nW7gqzdZN5T3AU6enB7+1485O+Kw7viJMffNoygTS0xlCR
xKg78toa5qsRwlT3R1HfbGOqRbrRuvM7l0Su0VulN21oAiwOivq6uaLwLKnD8C7Q
BRtY/SHkK//Cqc+EOllytMBXRiG7BTugfHIp03artr7ArjpuJo2n7SUhLKJI0ioS
ByCcf1/7vtONQ0ZCeluYCDW3yGL6QoQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:02 2025 by rpki-client