Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a8fc802-9e58-3fa1-be39-940fa9664733.roa
File:                     0a8fc802-9e58-3fa1-be39-940fa9664733.roa (raw, json)
Hash identifier:          WSUZ36fVhOvpycD4ymH8D6/G+SvGLGWVxfHmmhn+Aq8=
Subject key identifier:   D8:DF:C0:1A:B7:FB:DA:30:81:68:5A:21:72:09:C2:B5:1C:2C:01:3A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C41147D43CF6EF65B300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a8fc802-9e58-3fa1-be39-940fa9664733.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        24.160.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c4:11:47:d4:3c:f6:ef:65:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=68b9373d-db29-464e-bf48-59d1404a244f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:a8:b0:b4:f9:20:b9:69:32:0d:4d:7d:22:
                    eb:58:7a:b7:07:49:ed:b1:04:df:94:cd:d8:4c:cc:
                    24:7f:9e:bb:2c:9e:b6:dc:0b:f2:fc:cc:c1:9c:aa:
                    ed:0e:7b:10:e3:b9:66:a0:2b:4b:96:55:b6:49:21:
                    d8:cf:bc:e0:c5:9e:41:d3:d1:a9:0e:3f:ce:c4:fd:
                    70:bf:8d:a3:aa:5e:d5:98:66:70:58:af:5d:4b:c3:
                    cc:45:7f:09:d3:8b:2d:34:55:46:a6:77:57:8f:11:
                    12:7e:8c:24:4a:09:c9:2b:78:67:87:44:6f:05:4a:
                    e2:7a:64:39:59:51:f7:5a:76:f6:23:82:eb:9c:56:
                    b5:37:c2:7d:cf:fb:c1:0b:77:74:d8:f6:ac:2f:de:
                    47:93:0c:26:93:9c:ef:bf:ed:d9:bc:3a:83:29:48:
                    2d:9d:04:fa:e9:03:0b:2b:cc:7a:70:88:34:73:74:
                    0a:f7:44:eb:9f:1a:ea:e7:81:e1:4e:c0:f6:7f:18:
                    da:58:87:6e:20:4e:2c:9f:d7:dc:45:82:14:ab:6a:
                    a2:04:22:dd:25:20:58:35:04:6f:cd:e6:e9:e5:4f:
                    64:a4:65:7c:c7:8b:ec:c4:c3:f7:13:30:34:d7:86:
                    bc:ef:a7:a9:49:f5:86:bd:c6:b1:9f:5c:ce:74:40:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:C0:1A:B7:FB:DA:30:81:68:5A:21:72:09:C2:B5:1C:2C:01:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a8fc802-9e58-3fa1-be39-940fa9664733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6d:dc:08:1d:af:af:be:5a:45:fc:78:86:77:e2:95:35:00:
         bf:ad:6b:d2:c9:20:f8:ed:9e:9f:5d:fb:9d:dc:f4:18:54:00:
         25:46:43:56:bc:18:2d:e9:d7:a3:41:ac:9a:04:c2:d8:cc:f5:
         0e:5e:19:ed:3f:16:6c:16:d8:fa:d6:7c:8f:2c:90:a0:83:e1:
         db:7c:3e:9a:c2:6b:70:e0:ac:f8:88:38:d6:9f:2f:7e:28:30:
         22:f8:5c:81:3d:eb:74:a8:42:13:d3:3b:cd:c9:fc:78:15:96:
         e9:a5:6c:79:67:8e:76:cc:3e:6c:ca:0f:b1:f4:3f:f4:30:76:
         90:34:1a:91:21:f6:af:a4:55:f1:3e:df:0d:96:76:ae:18:2e:
         41:2a:73:ff:ad:76:20:d7:a1:79:c1:76:f9:72:1a:5b:ba:35:
         8b:63:6a:d1:78:9c:9e:2a:ab:6b:e0:cf:fb:7c:9f:fb:51:24:
         ff:36:27:f9:24:0c:4e:40:99:e8:00:5d:9e:ae:ef:43:74:b4:
         09:f0:01:d3:b9:3e:c9:5c:79:7d:21:e4:f9:23:1c:5a:b4:78:
         8a:10:47:d1:95:f5:2e:2e:70:f6:6e:43:c1:20:91:66:79:76:
         27:c0:4d:5c:1e:7e:fc:2c:76:ab:4f:c9:f0:f9:87:66:c0:0f:
         b1:7b:ff:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0cQRR9Q89u9lswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NjhiOTM3M2QtZGIyOS00NjRlLWJmNDgtNTlkMTQwNGEyNDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sqosLT5ILlpMg1NfSLrWHq3B0ntsQTflM3Y
TMwkf567LJ623Avy/MzBnKrtDnsQ47lmoCtLllW2SSHYz7zgxZ5B09GpDj/OxP1w
v42jql7VmGZwWK9dS8PMRX8J04stNFVGpndXjxESfowkSgnJK3hnh0RvBUriemQ5
WVH3Wnb2I4LrnFa1N8J9z/vBC3d02PasL95Hkwwmk5zvv+3ZvDqDKUgtnQT66QML
K8x6cIg0c3QK90Trnxrq54HhTsD2fxjaWIduIE4sn9fcRYIUq2qiBCLdJSBYNQRv
zebp5U9kpGV8x4vsxMP3EzA014a876epSfWGvcaxn1zOdED1aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjfwBq3+9owgWhaIXIJwrUcLAE6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMGE4ZmM4MDItOWU1OC0z
ZmExLWJlMzktOTQwZmE5NjY0NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGKAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpt3Agdr6++WkX8eIZ34pU1AL+ta9LJIPjtnp9d+53c9BhUACVGQ1a8
GC3p16NBrJoEwtjM9Q5eGe0/FmwW2PrWfI8skKCD4dt8PprCa3DgrPiIONafL34o
MCL4XIE963SoQhPTO83J/HgVlumlbHlnjnbMPmzKD7H0P/QwdpA0GpEh9q+kVfE+
3w2Wdq4YLkEqc/+tdiDXoXnBdvlyGlu6NYtjatF4nJ4qq2vgz/t8n/tRJP82J/kk
DE5AmegAXZ6u70N0tAnwAdO5PslceX0h5PkjHFq0eIoQR9GV9S4ucPZuQ8EgkWZ5
difATVwefvwsdqtPyfD5h2bAD7F7/7E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:20:56 2025 by rpki-client