Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f63bb38-795c-3d4e-8829-bcfbc3624aea.roa
File:                     1f63bb38-795c-3d4e-8829-bcfbc3624aea.roa (raw, json)
Hash identifier:          Dqp1IcTYVy/PI+MGAodmUE96te9ESnNB+aFrgkLvRck=
Subject key identifier:   69:F9:94:73:B9:C1:C0:28:17:0D:71:BA:1B:C7:D3:EB:D8:ED:BA:03
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DCE1523477B32D9B8F4A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f63bb38-795c-3d4e-8829-bcfbc3624aea.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     16787
IP address blocks:        2001:1998:280::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:ce:15:23:47:7b:32:d9:b8:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=344fe885-aedd-41e5-9a93-025c1908f7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:60:ef:46:52:57:aa:26:07:e2:d5:00:27:ce:
                    ba:5a:31:cc:b6:67:82:86:8f:69:03:d1:59:9e:6e:
                    b3:aa:4d:73:7f:6c:a7:b7:6b:99:0b:06:34:3f:46:
                    db:43:3a:dc:46:dd:20:69:10:87:08:e1:25:f6:67:
                    45:c7:9b:9a:36:7a:9a:f5:18:11:71:86:8f:37:14:
                    29:0f:fe:b4:8a:8d:41:34:2d:6e:94:79:b8:54:27:
                    24:27:28:68:82:d1:f8:ff:41:1f:0d:06:6e:b2:02:
                    34:a4:71:65:00:d2:73:a3:23:89:8d:85:81:29:a9:
                    78:00:ea:79:da:ee:f6:ba:38:a2:44:f1:db:d0:3c:
                    cb:3f:91:eb:3f:b3:9a:39:9b:d4:03:59:84:89:4b:
                    59:f4:1a:e8:53:15:00:5f:d1:b7:b3:37:dc:e7:7f:
                    2d:1e:24:9e:f4:f4:61:96:2b:0d:11:77:db:fa:f2:
                    a4:aa:51:e0:f4:68:43:f1:b2:2b:bb:88:c0:70:5a:
                    6a:79:c8:a0:25:56:89:13:e8:c3:f5:63:53:79:33:
                    b8:06:b9:09:5b:a6:39:56:65:c7:35:f4:ee:d6:81:
                    53:22:6d:61:15:b4:76:b2:50:0b:3a:e8:83:22:1e:
                    76:34:0a:ed:f3:62:5b:50:ee:af:d5:08:db:7a:67:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F9:94:73:B9:C1:C0:28:17:0D:71:BA:1B:C7:D3:EB:D8:ED:BA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f63bb38-795c-3d4e-8829-bcfbc3624aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1998:280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:6b:c4:35:a4:6e:90:f9:db:6b:9b:b5:fa:0a:b4:05:20:
         41:34:e6:ab:ae:2a:0c:09:a4:19:f4:0e:00:20:55:fb:31:05:
         c2:d4:e5:bd:e0:66:82:f1:0e:b8:59:35:fc:da:19:33:c0:4e:
         7a:43:3f:b1:cd:dc:83:a2:a1:0f:fd:35:0b:cd:f0:4f:05:37:
         e5:42:fa:36:f8:05:6a:10:ac:b8:3c:d5:db:42:49:8d:07:35:
         7b:12:e4:ce:db:95:cf:f4:46:11:a4:a1:b6:ee:f5:fb:63:48:
         d9:35:c9:57:11:59:91:06:d1:32:c3:55:c6:17:0e:f0:f5:4b:
         53:6f:32:46:40:98:56:f1:fe:21:30:cb:3c:db:c4:46:02:91:
         f7:fa:f9:ab:49:eb:6a:67:54:20:72:ed:9a:1c:08:34:19:6a:
         0e:a9:3e:67:c4:72:e3:10:54:68:2e:bc:fe:f1:1d:b8:80:36:
         7c:74:c5:cb:fe:e5:89:ae:58:92:eb:48:a9:21:5c:b2:bd:f0:
         a7:d1:ea:f1:36:af:de:8c:15:73:ee:6c:69:8f:53:b6:7c:37:
         8e:9c:41:f8:e0:93:a3:81:7b:ba:af:2f:b9:45:63:40:74:1a:
         c7:40:b7:e3:0b:5a:47:14:14:41:75:8c:29:41:7e:8b:3d:08:
         f3:19:e8:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVijc4VI0d7Mtm49KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MzQ0ZmU4ODUtYWVkZC00MWU1LTlhOTMtMDI1YzE5MDhmN2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WDvRlJXqiYH4tUAJ866WjHMtmeCho9pA9FZ
nm6zqk1zf2ynt2uZCwY0P0bbQzrcRt0gaRCHCOEl9mdFx5uaNnqa9RgRcYaPNxQp
D/60io1BNC1ulHm4VCckJyhogtH4/0EfDQZusgI0pHFlANJzoyOJjYWBKal4AOp5
2u72ujiiRPHb0DzLP5HrP7OaOZvUA1mEiUtZ9BroUxUAX9G3szfc538tHiSe9PRh
lisNEXfb+vKkqlHg9GhD8bIru4jAcFpqecigJVaJE+jD9WNTeTO4BrkJW6Y5VmXH
NfTu1oFTIm1hFbR2slALOuiDIh52NArt82JbUO6v1Qjbemc4ywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGn5lHO5wcAoFw1xuhvH0+vY7boDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMWY2M2JiMzgtNzk1Yy0z
ZDRlLTg4MjktYmNmYmMzNjI0YWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHIAEZmAKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABO/a8Q1pG6Q+dtrm7X6CrQFIEE05quuKgwJpBn0DgAgVfsxBcLU
5b3gZoLxDrhZNfzaGTPATnpDP7HN3IOioQ/9NQvN8E8FN+VC+jb4BWoQrLg81dtC
SY0HNXsS5M7blc/0RhGkobbu9ftjSNk1yVcRWZEG0TLDVcYXDvD1S1NvMkZAmFbx
/iEwyzzbxEYCkff6+atJ62pnVCBy7ZocCDQZag6pPmfEcuMQVGguvP7xHbiANnx0
xcv+5YmuWJLrSKkhXLK98KfR6vE2r96MFXPubGmPU7Z8N46cQfjgk6OBe7qvL7lF
Y0B0GsdAt+MLWkcUFEF1jClBfos9CPMZ6No=
-----END CERTIFICATE-----
Generated at Wed May 1 15:55:55 2024 by rpki-client on console-ams.rpki-client.org