Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/22c281e5-8349-38d0-84f9-1380c58300f3.roa
File:                     22c281e5-8349-38d0-84f9-1380c58300f3.roa (raw, json)
Hash identifier:          UmY/C3DB8D/brNf0qBg+NP8Eqp4UYff1CbjFZ7kFDy0=
Subject key identifier:   86:9E:F7:CB:A5:A5:71:D2:82:71:02:C2:D5:70:28:C5:D5:F9:50:C6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A142ADBEC362AD0A555100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/22c281e5-8349-38d0-84f9-1380c58300f3.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        24.173.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:42:ad:be:c3:62:ad:0a:55:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=b40f3e2c-92f2-4fba-b3e5-798b4871fa76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:90:a5:31:25:e1:ce:a5:e5:18:03:7b:61:6e:
                    7a:f3:b6:5d:b4:3b:74:39:de:fb:43:50:be:90:d6:
                    a7:0b:1c:c4:ce:e3:3e:f0:16:d9:17:2a:83:a6:af:
                    3e:4b:06:c1:b5:29:de:9a:7f:2b:14:5c:28:17:67:
                    b2:f5:51:32:6b:92:71:32:1b:84:9f:36:60:0d:cc:
                    9b:45:84:8f:a5:19:38:1b:4f:c6:36:b2:a6:5b:5e:
                    9b:da:b2:c8:8e:fc:40:3c:fa:48:c0:1a:08:17:cb:
                    18:2c:69:da:7e:ec:f9:4a:2e:05:1e:74:3f:cb:ab:
                    59:15:fe:4a:1b:64:3e:e7:94:bf:f2:1a:7a:e4:7b:
                    c2:79:21:f1:f0:e7:22:24:36:0b:9b:2a:39:52:56:
                    be:f5:f3:a9:d0:c2:04:dd:10:c1:eb:1a:3d:7a:c3:
                    93:27:39:15:0f:79:bf:c0:76:d3:25:93:4a:2d:5e:
                    04:33:24:de:48:49:a4:24:f7:95:18:0f:99:6a:33:
                    b1:ed:5d:f2:f3:a1:26:fd:19:5c:2e:6c:97:0d:29:
                    af:10:4d:99:6a:3b:fe:da:d1:6b:7a:cb:aa:bf:56:
                    70:7d:90:93:78:ea:d9:82:a8:82:2b:ba:7f:ef:0c:
                    a3:f9:ae:4f:d2:c4:c5:92:cf:00:07:0f:c9:da:30:
                    91:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9E:F7:CB:A5:A5:71:D2:82:71:02:C2:D5:70:28:C5:D5:F9:50:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/22c281e5-8349-38d0-84f9-1380c58300f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.173.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d9:9d:11:f8:26:ad:87:f3:8e:3c:cf:2c:95:9b:c0:c4:3b:
         24:ec:3e:57:f5:24:10:80:fd:78:b1:06:2e:7a:83:56:63:9e:
         bc:07:ab:ab:c4:5c:d9:b1:d7:a7:fa:45:e1:3a:78:83:16:da:
         b8:38:d2:bb:0c:ea:63:b8:2c:ed:05:d1:18:76:95:13:8b:be:
         c2:1c:1f:ed:23:5d:50:00:2b:2e:b2:4a:ad:d3:3c:50:3f:00:
         68:75:b8:69:a4:d5:bd:fd:71:06:ca:4b:f2:66:35:a6:fb:64:
         fd:a3:f1:b7:35:21:9b:31:02:37:08:c5:cc:ab:c5:af:e1:07:
         68:25:c8:d6:bc:ea:64:f2:a1:cf:dc:9b:4c:4f:5a:a0:bb:55:
         db:d7:e1:ee:60:18:6d:e0:e7:8e:f6:dc:8b:da:13:c7:de:c5:
         f1:a2:f4:75:2e:1e:6c:36:24:0e:c9:54:26:05:a8:2c:f0:fd:
         82:47:82:90:ba:45:c8:11:60:aa:54:bd:5a:39:c9:eb:5d:31:
         32:4d:92:29:2d:f6:5d:25:09:c1:08:a1:04:3b:a7:f1:4d:1b:
         f1:98:c5:30:41:eb:22:ce:1e:79:ef:ed:9f:94:a4:fa:b1:ee:
         76:26:2c:3b:e4:bf:84:cc:50:06:6c:75:e0:61:76:be:6f:55:
         d2:d6:be:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioUKtvsNirQpVUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
YjQwZjNlMmMtOTJmMi00ZmJhLWIzZTUtNzk4YjQ4NzFmYTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5ClMSXhzqXlGAN7YW5687ZdtDt0Od77Q1C+
kNanCxzEzuM+8BbZFyqDpq8+SwbBtSnemn8rFFwoF2ey9VEya5JxMhuEnzZgDcyb
RYSPpRk4G0/GNrKmW16b2rLIjvxAPPpIwBoIF8sYLGnafuz5Si4FHnQ/y6tZFf5K
G2Q+55S/8hp65HvCeSHx8OciJDYLmyo5Ula+9fOp0MIE3RDB6xo9esOTJzkVD3m/
wHbTJZNKLV4EMyTeSEmkJPeVGA+ZajOx7V3y86Em/RlcLmyXDSmvEE2Zajv+2tFr
esuqv1ZwfZCTeOrZgqiCK7p/7wyj+a5P0sTFks8ABw/J2jCRTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIae98ulpXHSgnECwtVwKMXV+VDGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjJjMjgxZTUtODM0OS0z
OGQwLTg0ZjktMTM4MGM1ODMwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGK1xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTZnRH4Jq2H8448zyyVm8DEOyTsPlf1JBCA/XixBi56g1ZjnrwHq6vE
XNmx16f6ReE6eIMW2rg40rsM6mO4LO0F0Rh2lROLvsIcH+0jXVAAKy6ySq3TPFA/
AGh1uGmk1b39cQbKS/JmNab7ZP2j8bc1IZsxAjcIxcyrxa/hB2glyNa86mTyoc/c
m0xPWqC7VdvX4e5gGG3g54723IvaE8fexfGi9HUuHmw2JA7JVCYFqCzw/YJHgpC6
RcgRYKpUvVo5yetdMTJNkikt9l0lCcEIoQQ7p/FNG/GYxTBB6yLOHnnv7Z+UpPqx
7nYmLDvkv4TMUAZsdeBhdr5vVdLWvmw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:23 2024 by rpki-client on console-fra.rpki-client.org