Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/37c14d4c-41a2-3220-a1a9-a51ace3e0189.roa
File:                     37c14d4c-41a2-3220-a1a9-a51ace3e0189.roa (raw, json)
Hash identifier:          HeHaKKTqKJs5xeyvGZ7lg5qKRciOf8O6ta3bBloxbjo=
Subject key identifier:   0D:16:E3:A1:92:AC:68:BE:29:5E:D2:8C:BF:C0:34:8F:8F:F7:B5:B2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0BE58C4BB4C84467D5C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/37c14d4c-41a2-3220-a1a9-a51ace3e0189.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        97.104.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:be:58:c4:bb:4c:84:46:7d:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=35a12a5e-1428-4ae8-86af-d52a3fee7fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:f1:4e:6a:c5:39:29:f2:bb:3d:a4:9a:c4:
                    af:3a:d9:0b:f3:50:a7:44:00:7b:0c:48:b8:1d:7f:
                    c2:c0:f3:32:4c:93:56:68:94:3f:a7:78:bc:97:c3:
                    bb:c6:b4:95:78:3b:3d:57:77:bf:41:49:4d:ee:54:
                    f7:bf:44:d6:52:ef:21:32:6f:f8:35:78:0a:c8:2c:
                    3e:5b:d4:ae:25:0a:9e:63:b8:62:39:0f:80:91:50:
                    80:bc:b6:1f:c6:e1:20:e9:0f:89:b9:11:01:36:8f:
                    f2:c9:e3:1d:21:ec:23:85:41:f4:47:19:5f:09:84:
                    ea:e8:b0:f4:eb:6f:6f:3d:57:e0:0e:96:29:18:26:
                    a2:24:55:11:fd:47:27:ca:99:43:9d:01:03:9b:be:
                    1a:2a:f2:c6:0f:87:a8:d1:f3:e4:98:a2:c1:bf:3c:
                    dc:6f:d4:45:7c:59:23:f5:48:47:43:de:64:21:eb:
                    3a:5c:82:3d:f4:31:8d:19:fc:28:7b:19:57:9e:31:
                    57:3a:c2:4e:ec:1a:47:94:b1:2c:f6:61:ae:eb:11:
                    a9:dc:b1:25:29:87:ab:8d:f3:a1:86:76:63:81:66:
                    ce:f6:8a:83:d8:45:01:3f:d2:71:e2:df:14:f0:c0:
                    b7:55:60:1d:86:9e:8d:d2:59:85:3a:d4:04:8f:2e:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:16:E3:A1:92:AC:68:BE:29:5E:D2:8C:BF:C0:34:8F:8F:F7:B5:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/37c14d4c-41a2-3220-a1a9-a51ace3e0189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ca:86:5e:57:12:c8:04:2f:c7:49:d2:8a:3a:ec:b5:c1:fe:
         77:d4:07:02:9b:08:6a:da:ff:3e:c6:42:9f:91:dd:67:4c:f8:
         de:73:7e:ae:f1:12:d3:c5:b0:95:80:52:81:30:de:35:9b:00:
         a3:c6:ab:75:ea:4b:6f:46:32:22:a0:c5:af:ba:5c:98:57:7e:
         2f:09:7d:71:84:75:33:8e:84:ba:e9:4e:6e:89:19:14:4f:a6:
         da:38:c9:21:6d:4a:19:fd:00:01:5b:d6:7f:ce:cc:6f:16:ab:
         46:f2:5c:28:1a:ec:3d:8d:b5:a0:f8:d5:55:e7:1f:bc:d5:0e:
         7d:be:5a:b9:d9:33:be:de:5f:04:9d:ec:3a:01:18:0c:01:32:
         b5:5c:fc:0c:19:78:0a:9f:8d:52:b2:a8:a0:08:ed:70:8c:a3:
         48:d7:2c:b4:37:7a:ef:bf:c7:27:9f:62:c5:d0:7b:a6:e9:4c:
         b6:bb:b8:28:ad:ac:fc:4a:42:6b:21:8f:42:01:32:77:a8:eb:
         b0:9b:8d:1b:47:b1:f5:df:9b:42:8f:b5:95:3e:17:5b:95:53:
         7f:5e:2e:1a:84:ba:2f:0f:5e:c5:f1:29:29:94:07:38:d2:11:
         f7:5a:6c:0c:86:5e:dd:dc:b9:1b:53:3d:1f:76:c5:ba:05:89:
         77:a8:7a:72
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcioL5YxLtMhEZ9XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
MzVhMTJhNWUtMTQyOC00YWU4LTg2YWYtZDUyYTNmZWU3ZmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniTxTmrFOSnyuz2kmsSvOtkL81CnRAB7DEi4
HX/CwPMyTJNWaJQ/p3i8l8O7xrSVeDs9V3e/QUlN7lT3v0TWUu8hMm/4NXgKyCw+
W9SuJQqeY7hiOQ+AkVCAvLYfxuEg6Q+JuREBNo/yyeMdIewjhUH0RxlfCYTq6LD0
629vPVfgDpYpGCaiJFUR/UcnyplDnQEDm74aKvLGD4eo0fPkmKLBvzzcb9RFfFkj
9UhHQ95kIes6XII99DGNGfwoexlXnjFXOsJO7BpHlLEs9mGu6xGp3LElKYerjfOh
hnZjgWbO9oqD2EUBP9Jx4t8U8MC3VWAdhp6N0lmFOtQEjy7+zwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA0W46GSrGi+KV7SjL/ANI+P97WyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMzdjMTRkNGMtNDFhMi0z
MjIwLWExYTktYTUxYWNlM2UwMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYWgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARMqGXlcSyAQvx0nSijrstcH+d9QHApsIatr/PsZCn5HdZ0z43nN+rvES
08WwlYBSgTDeNZsAo8ardepLb0YyIqDFr7pcmFd+Lwl9cYR1M46EuulObokZFE+m
2jjJIW1KGf0AAVvWf87MbxarRvJcKBrsPY21oPjVVecfvNUOfb5audkzvt5fBJ3s
OgEYDAEytVz8DBl4Cp+NUrKooAjtcIyjSNcstDd677/HJ59ixdB7pulMtru4KK2s
/EpCayGPQgEyd6jrsJuNG0ex9d+bQo+1lT4XW5VTf14uGoS6Lw9exfEpKZQHONIR
91psDIZe3dy5G1M9H3bFugWJd6h6cg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:01 2024 by rpki-client on console-ams.rpki-client.org