Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42747091-c1e9-388b-bf34-1573d02361fa.roa
File:                     42747091-c1e9-388b-bf34-1573d02361fa.roa (raw, json)
Hash identifier:          4a9w1QImt9Az+6R5pJVstmCBcEjQyaQytcAd3Bqhmk4=
Subject key identifier:   DD:48:41:97:0D:5F:16:02:F5:73:22:59:79:11:63:E2:B1:1B:53:E7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E4265B0E3305D874BB540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42747091-c1e9-388b-bf34-1573d02361fa.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        107.9.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:42:65:b0:e3:30:5d:87:4b:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=451cb2dc-ca0c-49c3-a787-ad13a1a667ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:3e:00:0a:ee:df:dd:04:28:17:b6:72:b0:
                    a8:db:6e:3e:27:b9:91:d8:79:2d:18:9c:b2:90:23:
                    b9:78:ec:f7:a5:1c:48:1c:6d:ed:78:0b:f6:c9:b7:
                    c6:62:f7:1b:3b:bf:42:c6:32:0d:60:be:e5:01:be:
                    61:20:4e:10:4d:c3:10:14:6d:87:7c:78:9c:80:a0:
                    05:08:d3:2b:33:cf:3f:16:14:dd:f7:af:a3:69:57:
                    e6:b3:20:81:8d:d5:7d:62:31:19:ec:9e:94:8c:2f:
                    08:9c:44:f4:60:ea:d7:9a:48:54:64:b5:43:09:9e:
                    11:87:ed:b7:42:7b:66:ee:e7:5e:b3:45:4c:98:3d:
                    0a:e8:7c:62:09:39:46:47:f6:dc:d6:84:f2:a1:ef:
                    fd:c9:c3:0f:08:ef:a5:08:55:09:0e:0a:8d:dc:74:
                    4f:e8:4f:e9:fd:51:77:ce:c2:07:65:5d:2e:8f:9e:
                    0e:4b:93:71:2f:08:d6:2b:fd:e4:13:da:77:0e:4e:
                    d5:75:92:4d:47:db:d7:d8:29:44:40:23:55:f2:01:
                    4b:f1:3a:d8:e1:8e:45:4c:b8:ae:4f:cb:9c:6d:b5:
                    18:91:38:ff:45:28:21:f9:58:15:68:c0:22:9a:a7:
                    81:52:58:a1:62:cf:f6:1b:c9:0a:47:11:c3:38:39:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:48:41:97:0D:5F:16:02:F5:73:22:59:79:11:63:E2:B1:1B:53:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42747091-c1e9-388b-bf34-1573d02361fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.9.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b7:4a:b6:ac:12:5d:7b:85:54:5c:89:86:9f:56:e2:e8:ce:
         c6:66:87:06:71:c9:3b:5b:09:c1:7d:72:08:62:5d:ae:f6:1d:
         3d:59:df:4b:f5:89:57:29:39:5d:39:dc:66:05:15:2b:c7:9b:
         37:09:c0:c5:72:56:df:09:55:70:63:ea:b4:40:73:95:e1:f3:
         c3:50:a9:94:c0:d7:63:4f:7b:7b:bb:8c:32:04:b3:97:26:73:
         23:a1:7c:99:d6:e0:fe:fa:e5:25:1f:9e:92:04:4c:d5:9a:af:
         81:9f:24:90:72:e0:d2:1b:6b:37:75:1a:fa:04:96:80:26:95:
         3a:6c:16:15:81:9a:93:0a:a2:5d:04:1f:29:bf:83:9b:5e:e8:
         6a:77:6d:5c:c5:a8:1b:63:be:4a:60:a2:fa:a2:5e:85:c5:63:
         c9:ec:2a:58:25:bd:63:58:45:1d:18:f9:c3:1b:29:50:48:22:
         8c:bf:7f:ff:3f:ec:fc:c9:a5:91:9c:a0:20:80:a1:9b:ac:49:
         32:c9:36:28:95:55:63:82:cb:2e:8c:84:a3:68:4a:0e:a5:2d:
         da:0b:3f:7c:8b:82:07:6d:02:82:01:7b:30:5e:ca:26:cf:e3:
         d0:f7:7b:5c:10:8b:05:bb:e4:5b:ed:40:9e:28:18:0a:28:5d:
         fd:2e:56:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijkJlsOMwXYdLtUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
NDUxY2IyZGMtY2EwYy00OWMzLWE3ODctYWQxM2ExYTY2N2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVg+AAru390EKBe2crCo224+J7mR2HktGJyy
kCO5eOz3pRxIHG3teAv2ybfGYvcbO79CxjINYL7lAb5hIE4QTcMQFG2HfHicgKAF
CNMrM88/FhTd96+jaVfmsyCBjdV9YjEZ7J6UjC8InET0YOrXmkhUZLVDCZ4Rh+23
Qntm7udes0VMmD0K6HxiCTlGR/bc1oTyoe/9ycMPCO+lCFUJDgqN3HRP6E/p/VF3
zsIHZV0uj54OS5NxLwjWK/3kE9p3Dk7VdZJNR9vX2ClEQCNV8gFL8TrY4Y5FTLiu
T8ucbbUYkTj/RSgh+VgVaMAimqeBUlihYs/2G8kKRxHDODnnwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1IQZcNXxYC9XMiWXkRY+KxG1PnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDI3NDcwOTEtYzFlOS0z
ODhiLWJmMzQtMTU3M2QwMjM2MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHawmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFK3SrasEl17hVRciYafVuLozsZmhwZxyTtbCcF9cghiXa72HT1Z30v1
iVcpOV053GYFFSvHmzcJwMVyVt8JVXBj6rRAc5Xh88NQqZTA12NPe3u7jDIEs5cm
cyOhfJnW4P765SUfnpIETNWar4GfJJBy4NIbazd1GvoEloAmlTpsFhWBmpMKol0E
Hym/g5te6Gp3bVzFqBtjvkpgovqiXoXFY8nsKlglvWNYRR0Y+cMbKVBIIoy/f/8/
7PzJpZGcoCCAoZusSTLJNiiVVWOCyy6MhKNoSg6lLdoLP3yLggdtAoIBezBeyibP
49D3e1wQiwW75FvtQJ4oGAooXf0uVn4=
-----END CERTIFICATE-----
Generated at Wed May 1 15:55:56 2024 by rpki-client on console-ams.rpki-client.org