Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa
File:                     4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa (raw, json)
Hash identifier:          alW/9s14EEoIQLoNoDmMrzNz/HiLOoUHBro5wCay4HQ=
Subject key identifier:   24:2D:DD:26:49:95:46:65:86:A2:57:90:3A:FF:47:9C:02:67:CA:DA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628D98E4A6395338F098FC80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        24.29.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:98:e4:a6:39:53:38:f0:98:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=aed39de3-6ac5-404e-9ddd-40642947a6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:5d:3f:6c:cd:a5:25:0f:d6:a3:6f:47:2e:
                    3e:be:7f:18:9a:99:3e:87:3d:6a:b4:6c:d7:e0:24:
                    0d:61:42:9d:1b:41:2c:f0:da:04:53:2f:56:b3:f9:
                    c6:ef:c5:01:5a:55:4b:48:8e:c4:73:e6:bd:52:60:
                    cd:d6:40:68:61:1e:25:46:69:36:02:22:5f:e7:cc:
                    47:54:6e:8e:71:89:30:bf:a7:49:30:c2:15:66:9d:
                    b1:8b:e8:7c:90:be:52:eb:4c:c4:fd:19:be:e6:eb:
                    ee:c8:ff:cf:ee:ac:d9:b8:c5:ac:99:2c:f1:20:0b:
                    0f:f2:e4:04:24:9a:0c:7b:a2:c9:d1:16:b0:63:6c:
                    4c:8b:78:61:0b:ae:f8:e4:47:b9:d7:a1:bb:52:27:
                    08:bb:c8:fd:b4:42:cc:02:72:07:d2:b3:cb:f0:6d:
                    fb:6c:e7:01:b8:1a:13:5b:35:84:be:20:d6:8b:d0:
                    54:35:5b:70:bc:7a:e7:69:ea:da:6f:2f:40:5f:2c:
                    e0:00:5a:ce:f8:58:34:fc:11:f6:30:a5:00:8e:1f:
                    c9:61:c6:67:61:7d:53:ad:90:74:53:30:d2:48:21:
                    5d:aa:da:03:42:91:87:19:51:09:9e:35:32:f6:47:
                    1e:fb:9c:03:3a:a3:d6:27:a1:dd:0e:ca:74:0c:68:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2D:DD:26:49:95:46:65:86:A2:57:90:3A:FF:47:9C:02:67:CA:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.29.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:9f:70:de:de:50:b5:18:68:6c:4c:f4:d3:b3:6a:f6:31:
         5c:40:da:53:fa:1b:80:fe:38:35:ca:f6:c3:18:f3:0e:13:6b:
         16:00:03:7c:57:15:2b:b0:f5:14:e5:d9:b9:00:37:0c:ce:2e:
         ca:a5:1d:52:e7:5d:84:4c:c5:3d:c6:91:1b:01:c7:a6:5e:78:
         26:22:41:81:b8:34:40:dc:7c:40:b7:10:4d:ea:c8:04:31:48:
         0c:5f:e6:fe:ac:7a:7f:8b:92:89:72:9e:67:45:bf:4a:0c:4a:
         bf:a1:eb:1e:70:f8:4d:f0:34:bc:2b:c2:aa:51:d5:5a:4f:2d:
         cc:c9:fc:bc:c0:ad:55:9d:2a:f9:f5:43:12:f2:dc:16:ce:5a:
         3c:a9:1c:c2:27:4e:c4:5d:53:19:65:d6:db:78:27:2f:04:d9:
         48:fd:10:f6:ca:ef:48:91:f6:6c:a3:d2:3a:84:db:77:77:f8:
         66:c2:a1:71:51:d8:d1:fc:58:dc:c0:66:4b:b5:7c:20:03:cb:
         a2:0d:80:20:5d:74:07:99:a8:04:a4:5e:ae:49:93:2c:7f:47:
         49:6d:0c:c4:e4:de:36:e5:ea:68:e9:df:1d:4d:c2:ce:8b:87:
         a3:17:45:2f:43:29:e8:7c:66:3a:7b:4b:5c:90:53:c2:4d:34:
         e9:c3:a9:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijZjkpjlTOPCY/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
YWVkMzlkZTMtNmFjNS00MDRlLTlkZGQtNDA2NDI5NDdhNmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmBdP2zNpSUP1qNvRy4+vn8Ympk+hz1qtGzX
4CQNYUKdG0Es8NoEUy9Ws/nG78UBWlVLSI7Ec+a9UmDN1kBoYR4lRmk2AiJf58xH
VG6OcYkwv6dJMMIVZp2xi+h8kL5S60zE/Rm+5uvuyP/P7qzZuMWsmSzxIAsP8uQE
JJoMe6LJ0RawY2xMi3hhC6745Ee516G7UicIu8j9tELMAnIH0rPL8G37bOcBuBoT
WzWEviDWi9BUNVtwvHrnaeraby9AXyzgAFrO+Fg0/BH2MKUAjh/JYcZnYX1TrZB0
UzDSSCFdqtoDQpGHGVEJnjUy9kce+5wDOqPWJ6HdDsp0DGj+swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQt3SZJlUZlhqJXkDr/R5wCZ8raMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNGNkNDdiM2YtNTgyNC0z
Yzk3LThlN2QtOGM1MjVmNmQzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGB0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEi4n3De3lC1GGhsTPTTs2r2MVxA2lP6G4D+ODXK9sMY8w4TaxYAA3xX
FSuw9RTl2bkANwzOLsqlHVLnXYRMxT3GkRsBx6ZeeCYiQYG4NEDcfEC3EE3qyAQx
SAxf5v6sen+LkolynmdFv0oMSr+h6x5w+E3wNLwrwqpR1VpPLczJ/LzArVWdKvn1
QxLy3BbOWjypHMInTsRdUxll1tt4Jy8E2Uj9EPbK70iR9myj0jqE23d3+GbCoXFR
2NH8WNzAZku1fCADy6INgCBddAeZqASkXq5Jkyx/R0ltDMTk3jbl6mjp3x1Nws6L
h6MXRS9DKeh8Zjp7S1yQU8JNNOnDqYY=
-----END CERTIFICATE-----
Generated at Thu May 2 03:26:37 2024 by rpki-client on console-ams.rpki-client.org