Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/50c1209f-ef88-37b1-a248-41e42569ce13.roa
File:                     50c1209f-ef88-37b1-a248-41e42569ce13.roa (raw, json)
Hash identifier:          ZrelGwMJvXew81h9QhaNDmladAnRGvNhGIvkMmKvYjA=
Subject key identifier:   19:07:2E:F0:25:C8:59:5A:2F:BA:A3:72:9F:2A:2C:D2:7C:3B:75:11
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0BB2038771DFA2736F560
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/50c1209f-ef88-37b1-a248-41e42569ce13.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        68.204.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:bb:20:38:77:1d:fa:27:36:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f2af9f69-9780-4ac6-a362-90ce961c9f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:44:db:0d:2a:71:a2:ab:d2:ae:f7:07:1a:b5:
                    b0:25:7f:84:f9:ab:82:28:03:b1:b5:e6:f7:63:15:
                    17:b6:0c:8d:0b:6e:58:70:13:72:22:2e:8d:f5:74:
                    e2:0e:aa:f7:e3:97:42:89:26:a7:9b:cc:d3:39:f3:
                    b1:e6:b1:8e:df:b0:09:05:b3:b0:4b:0a:80:41:06:
                    1e:d2:7e:bf:f6:f3:6e:a3:ab:fd:35:5f:57:cb:5c:
                    99:fa:88:0c:f2:85:d0:b0:1c:73:ea:e6:ff:cd:91:
                    b9:6a:db:e8:05:74:25:0e:d0:9c:61:1a:d0:1f:c6:
                    47:09:f5:48:2c:f2:b9:75:ef:bc:42:f1:22:9f:04:
                    52:60:f5:f2:20:f3:59:91:c3:94:e7:92:48:f4:b5:
                    63:9c:cf:65:99:39:5b:c6:71:04:81:6c:50:f9:cb:
                    34:24:6d:e0:68:d8:f6:83:be:76:49:7e:30:38:79:
                    54:5e:74:bf:e3:59:ac:c3:6e:bb:3e:fa:05:96:58:
                    08:74:88:92:0a:b1:cf:bf:73:fa:ef:4b:50:4d:c0:
                    dc:19:36:60:1a:cc:83:9d:42:c6:45:93:1f:69:17:
                    da:46:74:c1:69:96:dc:6d:62:c0:8a:ad:19:f9:ed:
                    ea:d9:07:fa:33:06:94:1a:10:2f:a7:da:c0:49:a5:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:07:2E:F0:25:C8:59:5A:2F:BA:A3:72:9F:2A:2C:D2:7C:3B:75:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/50c1209f-ef88-37b1-a248-41e42569ce13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.204.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:aa:34:fb:c2:b8:04:8e:56:5a:39:b5:43:a7:e2:a9:d1:
         da:e4:93:67:d7:c9:1f:66:75:23:07:0a:11:c6:90:c4:03:93:
         84:a1:0d:b4:6f:e3:a5:dd:bd:da:59:41:ad:71:a6:83:cf:0d:
         38:9b:7e:ae:4b:0f:d9:f9:4c:ee:7b:c4:23:b9:1b:6e:43:07:
         b1:95:f2:de:45:64:49:8e:23:7f:9f:83:54:c9:08:38:da:ef:
         90:1c:cd:29:77:10:d2:33:fe:e2:35:8d:d0:ef:09:cc:b4:9a:
         9d:83:52:27:43:82:24:49:d6:e6:7b:7f:6a:9a:9d:bc:fd:7c:
         86:b0:be:9a:14:d8:89:f2:7a:7d:96:10:e8:47:82:3c:d3:2a:
         2e:ba:16:00:13:7a:e0:f8:3e:12:53:46:12:83:0c:4c:30:a2:
         ad:d0:38:63:0e:09:b9:6d:f0:fa:b0:1a:44:4b:0f:8f:b0:de:
         34:04:97:15:21:12:d0:42:2c:9e:f5:70:9e:f8:d1:6c:ab:c4:
         81:20:8f:b8:89:b0:c7:4d:3f:7b:a0:83:8b:d2:e8:97:12:52:
         f0:fe:61:e6:46:75:36:51:3d:a3:f6:f0:7e:b4:ef:6d:00:d2:
         d5:85:42:9e:25:7e:b6:df:42:ee:86:97:be:6a:4a:42:ff:33:
         87:8a:b8:59
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcioLsgOHcd+ic29WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZjJhZjlmNjktOTc4MC00YWM2LWEzNjItOTBjZTk2MWM5ZjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40TbDSpxoqvSrvcHGrWwJX+E+auCKAOxteb3
YxUXtgyNC25YcBNyIi6N9XTiDqr345dCiSanm8zTOfOx5rGO37AJBbOwSwqAQQYe
0n6/9vNuo6v9NV9Xy1yZ+ogM8oXQsBxz6ub/zZG5atvoBXQlDtCcYRrQH8ZHCfVI
LPK5de+8QvEinwRSYPXyIPNZkcOU55JI9LVjnM9lmTlbxnEEgWxQ+cs0JG3gaNj2
g752SX4wOHlUXnS/41msw267PvoFllgIdIiSCrHPv3P670tQTcDcGTZgGsyDnULG
RZMfaRfaRnTBaZbcbWLAiq0Z+e3q2Qf6MwaUGhAvp9rASaV4cQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBkHLvAlyFlaL7qjcp8qLNJ8O3URMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNTBjMTIwOWYtZWY4OC0z
N2IxLWEyNDgtNDFlNDI1NjljZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBRMwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYO2qNPvCuASOVlo5tUOn4qnR2uSTZ9fJH2Z1IwcKEcaQxAOThKENtG/j
pd292llBrXGmg88NOJt+rksP2flM7nvEI7kbbkMHsZXy3kVkSY4jf5+DVMkIONrv
kBzNKXcQ0jP+4jWN0O8JzLSanYNSJ0OCJEnW5nt/apqdvP18hrC+mhTYifJ6fZYQ
6EeCPNMqLroWABN64Pg+ElNGEoMMTDCirdA4Yw4JuW3w+rAaREsPj7DeNASXFSES
0EIsnvVwnvjRbKvEgSCPuImwx00/e6CDi9LolxJS8P5h5kZ1NlE9o/bwfrTvbQDS
1YVCniV+tt9C7oaXvmpKQv8zh4q4WQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:26 2024 by rpki-client on console-fra.rpki-client.org