Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a31828a-b284-3bbf-afa8-cf6450b449f7.roa
File:                     5a31828a-b284-3bbf-afa8-cf6450b449f7.roa (raw, json)
Hash identifier:          aC3waGlIFtAr+LXF1mADwllHCFw07swttUKLTsJhbdA=
Subject key identifier:   FE:FB:D7:BF:91:7B:FB:B8:D0:51:54:76:A2:B2:4C:59:FA:14:DD:AB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1451E43A65E328EE42580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a31828a-b284-3bbf-afa8-cf6450b449f7.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        97.79.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:45:1e:43:a6:5e:32:8e:e4:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=ca48b4d4-ffd6-49a8-941f-752c01fb1aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:80:24:89:9e:bd:95:67:f1:e9:82:c4:19:9d:
                    1d:f4:e5:9a:cc:d3:a6:17:13:37:4f:52:1f:e3:22:
                    24:51:d7:f9:ed:cd:85:ca:1e:ff:94:d0:19:11:8c:
                    ea:d9:fc:e8:58:ba:6e:c4:b9:bb:e6:eb:b7:fc:cc:
                    b2:46:34:b3:80:1a:58:e9:c8:b1:eb:0f:c5:a9:a3:
                    b4:20:db:00:46:f6:07:87:13:62:1e:59:4a:65:cd:
                    9d:cf:56:b6:42:01:02:49:36:2e:ac:83:d0:84:1e:
                    56:1f:53:63:91:76:74:fa:90:37:3a:68:a2:73:05:
                    31:a6:c9:fb:5f:2e:09:3a:2d:02:8a:f5:51:b6:bd:
                    37:16:e5:bb:72:41:67:25:ed:9e:a6:84:cb:f6:c5:
                    85:ae:7d:cf:35:8d:f0:f6:a3:da:48:2b:17:03:2e:
                    51:56:fb:e3:ac:71:a5:84:77:da:88:e0:99:f6:ff:
                    80:ab:d4:02:05:63:9c:55:2e:e7:85:e0:82:33:87:
                    08:8d:a3:db:d8:35:2d:e2:e3:6f:76:60:d1:e9:22:
                    d8:1e:3c:f7:d8:5e:6d:e8:d1:8a:4f:58:b3:87:21:
                    6d:0b:07:a0:cb:18:f7:26:43:2a:65:51:ba:c6:e5:
                    6d:34:8c:97:d7:50:0b:4e:62:ac:da:41:a8:fd:81:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:D7:BF:91:7B:FB:B8:D0:51:54:76:A2:B2:4C:59:FA:14:DD:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a31828a-b284-3bbf-afa8-cf6450b449f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.79.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:63:1e:28:6b:aa:3c:fa:e2:18:41:47:9e:72:77:7f:0a:
         b7:e1:6f:e2:e7:41:f0:61:b4:20:4f:55:5e:98:27:5f:d5:a0:
         1f:4f:7e:3a:6f:bb:fb:ab:e6:8c:66:bc:98:9d:4b:8b:a7:44:
         b4:9e:9e:54:dc:0f:e2:be:3e:61:e9:6a:dc:82:25:08:12:8b:
         16:52:41:6e:a6:24:b6:33:0b:f9:ba:64:52:bd:e5:32:80:b7:
         84:45:78:a4:fb:e4:c4:20:43:02:ec:bc:b2:26:cc:fe:eb:a5:
         98:aa:a4:66:bb:6f:f0:f8:2f:78:78:64:a1:44:af:ec:f0:d1:
         88:03:c4:22:66:23:ec:2b:15:21:b9:f9:94:c0:cb:44:67:de:
         fb:65:e1:a2:f3:46:90:ed:12:78:4c:c7:0c:92:44:9c:ad:8a:
         f9:ea:d0:09:f6:21:5e:91:05:09:9b:c5:f0:f8:c7:92:dc:bc:
         1d:ea:57:71:d9:61:59:b3:2b:64:de:92:c2:39:fc:ee:7f:b1:
         47:3f:10:ea:75:78:39:9d:78:bb:58:99:8b:e4:04:bb:67:bc:
         e5:ab:41:f7:ed:a1:26:cc:fd:09:d1:b2:d5:0a:70:23:f1:47:
         5b:4c:90:15:9d:dd:cd:42:b9:04:84:19:0c:5c:8b:5e:1a:7d:
         c8:fd:4f:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioUUeQ6ZeMo7kJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
Y2E0OGI0ZDQtZmZkNi00OWE4LTk0MWYtNzUyYzAxZmIxYWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIAkiZ69lWfx6YLEGZ0d9OWazNOmFxM3T1If
4yIkUdf57c2Fyh7/lNAZEYzq2fzoWLpuxLm75uu3/MyyRjSzgBpY6cix6w/FqaO0
INsARvYHhxNiHllKZc2dz1a2QgECSTYurIPQhB5WH1NjkXZ0+pA3OmiicwUxpsn7
Xy4JOi0CivVRtr03FuW7ckFnJe2epoTL9sWFrn3PNY3w9qPaSCsXAy5RVvvjrHGl
hHfaiOCZ9v+Aq9QCBWOcVS7nheCCM4cIjaPb2DUt4uNvdmDR6SLYHjz32F5t6NGK
T1izhyFtCwegyxj3JkMqZVG6xuVtNIyX11ALTmKs2kGo/YFEjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7717+Re/u40FFUdqKyTFn6FN2rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNWEzMTgyOGEtYjI4NC0z
YmJmLWFmYTgtY2Y2NDUwYjQ0OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYU8gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtiYx4oa6o8+uIYQUeecnd/Crfhb+LnQfBhtCBPVV6YJ1/VoB9Pfjpv
u/ur5oxmvJidS4unRLSenlTcD+K+PmHpatyCJQgSixZSQW6mJLYzC/m6ZFK95TKA
t4RFeKT75MQgQwLsvLImzP7rpZiqpGa7b/D4L3h4ZKFEr+zw0YgDxCJmI+wrFSG5
+ZTAy0Rn3vtl4aLzRpDtEnhMxwySRJytivnq0An2IV6RBQmbxfD4x5LcvB3qV3HZ
YVmzK2TeksI5/O5/sUc/EOp1eDmdeLtYmYvkBLtnvOWrQfftoSbM/QnRstUKcCPx
R1tMkBWd3c1CuQSEGQxci14afcj9T8Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:27 2024 by rpki-client on console-fra.rpki-client.org