Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5ea86714-c813-3cd2-8b9d-c919df4a0fae.roa
File:                     5ea86714-c813-3cd2-8b9d-c919df4a0fae.roa (raw, json)
Hash identifier:          kYGgdXhDx8lDp1c2CLcg5nBTDqOMXLABAE8Rfl0cjTE=
Subject key identifier:   E4:A7:B4:BB:9B:45:F0:EB:D9:2B:0C:32:52:06:37:71:D2:50:DD:5A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A094698A10D44E8B801A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5ea86714-c813-3cd2-8b9d-c919df4a0fae.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        72.131.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:94:69:8a:10:d4:4e:8b:80:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=eb03b673-5c7a-4aa4-abed-55e622da494d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:db:a4:15:53:95:fe:f1:21:93:d4:2b:f4:
                    96:ac:75:b2:cb:c7:be:90:40:50:dc:42:1f:9f:ce:
                    6d:62:c3:dc:bd:b4:52:bc:5f:87:4f:4f:5b:f1:8e:
                    4f:64:b8:cd:6f:d5:48:b9:11:3f:46:54:ff:7b:ed:
                    58:c2:bb:f0:a8:d5:2b:cf:43:5f:fe:f3:88:59:2b:
                    d9:f2:93:b0:61:b4:31:10:61:89:57:f0:4e:87:26:
                    00:29:0e:99:ba:13:2c:a8:a9:85:42:17:42:bf:36:
                    81:3e:9a:99:02:59:b3:33:78:23:ec:a6:cc:4f:87:
                    74:bc:f4:62:d1:9a:83:03:74:2c:08:9c:c8:64:08:
                    9f:f6:11:20:40:fc:a8:7d:09:6d:bb:84:31:d7:6a:
                    d7:1b:bd:85:b6:a5:62:e9:2a:83:79:4b:a8:9c:ec:
                    3d:ea:15:89:12:3f:f3:e1:20:5a:c5:82:db:e8:3f:
                    d9:6b:fa:64:55:40:b5:5e:d7:55:9e:a2:19:72:d0:
                    ca:f3:1f:97:f3:7d:cf:fe:88:ff:72:3f:8c:7f:b4:
                    58:f0:ac:b2:12:7b:0c:e1:93:dd:1a:fb:75:54:eb:
                    7b:46:cb:da:00:46:a7:e2:85:b8:f7:2c:e9:3c:cf:
                    b7:2f:60:d8:28:ab:b2:57:9f:c0:c8:41:65:9c:37:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:B4:BB:9B:45:F0:EB:D9:2B:0C:32:52:06:37:71:D2:50:DD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5ea86714-c813-3cd2-8b9d-c919df4a0fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.131.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:81:2b:72:1f:7b:14:62:b6:f4:6b:dd:1f:c3:21:07:57:cf:
         f2:20:55:ce:7f:07:79:b2:60:86:98:08:d8:80:d9:f2:d6:ee:
         6c:d5:c6:e2:aa:9c:4d:9c:2a:39:78:cc:7a:be:30:5d:cb:25:
         4d:a8:0f:0f:f6:d8:af:32:d5:22:37:5c:5e:5b:1e:e6:1f:0a:
         b7:fd:65:1c:83:c6:28:de:3d:ac:ef:85:51:76:ca:82:4b:74:
         6e:af:13:fa:01:42:1c:c3:11:7e:6d:97:b1:1b:a2:4b:0d:af:
         b7:05:9a:14:5e:03:c6:4c:06:1b:7c:74:fe:2e:e2:5e:de:95:
         2f:b6:22:5f:cb:03:5e:9a:a9:f3:40:e1:44:db:4d:4a:99:ee:
         e3:0c:10:b1:4d:db:6c:54:47:a4:8d:1f:1e:c8:38:66:5d:bc:
         9a:19:c5:35:7d:54:c3:f6:fa:4f:b1:b9:c6:59:76:a2:4a:de:
         69:81:03:3d:81:9d:ec:4e:e2:68:9a:9e:f3:dc:8f:24:bc:08:
         70:24:68:fd:81:e5:d4:97:fb:69:78:b9:a9:6a:17:91:a9:64:
         47:87:3f:fa:fd:e5:09:1b:cd:d5:15:03:c4:e4:06:3f:e4:55:
         72:f7:95:c4:bf:24:36:0e:a5:55:8f:12:14:41:61:f7:a0:17:
         e5:3d:0c:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioJRpihDUTouAGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZWIwM2I2NzMtNWM3YS00YWE0LWFiZWQtNTVlNjIyZGE0OTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZTbpBVTlf7xIZPUK/SWrHWyy8e+kEBQ3EIf
n85tYsPcvbRSvF+HT09b8Y5PZLjNb9VIuRE/RlT/e+1YwrvwqNUrz0Nf/vOIWSvZ
8pOwYbQxEGGJV/BOhyYAKQ6ZuhMsqKmFQhdCvzaBPpqZAlmzM3gj7KbMT4d0vPRi
0ZqDA3QsCJzIZAif9hEgQPyofQltu4Qx12rXG72FtqVi6SqDeUuonOw96hWJEj/z
4SBaxYLb6D/Za/pkVUC1XtdVnqIZctDK8x+X833P/oj/cj+Mf7RY8KyyEnsM4ZPd
Gvt1VOt7RsvaAEan4oW49yzpPM+3L2DYKKuyV5/AyEFlnDe1RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSntLubRfDr2SsMMlIGN3HSUN1aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNWVhODY3MTQtYzgxMy0z
Y2QyLThiOWQtYzkxOWRmNGEwZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSINAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISBK3IfexRitvRr3R/DIQdXz/IgVc5/B3myYIaYCNiA2fLW7mzVxuKq
nE2cKjl4zHq+MF3LJU2oDw/22K8y1SI3XF5bHuYfCrf9ZRyDxijePazvhVF2yoJL
dG6vE/oBQhzDEX5tl7EboksNr7cFmhReA8ZMBht8dP4u4l7elS+2Il/LA16aqfNA
4UTbTUqZ7uMMELFN22xUR6SNHx7IOGZdvJoZxTV9VMP2+k+xucZZdqJK3mmBAz2B
nexO4mianvPcjyS8CHAkaP2B5dSX+2l4ualqF5GpZEeHP/r95QkbzdUVA8TkBj/k
VXL3lcS/JDYOpVWPEhRBYfegF+U9DCg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:27 2024 by rpki-client on console-fra.rpki-client.org