Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/68c9461c-48c3-3254-abc1-d2390d4212e7.roa
File:                     68c9461c-48c3-3254-abc1-d2390d4212e7.roa (raw, json)
Hash identifier:          h+SDvW6MzIelXy4ZS4Fg4SeXxSWCHAiI90CQLodTyas=
Subject key identifier:   36:4B:99:02:7B:48:60:41:2B:9A:C3:DB:86:9B:E9:06:71:19:B8:42
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E4CDA0F5462826D4E8C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/68c9461c-48c3-3254-abc1-d2390d4212e7.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        65.185.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:4c:da:0f:54:62:82:6d:4e:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=5ff1f8ef-d6cb-4dc4-961b-b0be7d1de4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:61:cc:1b:3d:23:af:b6:05:d2:db:34:b5:
                    58:25:40:ad:38:96:55:f7:d7:77:7d:5b:17:37:9b:
                    22:3a:e8:13:ed:bb:bc:f7:6e:51:d9:4b:5c:50:70:
                    f0:6b:99:4a:34:ec:a7:f5:1c:08:56:16:25:51:f8:
                    b3:ca:98:82:09:f9:78:f0:61:88:96:6c:12:cc:6f:
                    3d:3b:69:0d:87:aa:e8:ce:dc:14:27:82:2d:df:df:
                    ca:94:ff:94:8b:b5:72:38:68:b0:99:6f:68:40:cc:
                    0b:0f:08:a6:9d:7d:05:74:a6:c9:44:a7:3d:38:06:
                    11:42:f3:a5:31:91:48:23:15:fa:b8:2c:4f:25:2b:
                    c7:22:f6:37:19:70:d9:ec:1a:e9:f4:1c:0d:8a:49:
                    fc:a8:3d:d1:50:a7:67:29:f6:1b:fb:ba:71:74:9f:
                    09:b2:6b:e2:3c:8d:98:7a:b7:12:1e:70:97:0b:fb:
                    13:90:91:08:a1:43:55:4c:fa:74:4b:a9:9f:a5:a7:
                    b5:2d:ec:92:10:e5:21:d0:2b:b1:9d:43:6e:78:52:
                    8e:17:01:ea:8c:70:d7:be:4f:51:8c:40:e2:b6:00:
                    89:d3:54:c5:60:62:fb:74:7e:94:e9:3c:19:c0:b4:
                    c7:af:44:0a:f5:11:45:fe:a4:65:49:79:5c:c1:c2:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4B:99:02:7B:48:60:41:2B:9A:C3:DB:86:9B:E9:06:71:19:B8:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/68c9461c-48c3-3254-abc1-d2390d4212e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.185.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d8:38:79:bb:ba:ee:c1:57:e9:bb:00:8b:bd:90:38:44:7e:
         a2:54:b6:97:4b:bf:90:dd:89:14:ed:f4:fb:58:23:de:b7:04:
         32:49:62:fe:23:46:2d:0a:83:24:9c:fb:f0:58:12:1e:63:ea:
         c0:8a:63:3a:26:7e:2c:8a:27:f4:13:ba:b2:de:2a:04:9a:65:
         30:f8:c8:dd:5e:67:66:00:3b:da:8a:ad:9c:63:7e:d4:f8:65:
         32:05:7d:90:a9:7d:d0:4d:1a:e0:14:38:54:4c:c4:43:e2:68:
         1f:a5:76:27:e6:12:76:5e:6f:86:49:3a:2d:af:90:1b:98:0d:
         c2:f1:e5:61:5e:70:7c:61:47:92:6a:8e:4a:da:ed:47:db:ac:
         cf:33:93:6d:ed:02:f8:73:a3:1b:48:66:6e:0f:fe:39:2d:49:
         c8:9d:15:6d:72:95:d0:3c:0c:6a:24:48:09:d3:e5:53:9b:7b:
         b3:0d:7a:fe:25:e0:d8:bf:39:79:11:ae:fc:60:74:b2:09:7e:
         9f:c1:6d:6b:1a:7e:2f:46:cb:c2:5b:d7:07:35:2f:1a:b0:2f:
         7c:cb:7f:17:ae:52:57:28:a3:b8:10:ab:6c:7f:36:fb:97:c0:
         85:4f:32:b0:fc:0c:af:e6:6d:0d:69:f3:33:c9:5a:08:67:a5:
         d2:22:3f:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijkzaD1Rigm1OjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
NWZmMWY4ZWYtZDZjYi00ZGM0LTk2MWItYjBiZTdkMWRlNGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ZhzBs9I6+2BdLbNLVYJUCtOJZV99d3fVsX
N5siOugT7bu8925R2UtcUHDwa5lKNOyn9RwIVhYlUfizypiCCfl48GGIlmwSzG89
O2kNh6roztwUJ4It39/KlP+Ui7VyOGiwmW9oQMwLDwimnX0FdKbJRKc9OAYRQvOl
MZFIIxX6uCxPJSvHIvY3GXDZ7Brp9BwNikn8qD3RUKdnKfYb+7pxdJ8JsmviPI2Y
ercSHnCXC/sTkJEIoUNVTPp0S6mfpae1LeySEOUh0CuxnUNueFKOFwHqjHDXvk9R
jEDitgCJ01TFYGL7dH6U6TwZwLTHr0QK9RFF/qRlSXlcwcJEGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZLmQJ7SGBBK5rD24ab6QZxGbhCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNjhjOTQ2MWMtNDhjMy0z
MjU0LWFiYzEtZDIzOTBkNDIxMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQbkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjYOHm7uu7BV+m7AIu9kDhEfqJUtpdLv5DdiRTt9PtYI963BDJJYv4j
Ri0KgySc+/BYEh5j6sCKYzomfiyKJ/QTurLeKgSaZTD4yN1eZ2YAO9qKrZxjftT4
ZTIFfZCpfdBNGuAUOFRMxEPiaB+ldifmEnZeb4ZJOi2vkBuYDcLx5WFecHxhR5Jq
jkra7UfbrM8zk23tAvhzoxtIZm4P/jktScidFW1yldA8DGokSAnT5VObe7MNev4l
4Ni/OXkRrvxgdLIJfp/BbWsafi9Gy8Jb1wc1LxqwL3zLfxeuUlcoo7gQq2x/NvuX
wIVPMrD8DK/mbQ1p8zPJWghnpdIiPyo=
-----END CERTIFICATE-----
Generated at Wed May 1 16:30:21 2024 by rpki-client on console-fra.rpki-client.org