Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c99fb81-ee3f-3608-b440-d0bd12807ff2.roa
File:                     6c99fb81-ee3f-3608-b440-d0bd12807ff2.roa (raw, json)
Hash identifier:          wcQfyS+atb8gnh8uWlPpmnifDWM6rWuYli6yG5VLODY=
Subject key identifier:   3D:E8:0F:79:D0:2C:D3:10:47:BC:A1:DB:34:88:02:FA:9B:13:63:83
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A08B4E817330D0DEE29D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c99fb81-ee3f-3608-b440-d0bd12807ff2.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        173.197.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:8b:4e:81:73:30:d0:de:e2:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=b1047ad5-d5f3-4bdb-a347-5a855e4a0181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:75:f7:60:c5:8b:e8:bc:09:92:17:15:21:
                    14:65:5d:b1:5a:eb:c3:78:07:56:70:9a:2e:8a:cf:
                    9b:7e:d3:db:75:1d:55:f4:b6:3c:ec:11:7d:41:52:
                    eb:6a:fb:35:1f:7d:5e:4a:77:1b:9f:21:4d:19:bb:
                    58:ec:58:fb:99:e8:7d:fe:e9:15:2e:68:0b:d3:77:
                    8d:5f:d7:50:a4:fc:68:0d:69:15:93:ad:24:6b:38:
                    9e:c4:65:4b:92:a0:da:0e:8e:a0:ee:5c:41:58:66:
                    0e:40:0f:2a:23:5e:e0:23:2f:7a:e0:1d:88:09:89:
                    0c:bf:14:86:db:fe:55:fd:76:fa:7e:61:f9:92:3e:
                    44:19:1b:00:18:0a:6b:12:14:91:e1:9d:8a:02:53:
                    5f:08:db:be:aa:b7:a0:e1:ab:b5:cd:a9:ea:d3:d1:
                    47:b3:cb:ed:2f:c6:e1:2e:ad:9d:1b:39:a5:ea:65:
                    a2:63:99:be:d6:90:47:19:61:30:dd:69:6c:61:24:
                    8c:6b:b7:c7:fd:d5:ee:1f:59:ea:ee:5d:39:65:55:
                    39:0f:ad:27:1a:b6:ca:85:3a:2a:82:cd:8c:fd:99:
                    4c:0c:c1:7e:52:fc:e8:c9:0b:58:39:fe:6a:69:3a:
                    12:21:7f:d1:fa:c9:21:2f:bc:db:1f:00:a3:22:38:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E8:0F:79:D0:2C:D3:10:47:BC:A1:DB:34:88:02:FA:9B:13:63:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c99fb81-ee3f-3608-b440-d0bd12807ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.197.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:11:93:0b:32:6c:c8:23:57:e7:9b:86:b6:e5:ee:6d:7e:
         e4:bb:5c:f8:f3:d7:1e:8f:f4:53:7d:e1:9a:85:de:54:ba:fc:
         f9:9d:fe:39:b5:70:d6:38:e7:b9:7c:b9:41:12:81:d3:a6:f0:
         e7:7f:3b:60:13:e3:fc:eb:4d:b8:8b:c3:42:9a:dd:cd:b2:13:
         bc:fe:2b:ab:36:04:99:81:14:98:be:eb:3f:c0:e7:fd:0d:1f:
         20:09:f1:8c:82:9d:b4:f1:be:93:99:15:12:38:e9:70:c9:10:
         c8:c7:4b:16:76:9f:3b:1a:4f:8c:22:66:0b:a4:e2:15:ab:5e:
         b8:58:63:64:3d:eb:5f:c3:76:06:3b:5e:c6:67:a5:b1:50:5a:
         a9:3e:00:8c:20:6b:43:8a:0a:68:62:59:55:96:76:a5:a5:83:
         9a:57:13:38:46:32:bc:75:b9:45:bd:a7:b0:72:94:26:d6:ba:
         10:72:d7:9e:ea:4c:c8:ad:11:e9:cf:cd:0b:af:34:09:5f:03:
         5a:fc:b9:d9:65:79:9b:f5:8e:d0:1d:d3:69:07:8b:56:ba:99:
         76:89:6f:93:0e:e4:97:78:eb:b2:49:77:40:17:62:64:8b:2f:
         31:49:c5:74:b1:1b:1e:be:0b:27:01:4b:99:d1:8f:46:6a:ca:
         a3:44:83:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioItOgXMw0N7inUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
YjEwNDdhZDUtZDVmMy00YmRiLWEzNDctNWE4NTVlNGEwMTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6x192DFi+i8CZIXFSEUZV2xWuvDeAdWcJou
is+bftPbdR1V9LY87BF9QVLravs1H31eSncbnyFNGbtY7Fj7meh9/ukVLmgL03eN
X9dQpPxoDWkVk60kaziexGVLkqDaDo6g7lxBWGYOQA8qI17gIy964B2ICYkMvxSG
2/5V/Xb6fmH5kj5EGRsAGAprEhSR4Z2KAlNfCNu+qreg4au1zanq09FHs8vtL8bh
Lq2dGzml6mWiY5m+1pBHGWEw3WlsYSSMa7fH/dXuH1nq7l05ZVU5D60nGrbKhToq
gs2M/ZlMDMF+UvzoyQtYOf5qaToSIX/R+skhL7zbHwCjIjh6KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3oD3nQLNMQR7yh2zSIAvqbE2ODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNmM5OWZiODEtZWUzZi0z
NjA4LWI0NDAtZDBiZDEyODA3ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcXoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4QEZMLMmzII1fnm4a25e5tfuS7XPjz1x6P9FN94ZqF3lS6/Pmd/jm1
cNY457l8uUESgdOm8Od/O2AT4/zrTbiLw0Ka3c2yE7z+K6s2BJmBFJi+6z/A5/0N
HyAJ8YyCnbTxvpOZFRI46XDJEMjHSxZ2nzsaT4wiZguk4hWrXrhYY2Q961/DdgY7
XsZnpbFQWqk+AIwga0OKCmhiWVWWdqWlg5pXEzhGMrx1uUW9p7BylCbWuhBy157q
TMitEenPzQuvNAlfA1r8udlleZv1jtAd02kHi1a6mXaJb5MO5Jd467JJd0AXYmSL
LzFJxXSxGx6+CycBS5nRj0ZqyqNEgxo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:28 2024 by rpki-client on console-fra.rpki-client.org