Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86bc8d30-a287-3ceb-904b-f0443940ccb3.roa
File:                     86bc8d30-a287-3ceb-904b-f0443940ccb3.roa (raw, json)
Hash identifier:          BbG5m/vFH5GtZ1mEP7sBGmaqL3LFT5iR7tT2Ha/ValU=
Subject key identifier:   8A:32:0F:15:A5:00:B1:92:2A:DD:42:69:0B:E7:1A:3F:DA:2D:EE:7E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858383130083FD1B95AABD6FA7380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86bc8d30-a287-3ceb-904b-f0443940ccb3.roa
Signing time:             Mon 07 Dec 2020 05:00:00 +0000
ROA not before:           Mon 07 Dec 2020 05:00:00 +0000
ROA not after:            Mon 30 Nov 2026 05:00:00 +0000
asID:                     12271
IP address blocks:        68.174.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:31:30:08:3f:d1:b9:5a:ab:d6:fa:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec  7 05:00:00 2020 GMT
            Not After : Nov 30 05:00:00 2026 GMT
        Subject: CN=50305756-35b0-46c9-ab84-ac21209cfe32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:2e:3a:b0:d4:24:42:6a:29:f6:8a:2a:3f:
                    be:37:f5:7f:81:af:15:df:be:65:84:ea:50:80:88:
                    b3:dc:65:7d:b9:72:56:6b:db:cc:85:b9:40:5a:e4:
                    86:cb:ea:93:af:7f:86:9a:a4:df:cb:39:23:67:da:
                    f3:82:56:77:c1:6b:6b:86:b1:29:82:b1:c4:c9:f9:
                    55:43:d1:3f:46:0f:e7:cf:81:3a:26:39:b8:25:fb:
                    0c:d3:7d:5f:e2:fd:5a:fc:0d:e9:38:b3:71:71:36:
                    2c:6a:9d:7d:ef:7e:7e:c6:3c:d9:1e:fb:8a:9e:ed:
                    fa:d1:c3:db:a3:15:63:45:b2:b9:fb:e2:ba:fa:45:
                    0b:5b:8c:f6:f2:e1:bc:92:11:1b:0c:e1:14:56:19:
                    2c:1c:9f:b3:10:2b:c1:c5:ed:a2:f5:4f:19:8d:37:
                    ec:d0:14:7b:eb:0c:27:b9:41:6d:4d:09:8c:c4:ff:
                    6b:45:e9:3a:24:d7:54:a0:0f:d5:5b:2d:ab:09:1a:
                    02:32:a9:15:5e:76:5d:f1:e7:53:8d:d5:a6:ab:b7:
                    e7:5a:82:44:10:f2:50:89:b5:b3:37:85:60:0d:15:
                    d7:65:67:54:90:13:79:00:96:53:f9:8d:6f:d9:6b:
                    d8:4d:26:13:85:4e:8d:64:09:c5:0e:4c:c1:98:d8:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:32:0F:15:A5:00:B1:92:2A:DD:42:69:0B:E7:1A:3F:DA:2D:EE:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86bc8d30-a287-3ceb-904b-f0443940ccb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.174.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:29:64:7c:61:87:a0:88:82:6d:2a:7b:fc:ea:0c:3a:6a:c3:
         75:ff:14:de:c2:af:58:0e:50:2b:70:3c:1c:f6:c6:42:59:43:
         69:6f:a6:04:2e:86:a5:b6:e0:6f:59:f6:e9:56:75:a3:9d:e0:
         59:5e:c6:97:6c:13:11:a4:ba:43:ba:c0:c0:ba:95:d7:90:06:
         a9:46:4b:d7:b8:27:87:c9:1f:a7:cd:53:c5:21:d6:ce:1a:d7:
         bb:75:77:47:b0:08:c5:52:8c:c3:68:f4:e9:07:48:60:3f:02:
         98:5f:8b:b7:b8:2d:a5:98:0c:fd:76:37:c5:18:53:53:7d:8f:
         54:9b:63:db:7d:b7:0c:ab:53:5a:eb:5b:01:f4:f3:07:67:12:
         01:e3:60:33:5a:3a:2e:ab:fa:39:bf:dc:cc:54:68:16:5e:8e:
         ba:46:ae:63:37:cb:49:e7:2b:44:dd:01:9f:1d:27:ef:dc:62:
         b2:81:4b:87:3d:94:bc:c7:6f:bb:55:60:f8:e2:94:e1:9b:cd:
         e0:39:6a:04:75:fc:fc:4f:f4:0b:44:a4:33:ab:4a:af:89:8d:
         ba:2e:3b:ba:1f:24:8b:6c:21:da:b7:41:c2:1b:94:4b:a6:cf:
         13:57:6f:f9:31:58:7a:6f:b2:0a:f2:90:05:f5:79:7f:f9:12:
         2f:8d:36:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDgxMAg/0blaq9b6c4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIwMTIwNzA1MDAwMFoXDTI2MTEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
NTAzMDU3NTYtMzViMC00NmM5LWFiODQtYWMyMTIwOWNmZTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDEuOrDUJEJqKfaKKj++N/V/ga8V375lhOpQ
gIiz3GV9uXJWa9vMhblAWuSGy+qTr3+GmqTfyzkjZ9rzglZ3wWtrhrEpgrHEyflV
Q9E/Rg/nz4E6Jjm4JfsM031f4v1a/A3pOLNxcTYsap19735+xjzZHvuKnu360cPb
oxVjRbK5++K6+kULW4z28uG8khEbDOEUVhksHJ+zECvBxe2i9U8ZjTfs0BR76wwn
uUFtTQmMxP9rRek6JNdUoA/VWy2rCRoCMqkVXnZd8edTjdWmq7fnWoJEEPJQibWz
N4VgDRXXZWdUkBN5AJZT+Y1v2WvYTSYThU6NZAnFDkzBmNjgBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoyDxWlALGSKt1CaQvnGj/aLe5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODZiYzhkMzAtYTI4Ny0z
Y2ViLTkwNGItZjA0NDM5NDBjY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRK5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgpZHxhh6CIgm0qe/zqDDpqw3X/FN7Cr1gOUCtwPBz2xkJZQ2lvpgQu
hqW24G9Z9ulWdaOd4FlexpdsExGkukO6wMC6ldeQBqlGS9e4J4fJH6fNU8Uh1s4a
17t1d0ewCMVSjMNo9OkHSGA/Aphfi7e4LaWYDP12N8UYU1N9j1SbY9t9twyrU1rr
WwH08wdnEgHjYDNaOi6r+jm/3MxUaBZejrpGrmM3y0nnK0TdAZ8dJ+/cYrKBS4c9
lLzHb7tVYPjilOGbzeA5agR1/PxP9AtEpDOrSq+JjbouO7ofJItsIdq3QcIblEum
zxNXb/kxWHpvsgrykAX1eX/5Ei+NNuE=
-----END CERTIFICATE-----
Generated at Thu May 2 11:52:32 2024 by rpki-client on console-fra.rpki-client.org