Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/928b4d83-0d4a-3a26-ba51-ae126ca7f36f.roa
File:                     928b4d83-0d4a-3a26-ba51-ae126ca7f36f.roa (raw, json)
Hash identifier:          mHR8P0k264dX62EslW3KhzeqHdYHhIJAQiryPmc8VkQ=
Subject key identifier:   BB:29:15:37:96:EA:33:A2:DF:0E:68:1C:B9:8D:65:B2:CC:0C:0E:F6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DB5E205A0FA1CFBFB26C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/928b4d83-0d4a-3a26-ba51-ae126ca7f36f.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11351
IP address blocks:        68.172.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:b5:e2:05:a0:fa:1c:fb:fb:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=059471e7-c096-46ef-bec5-8811809cab3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:74:0b:fa:28:25:62:c6:4b:ee:f4:ad:9d:
                    e0:15:d2:78:4d:b2:f1:82:ae:71:97:ac:1e:6a:f0:
                    84:1d:d8:50:84:6e:35:95:bc:09:9b:e5:e5:cc:7a:
                    3a:35:a2:d9:bc:d6:72:97:6b:8c:d9:83:19:f3:5f:
                    43:9b:c4:58:0d:d8:c0:0c:27:40:4c:3e:ea:08:e2:
                    da:5d:bf:83:eb:5e:4e:be:b1:45:1e:c4:1c:a0:79:
                    bf:29:8e:22:47:8a:de:9b:78:ff:ae:a8:7c:05:2a:
                    70:60:3a:74:40:17:97:41:09:55:00:a6:4a:1f:f9:
                    46:96:2d:f3:32:42:db:68:82:ed:8f:77:a2:49:f3:
                    26:0f:d3:3c:b5:a6:cd:38:50:af:0f:18:50:97:cd:
                    f9:cf:a7:98:64:80:9c:61:26:9d:f7:2b:06:80:e8:
                    c4:47:2a:8b:ea:c5:ef:24:ce:a5:a1:1a:9c:a4:31:
                    97:57:d8:47:ad:f7:4e:1b:19:93:e3:7c:2c:d9:ca:
                    01:57:52:98:54:92:e0:3e:3a:26:20:37:ae:f5:8c:
                    9f:0e:c0:1c:dc:b2:e1:f3:ec:49:12:c5:87:1c:f4:
                    db:ee:5b:82:8e:08:31:18:96:d7:1c:2c:66:91:eb:
                    62:57:30:6e:e7:df:f5:2a:a1:07:de:2d:3b:2d:20:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:29:15:37:96:EA:33:A2:DF:0E:68:1C:B9:8D:65:B2:CC:0C:0E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/928b4d83-0d4a-3a26-ba51-ae126ca7f36f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.172.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6f:c7:05:b4:7d:5c:3c:2d:1a:d7:09:51:44:fe:21:26:e0:
         92:b0:2a:be:c1:d3:b9:42:9b:b2:e0:00:23:ab:0b:93:0f:1c:
         b4:a6:76:94:fa:29:bf:cc:16:14:c6:74:5e:4f:29:7f:08:96:
         bb:6c:5d:00:8a:f0:55:a9:5e:58:35:54:ba:08:5b:5e:22:78:
         96:08:ff:55:9b:29:24:59:8a:15:72:18:c4:1b:cc:9a:a1:b8:
         ac:7c:a7:3b:c4:6c:10:27:94:cd:f6:da:fc:f6:9e:fa:2e:8f:
         61:89:84:86:a8:7c:2e:9d:da:ba:d4:ec:fe:c6:ff:ae:11:a7:
         99:26:8d:08:19:39:c6:8b:e4:e7:67:a2:5a:3f:87:13:66:17:
         f4:5d:54:35:c5:b2:df:e6:da:fa:48:68:dc:8a:6f:b6:ca:f8:
         ca:73:0a:17:8e:65:0f:c9:7d:3b:cf:ad:9e:cd:1b:ef:b7:03:
         7b:98:5e:8f:3f:e7:56:e8:02:ac:bd:d7:35:27:b8:ee:3e:81:
         d9:33:95:4f:fe:b1:4c:1f:1b:d8:12:16:36:46:b0:25:f7:06:
         b5:d4:42:52:ed:0e:81:9b:f9:d7:f1:91:3d:fc:c2:f5:af:46:
         6b:f0:70:c8:a4:4d:92:8a:fe:90:37:74:2f:ae:3a:07:86:f9:
         6d:dc:b5:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijbXiBaD6HPv7JsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MDU5NDcxZTctYzA5Ni00NmVmLWJlYzUtODgxMTgwOWNhYjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMV0C/ooJWLGS+70rZ3gFdJ4TbLxgq5xl6we
avCEHdhQhG41lbwJm+XlzHo6NaLZvNZyl2uM2YMZ819Dm8RYDdjADCdATD7qCOLa
Xb+D615OvrFFHsQcoHm/KY4iR4rem3j/rqh8BSpwYDp0QBeXQQlVAKZKH/lGli3z
MkLbaILtj3eiSfMmD9M8tabNOFCvDxhQl835z6eYZICcYSad9ysGgOjERyqL6sXv
JM6loRqcpDGXV9hHrfdOGxmT43ws2coBV1KYVJLgPjomIDeu9YyfDsAc3LLh8+xJ
EsWHHPTb7luCjggxGJbXHCxmketiVzBu59/1KqEH3i07LSDBcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLspFTeW6jOi3w5oHLmNZbLMDA72MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTI4YjRkODMtMGQ0YS0z
YTI2LWJhNTEtYWUxMjZjYTdmMzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1vxwW0fVw8LRrXCVFE/iEm4JKwKr7B07lCm7LgACOrC5MPHLSmdpT6
Kb/MFhTGdF5PKX8IlrtsXQCK8FWpXlg1VLoIW14ieJYI/1WbKSRZihVyGMQbzJqh
uKx8pzvEbBAnlM322vz2nvouj2GJhIaofC6d2rrU7P7G/64Rp5kmjQgZOcaL5Odn
olo/hxNmF/RdVDXFst/m2vpIaNyKb7bK+MpzCheOZQ/JfTvPrZ7NG++3A3uYXo8/
51boAqy91zUnuO4+gdkzlU/+sUwfG9gSFjZGsCX3BrXUQlLtDoGb+dfxkT38wvWv
RmvwcMikTZKK/pA3dC+uOgeG+W3ctaE=
-----END CERTIFICATE-----
Generated at Wed May 1 15:56:04 2024 by rpki-client on console-ams.rpki-client.org