Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96f91885-2a18-364d-bf54-700086bc68e4.roa
File:                     96f91885-2a18-364d-bf54-700086bc68e4.roa (raw, json)
Hash identifier:          qJg6D6L6xDKl6DmC0dnuiXe+VJn+lfo9YWMfPDE5vlU=
Subject key identifier:   CB:CF:C9:B7:C5:94:C6:E2:2E:55:ED:63:D4:3E:00:DE:EB:E5:72:0C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DE228D534C5C187285280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96f91885-2a18-364d-bf54-700086bc68e4.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     46847
IP address blocks:        71.67.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:e2:28:d5:34:c5:c1:87:28:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=7dcd8436-299f-4471-bf14-7150eab69262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:29:d9:c8:e5:f6:bf:32:ba:5c:f2:a9:a2:
                    9b:67:33:10:99:4c:ea:ec:3c:8e:b4:7c:31:9b:db:
                    e0:aa:0d:55:2f:36:45:76:3b:fd:08:1a:c1:6a:29:
                    d6:25:9d:aa:74:c0:97:84:08:56:ab:46:5b:c5:0b:
                    e4:0f:1a:d8:09:52:fb:6e:eb:8d:2a:c2:6f:e7:19:
                    af:2b:2d:52:c3:f9:d9:6b:7c:c8:f0:5b:61:b7:d3:
                    60:72:6b:b7:c5:e1:53:b1:1a:6e:24:30:cd:74:60:
                    c2:dd:cc:81:d6:5d:1f:ab:85:90:47:e1:d2:ea:ba:
                    09:f6:c7:68:1b:55:1b:7d:e5:cc:62:01:65:36:19:
                    12:58:4a:24:10:a2:a8:69:bb:a7:f1:2a:70:c0:ea:
                    96:48:50:8c:b4:cc:31:79:b4:22:9d:8e:59:73:c6:
                    88:73:7d:91:60:22:08:b4:35:6a:3a:42:a2:ef:25:
                    ab:3e:47:8d:76:d0:f6:45:d7:55:67:6b:e5:71:c8:
                    a9:89:58:44:f9:29:37:dd:1b:b7:36:52:1c:84:17:
                    d6:e3:93:cb:a5:3e:b3:fc:7e:6c:a9:33:dd:79:68:
                    29:ff:cc:65:21:92:10:56:e2:19:41:13:ce:6c:fa:
                    78:47:25:cc:7a:09:9d:75:c1:e6:4a:1d:65:8b:56:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CF:C9:B7:C5:94:C6:E2:2E:55:ED:63:D4:3E:00:DE:EB:E5:72:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96f91885-2a18-364d-bf54-700086bc68e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.67.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f8:64:89:7d:2d:d4:69:4d:bf:82:cf:20:23:59:d9:ec:4e:
         5d:32:11:96:37:75:2b:46:e9:68:58:d3:c5:fa:9a:a0:d3:71:
         0d:64:f0:2a:bd:af:b4:d9:f4:ad:4c:f2:33:4b:69:2f:b5:1c:
         4e:7e:92:df:58:cb:43:ae:72:d1:d1:58:d4:b7:6d:fb:9c:2f:
         a8:50:2a:f4:86:ff:81:f1:96:b6:c5:2c:27:68:ca:c6:78:89:
         82:15:97:e0:04:4a:aa:ce:95:25:28:0a:ca:5f:e1:14:af:5c:
         49:e5:19:87:66:56:eb:ec:3b:01:e5:58:19:d8:62:7f:72:09:
         ce:7c:8d:ce:26:31:ea:eb:6b:0b:e9:b7:ec:ba:fd:06:28:95:
         98:8d:df:4b:20:a7:7c:03:c8:d5:ad:0b:12:e6:60:ca:27:5e:
         f1:64:ae:e5:a2:f1:c7:1c:7a:11:6d:42:45:7e:0d:84:ee:ac:
         8f:51:b8:ee:a1:4c:38:d4:e9:39:19:7a:ab:41:95:1a:68:76:
         48:3c:4a:d7:ea:e4:be:e2:a2:35:49:20:84:70:cf:1a:80:4b:
         39:da:b5:a0:32:38:54:fb:96:9a:93:51:66:0c:b9:c0:0a:bc:
         9d:ac:de:46:e7:d5:7e:24:13:fe:23:64:97:1a:8a:87:7e:32:
         77:95:83:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijeIo1TTFwYcoUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
N2RjZDg0MzYtMjk5Zi00NDcxLWJmMTQtNzE1MGVhYjY5MjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuesp2cjl9r8yulzyqaKbZzMQmUzq7DyOtHwx
m9vgqg1VLzZFdjv9CBrBainWJZ2qdMCXhAhWq0ZbxQvkDxrYCVL7buuNKsJv5xmv
Ky1Sw/nZa3zI8Ftht9Ngcmu3xeFTsRpuJDDNdGDC3cyB1l0fq4WQR+HS6roJ9sdo
G1UbfeXMYgFlNhkSWEokEKKoabun8SpwwOqWSFCMtMwxebQinY5Zc8aIc32RYCII
tDVqOkKi7yWrPkeNdtD2RddVZ2vlccipiVhE+Sk33Ru3NlIchBfW45PLpT6z/H5s
qTPdeWgp/8xlIZIQVuIZQRPObPp4RyXMegmddcHmSh1li1Y/0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvPybfFlMbiLlXtY9Q+AN7r5XIMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTZmOTE4ODUtMmExOC0z
NjRkLWJmNTQtNzAwMDg2YmM2OGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR0MiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG34ZIl9LdRpTb+CzyAjWdnsTl0yEZY3dStG6WhY08X6mqDTcQ1k8Cq9
r7TZ9K1M8jNLaS+1HE5+kt9Yy0OuctHRWNS3bfucL6hQKvSG/4HxlrbFLCdoysZ4
iYIVl+AESqrOlSUoCspf4RSvXEnlGYdmVuvsOwHlWBnYYn9yCc58jc4mMerrawvp
t+y6/QYolZiN30sgp3wDyNWtCxLmYMonXvFkruWi8cccehFtQkV+DYTurI9RuO6h
TDjU6TkZeqtBlRpodkg8Stfq5L7iojVJIIRwzxqASznataAyOFT7lpqTUWYMucAK
vJ2s3kbn1X4kE/4jZJcaiod+MneVg0s=
-----END CERTIFICATE-----
Generated at Thu May 2 04:25:16 2024 by rpki-client on console-fra.rpki-client.org