Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97b87a5b-e1fc-34e9-b5f1-8ae38257f638.roa
File:                     97b87a5b-e1fc-34e9-b5f1-8ae38257f638.roa (raw, json)
Hash identifier:          SH9f9b961vCrJp+dHlVjunWnxXhgXBJ/VYubIJM24uE=
Subject key identifier:   8D:91:8C:50:BF:FB:48:FA:94:93:9C:57:49:D5:2C:5B:47:45:F3:77
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628D9C80EFA4E0E60B617340
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97b87a5b-e1fc-34e9-b5f1-8ae38257f638.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        72.128.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:9c:80:ef:a4:e0:e6:0b:61:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=0af9c350-a4dd-471d-88b3-1b34ccac1ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:71:ef:cd:59:0f:6a:36:08:92:5c:01:77:
                    59:e0:16:83:75:c2:cb:1c:4b:2a:00:79:c7:0c:d8:
                    5f:41:37:e0:c3:cf:bb:dd:2a:81:65:ef:a2:7c:df:
                    2b:42:aa:38:bc:6b:0e:e9:a3:05:cb:d9:e6:9e:83:
                    66:aa:17:e1:4d:a2:03:c4:37:8b:b6:1a:7d:e9:d8:
                    f9:3f:88:f5:5c:5b:66:62:21:81:02:1b:19:1e:83:
                    1a:c1:ab:bc:75:d4:19:2d:5c:f0:23:4e:4e:0f:ab:
                    a0:4c:22:5e:cd:c1:48:d5:4e:16:fa:a7:15:6e:65:
                    b7:4d:21:ee:cf:c4:f8:ef:ab:29:f9:cf:cb:bf:c5:
                    05:5a:df:73:d9:f0:03:79:90:5c:a3:48:28:61:d1:
                    a8:a9:30:68:a1:ce:f6:2f:22:dc:6a:d7:0b:f0:14:
                    9d:03:43:05:04:20:0e:72:7e:6b:f7:64:15:5c:fe:
                    4c:b0:39:bc:c5:b0:42:cb:e3:f6:18:b6:75:be:e8:
                    48:66:7c:13:3b:83:10:97:a5:30:3b:1f:1e:c4:db:
                    7b:fe:80:a4:be:d8:b1:2e:ce:5f:2d:87:89:5d:a9:
                    ce:8c:05:e2:53:85:70:19:b2:5b:32:2f:78:4e:57:
                    1d:9d:ae:58:71:2c:41:e9:ed:7a:50:da:c4:de:f2:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:91:8C:50:BF:FB:48:FA:94:93:9C:57:49:D5:2C:5B:47:45:F3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97b87a5b-e1fc-34e9-b5f1-8ae38257f638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.128.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:97:80:f2:ef:74:87:b5:65:bc:6a:88:17:b6:57:fd:60:0e:
         1d:e8:c3:e7:8a:69:a6:52:2f:2e:ca:b6:c1:f3:f3:93:0f:27:
         8a:d7:f9:10:38:36:1d:98:9d:f2:04:d1:6a:d9:13:6d:bb:6f:
         76:77:14:12:4e:51:40:3e:16:9f:0c:5d:41:2b:15:69:fb:56:
         c7:f0:51:1a:69:df:85:5e:84:cb:01:66:43:de:dd:95:70:b2:
         5e:4c:98:d8:28:ac:fa:6c:19:c3:bb:72:e3:b5:76:4a:12:27:
         a1:90:66:47:fd:0a:36:c9:18:d9:23:58:ad:2d:a3:ae:84:73:
         73:41:4b:da:d2:93:14:ab:2e:5a:7f:0a:fa:67:d8:f2:0f:aa:
         d1:20:42:d9:7e:9f:77:86:d2:e5:fe:f4:d9:35:80:cb:5c:4c:
         29:45:15:65:92:fa:aa:95:4a:f8:24:c9:9d:37:bd:f2:5e:40:
         df:7f:ca:8b:c2:1d:ff:a9:9f:33:7f:af:93:85:b1:c3:b9:c6:
         39:9b:38:21:9b:77:ee:5a:cd:88:47:79:34:f6:7e:68:94:48:
         73:c9:7a:1a:b9:0e:b3:37:29:72:9c:80:e8:67:f9:ad:f7:ac:
         a2:60:df:8e:f7:d6:0b:17:b5:a7:ad:53:c5:98:8f:f7:4b:53:
         ca:d1:f7:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijZyA76Tg5gthc0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MGFmOWMzNTAtYTRkZC00NzFkLTg4YjMtMWIzNGNjYWMxZWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4tx781ZD2o2CJJcAXdZ4BaDdcLLHEsqAHnH
DNhfQTfgw8+73SqBZe+ifN8rQqo4vGsO6aMFy9nmnoNmqhfhTaIDxDeLthp96dj5
P4j1XFtmYiGBAhsZHoMawau8ddQZLVzwI05OD6ugTCJezcFI1U4W+qcVbmW3TSHu
z8T476sp+c/Lv8UFWt9z2fADeZBco0goYdGoqTBooc72LyLcatcL8BSdA0MFBCAO
cn5r92QVXP5MsDm8xbBCy+P2GLZ1vuhIZnwTO4MQl6UwOx8exNt7/oCkvtixLs5f
LYeJXanOjAXiU4VwGbJbMi94Tlcdna5YcSxB6e16UNrE3vKaHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2RjFC/+0j6lJOcV0nVLFtHRfN3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTdiODdhNWItZTFmYy0z
NGU5LWI1ZjEtOGFlMzgyNTdmNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESIDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiXgPLvdIe1ZbxqiBe2V/1gDh3ow+eKaaZSLy7KtsHz85MPJ4rX+RA4
Nh2YnfIE0WrZE227b3Z3FBJOUUA+Fp8MXUErFWn7VsfwURpp34VehMsBZkPe3ZVw
sl5MmNgorPpsGcO7cuO1dkoSJ6GQZkf9CjbJGNkjWK0to66Ec3NBS9rSkxSrLlp/
Cvpn2PIPqtEgQtl+n3eG0uX+9Nk1gMtcTClFFWWS+qqVSvgkyZ03vfJeQN9/yovC
Hf+pnzN/r5OFscO5xjmbOCGbd+5azYhHeTT2fmiUSHPJehq5DrM3KXKcgOhn+a33
rKJg34731gsXtaetU8WYj/dLU8rR9w8=
-----END CERTIFICATE-----
Generated at Thu May 2 08:04:15 2024 by rpki-client on console-ams.rpki-client.org