Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a41bbe87-8af9-3e3d-b946-a6835b92ca8c.roa
File:                     a41bbe87-8af9-3e3d-b946-a6835b92ca8c.roa (raw, json)
Hash identifier:          4wPK+pesbutCopRrncoudKQSlrfNTT7bh3J8e7mrLX8=
Subject key identifier:   CA:9B:47:02:CA:EE:D5:D6:C6:F9:0C:BC:FF:AB:A3:74:21:1B:89:78
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E73F027DEBA13A5841A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a41bbe87-8af9-3e3d-b946-a6835b92ca8c.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        71.41.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:73:f0:27:de:ba:13:a5:84:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=9e1f8602-5a5f-4d53-8573-19d065b6404d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:49:94:8d:8f:58:df:2f:c3:07:2a:3e:1c:
                    11:91:6b:24:79:c8:1e:27:aa:e8:88:3c:d6:45:a5:
                    2b:95:30:c4:d1:f4:58:4c:23:0c:74:3d:db:34:6e:
                    0d:e7:4b:16:0f:32:36:b1:07:70:ae:05:23:56:55:
                    5d:1f:fb:07:e8:9b:07:79:08:93:7b:8e:5a:2d:33:
                    ff:55:36:5b:a6:2e:e9:9a:60:04:9e:92:dc:fc:48:
                    f4:f0:3d:47:50:8a:3a:0d:70:8e:dd:cd:02:39:65:
                    0b:a7:57:14:08:6f:7e:f6:c2:9e:65:2a:f0:55:dd:
                    8b:28:60:10:90:f4:08:81:3e:27:c1:d4:18:40:68:
                    90:87:83:2e:b1:b1:ed:bd:66:13:c6:59:65:75:b8:
                    ac:55:5f:25:6c:fa:75:69:54:15:00:53:bb:94:2f:
                    70:ec:df:60:54:d1:88:7d:fa:57:3b:56:50:d1:72:
                    f4:5a:60:b7:af:2b:0b:5b:e9:9e:24:59:f9:b0:a5:
                    ce:ce:e7:97:45:f2:b8:98:96:0c:61:80:5d:81:09:
                    f6:ef:9d:ac:cb:28:8f:3d:29:05:1f:35:90:a5:b2:
                    51:55:11:48:7e:44:6e:a7:71:c7:13:ed:64:20:1e:
                    e1:1a:d8:65:f3:ec:22:02:21:6d:32:45:80:ed:35:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:47:02:CA:EE:D5:D6:C6:F9:0C:BC:FF:AB:A3:74:21:1B:89:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a41bbe87-8af9-3e3d-b946-a6835b92ca8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.41.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5c:d4:e3:1b:c0:5d:a2:be:eb:7b:d2:d9:98:91:ea:11:3e:
         f5:a7:79:0e:64:5b:59:6d:46:4b:df:3e:5d:94:2a:db:f0:2b:
         c7:23:81:bb:52:8c:bb:4d:0f:c1:f2:ca:ce:bc:1f:02:1c:32:
         31:c7:1b:e9:66:09:f9:d9:ec:ae:a1:62:bf:62:85:7b:b9:8b:
         40:e1:e7:2c:52:13:a3:85:ce:f2:62:42:af:4c:e9:da:70:45:
         e2:04:92:91:27:ee:09:dd:0a:85:6e:13:fa:1e:77:8e:f0:62:
         42:f4:76:81:5e:4c:6b:4e:c1:d9:3d:00:60:ec:45:8e:3d:e8:
         13:a8:27:ce:6e:6c:5e:61:21:c4:58:cb:91:a7:1e:cd:01:4d:
         24:ce:60:42:5f:ea:e3:e9:7f:46:8e:5f:b5:86:46:46:de:00:
         81:c6:6f:75:03:87:e9:39:34:24:6c:28:3c:95:66:41:d2:77:
         c6:b2:00:ce:87:6a:12:05:5c:1a:fe:99:36:df:86:99:0f:c4:
         6e:24:a1:15:7f:d3:7f:8a:9b:a5:d0:69:97:0d:03:24:57:50:
         5e:33:48:3c:56:cf:cc:a3:04:1b:72:b9:1a:29:7e:96:79:2c:
         e3:3a:f6:4b:54:c8:c3:83:b2:81:11:58:b1:ad:6a:6f:a1:a0:
         fc:6d:f1:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijnPwJ966E6WEGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
OWUxZjg2MDItNWE1Zi00ZDUzLTg1NzMtMTlkMDY1YjY0MDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYhJlI2PWN8vwwcqPhwRkWskecgeJ6roiDzW
RaUrlTDE0fRYTCMMdD3bNG4N50sWDzI2sQdwrgUjVlVdH/sH6JsHeQiTe45aLTP/
VTZbpi7pmmAEnpLc/Ej08D1HUIo6DXCO3c0COWULp1cUCG9+9sKeZSrwVd2LKGAQ
kPQIgT4nwdQYQGiQh4MusbHtvWYTxllldbisVV8lbPp1aVQVAFO7lC9w7N9gVNGI
ffpXO1ZQ0XL0WmC3rysLW+meJFn5sKXOzueXRfK4mJYMYYBdgQn2752syyiPPSkF
HzWQpbJRVRFIfkRup3HHE+1kIB7hGthl8+wiAiFtMkWA7TXAUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMqbRwLK7tXWxvkMvP+ro3QhG4l4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTQxYmJlODctOGFmOS0z
ZTNkLWI5NDYtYTY4MzViOTJjYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARyknMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZc1OMbwF2ivut70tmYkeoRPvWneQ5kW1ltRkvfPl2UKtvwK8cjgbtS
jLtND8Hyys68HwIcMjHHG+lmCfnZ7K6hYr9ihXu5i0Dh5yxSE6OFzvJiQq9M6dpw
ReIEkpEn7gndCoVuE/oed47wYkL0doFeTGtOwdk9AGDsRY496BOoJ85ubF5hIcRY
y5GnHs0BTSTOYEJf6uPpf0aOX7WGRkbeAIHGb3UDh+k5NCRsKDyVZkHSd8ayAM6H
ahIFXBr+mTbfhpkPxG4koRV/03+Km6XQaZcNAyRXUF4zSDxWz8yjBBtyuRopfpZ5
LOM69ktUyMODsoERWLGtam+hoPxt8X4=
-----END CERTIFICATE-----
Generated at Wed May 1 16:30:26 2024 by rpki-client on console-fra.rpki-client.org