Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b4fa5570-2015-3de8-a281-26b1933ed5a4.roa
File:                     b4fa5570-2015-3de8-a281-26b1933ed5a4.roa (raw, json)
Hash identifier:          bQ1zAtV6IMPT6A5WNopiJo+5VD0e4K60KuXZlrwYLdQ=
Subject key identifier:   72:5B:13:20:0A:53:DD:BB:1B:58:C9:F4:B9:3C:2B:70:48:4B:1F:DC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF0B702BF28E29371F52080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b4fa5570-2015-3de8-a281-26b1933ed5a4.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     8052
IP address blocks:        107.14.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f0:b7:02:bf:28:e2:93:71:f5:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=abd3569e-38f1-40ff-a2f1-d414b5218a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:f7:a9:c2:c5:40:32:b5:84:63:90:b0:e2:
                    c9:10:e1:2b:17:b3:28:82:ed:b8:06:9d:6c:4e:7e:
                    95:14:fb:af:9e:54:be:11:ff:d5:04:ff:25:94:ee:
                    f6:15:dd:23:5e:15:a6:5d:3c:a5:21:69:82:0e:6e:
                    46:62:bf:b6:ff:45:47:19:86:3a:4b:b5:35:ee:dd:
                    36:c4:29:41:c8:29:5c:8a:bf:12:a3:6d:c5:31:6e:
                    67:d8:52:95:1e:2c:44:49:a5:94:f3:a1:df:5d:0f:
                    a3:64:83:ca:63:69:41:21:fd:36:e6:4e:85:43:d8:
                    ba:fc:aa:a2:14:6d:d2:a5:23:46:0a:de:ae:bd:ac:
                    3e:db:a2:bd:63:31:64:9a:99:ed:d7:6d:5a:41:e0:
                    05:ec:49:9e:d5:ae:49:01:18:dc:bf:57:db:fc:12:
                    d2:81:79:4b:f9:ed:d3:38:d6:ed:8d:08:8a:5e:b6:
                    c9:90:82:03:18:16:c7:3e:f9:1b:67:45:a4:e8:57:
                    c7:73:ee:02:a0:f9:3d:ac:78:6b:24:ac:bc:8a:4d:
                    aa:1f:52:4e:d8:0d:5d:b4:99:35:31:20:06:84:2b:
                    58:95:cd:02:38:2b:d1:15:4f:4b:08:29:6e:3f:3d:
                    c3:9f:aa:a8:ab:14:24:4c:70:9b:6d:8b:6b:83:7d:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5B:13:20:0A:53:DD:BB:1B:58:C9:F4:B9:3C:2B:70:48:4B:1F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b4fa5570-2015-3de8-a281-26b1933ed5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:44:43:f9:bc:9b:c1:2d:3d:8b:17:28:db:fd:bc:3a:07:
         c8:fa:64:f5:27:bf:ee:d7:cf:5b:52:52:cf:30:99:3f:c0:3d:
         02:5b:cf:37:fd:41:d1:e4:95:39:3b:35:68:71:5c:a7:07:bc:
         f1:35:bd:5d:2a:88:33:c9:af:65:6d:70:17:fe:14:6c:ce:14:
         38:0b:8c:bd:0f:c3:ba:a2:b3:23:b5:85:8c:d5:30:e0:9e:d3:
         a7:5b:f5:32:55:58:d1:53:77:5f:c6:89:33:50:fd:8f:55:61:
         a9:93:a5:c4:ea:6c:27:3b:cf:5a:dc:5d:c1:d4:65:8e:46:3b:
         82:a9:73:81:a0:32:dd:2a:20:e7:41:48:a6:2f:21:17:af:78:
         80:5a:f0:c3:5d:96:46:d8:e0:ed:7f:69:d9:b2:29:ad:f6:d1:
         be:eb:ba:76:75:3f:45:a7:14:1a:33:46:4a:82:c6:3f:eb:61:
         92:8e:0e:89:b0:ac:a4:22:1e:d3:52:7e:b5:81:71:08:65:79:
         4f:a8:9e:77:1e:0f:0a:76:eb:69:86:cb:52:04:65:5a:65:60:
         87:57:23:e0:98:b8:fb:72:93:51:68:e5:67:36:64:56:89:c5:
         ee:8e:13:e4:a7:74:17:d7:b0:55:ea:bd:46:8d:de:42:3c:ab:
         70:ea:a1:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDhP8LcCvyjik3H1IIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIwMTIxODA1MDAwMFoXDTI2MTIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
YWJkMzU2OWUtMzhmMS00MGZmLWEyZjEtZDQxNGI1MjE4YTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WX3qcLFQDK1hGOQsOLJEOErF7Mogu24Bp1s
Tn6VFPuvnlS+Ef/VBP8llO72Fd0jXhWmXTylIWmCDm5GYr+2/0VHGYY6S7U17t02
xClByClcir8So23FMW5n2FKVHixESaWU86HfXQ+jZIPKY2lBIf025k6FQ9i6/Kqi
FG3SpSNGCt6uvaw+26K9YzFkmpnt121aQeAF7Eme1a5JARjcv1fb/BLSgXlL+e3T
ONbtjQiKXrbJkIIDGBbHPvkbZ0Wk6FfHc+4CoPk9rHhrJKy8ik2qH1JO2A1dtJk1
MSAGhCtYlc0COCvRFU9LCCluPz3Dn6qoqxQkTHCbbYtrg33yVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHJbEyAKU927G1jJ9Lk8K3BISx/cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjRmYTU1NzAtMjAxNS0z
ZGU4LWEyODEtMjZiMTkzM2VkNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaw5UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPpREP5vJvBLT2LFyjb/bw6B8j6ZPUnv+7Xz1tSUs8wmT/APQJbzzf9
QdHklTk7NWhxXKcHvPE1vV0qiDPJr2VtcBf+FGzOFDgLjL0Pw7qisyO1hYzVMOCe
06db9TJVWNFTd1/GiTNQ/Y9VYamTpcTqbCc7z1rcXcHUZY5GO4Kpc4GgMt0qIOdB
SKYvIReveIBa8MNdlkbY4O1/admyKa320b7runZ1P0WnFBozRkqCxj/rYZKODomw
rKQiHtNSfrWBcQhleU+onnceDwp262mGy1IEZVplYIdXI+CYuPtyk1Fo5Wc2ZFaJ
xe6OE+SndBfXsFXqvUaN3kI8q3Dqoa4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:30 2024 by rpki-client on console-ams.rpki-client.org