Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba93807a-296c-3e73-a45e-452b3e411377.roa
File:                     ba93807a-296c-3e73-a45e-452b3e411377.roa (raw, json)
Hash identifier:          Pi1DrCmbgD3eT9+18cbEqZxJK5YES5ha3WbT1U5er1g=
Subject key identifier:   A1:13:19:7B:8C:AD:15:7C:E6:6B:17:4B:AD:BA:44:73:E6:FA:7E:E9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E74FA56E0713FCE6ECB00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba93807a-296c-3e73-a45e-452b3e411377.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        67.9.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:74:fa:56:e0:71:3f:ce:6e:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=9ee157a0-1439-4847-a239-f545768ccad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:12:3a:d7:f5:d4:17:8f:28:ed:54:a6:49:
                    83:2b:72:bc:c2:92:3c:6d:c9:7f:be:f6:c4:98:00:
                    ac:06:31:b6:64:e1:a9:87:f7:f5:79:b8:f8:3d:d5:
                    37:62:12:22:1f:cd:a4:61:43:22:be:98:e6:e0:14:
                    85:a4:f5:c0:96:0b:22:47:65:04:a5:7e:0a:1c:61:
                    d9:85:16:74:4c:0f:7f:26:9b:70:7d:a7:c3:5d:1a:
                    7b:bf:14:3f:9e:d5:93:1a:53:e2:29:84:50:a4:4c:
                    cd:fc:3b:4d:ec:aa:91:8a:08:fd:f2:97:7c:da:73:
                    34:38:c3:b7:18:36:c3:40:0b:8a:1a:17:f9:64:24:
                    be:91:73:ee:9f:db:55:38:12:26:13:d8:91:67:22:
                    b2:9b:48:dd:6d:6c:00:e3:0d:bc:cf:ef:90:75:9d:
                    7c:de:52:66:c6:22:78:7b:72:ad:3a:f0:86:cd:85:
                    7b:52:9f:c5:6b:bb:16:a1:ac:e1:0a:a9:ca:ec:d3:
                    6f:fb:e5:3e:a4:17:ed:b4:47:4f:a2:ee:b4:07:38:
                    3d:f5:cf:c9:92:c0:03:89:65:af:31:00:f6:d9:fa:
                    0e:c4:f4:6b:14:50:f6:3a:ba:35:cb:93:ad:5a:81:
                    c6:fa:06:2b:d6:af:bc:96:a5:af:a5:e5:27:1b:ca:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:13:19:7B:8C:AD:15:7C:E6:6B:17:4B:AD:BA:44:73:E6:FA:7E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba93807a-296c-3e73-a45e-452b3e411377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.9.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:95:87:3d:49:b7:e9:7b:11:76:b6:6c:83:f5:3c:15:d1:4e:
         21:5b:ca:41:36:4f:16:e2:b1:b5:6b:32:e5:c8:55:aa:08:04:
         45:e3:88:fc:bc:77:20:58:eb:92:7c:7f:4e:7a:65:cc:6f:c3:
         67:1f:9c:95:a3:4c:66:84:b5:c4:81:6f:77:75:dc:ab:71:80:
         92:22:67:3b:52:97:64:30:d0:99:74:50:3e:8a:00:c9:02:03:
         cb:44:88:54:69:94:7f:cf:0b:cb:77:5a:64:d9:3e:d1:e7:6e:
         01:37:b8:a9:9e:00:0e:48:3b:35:de:89:e3:aa:b3:17:a7:f5:
         82:e1:fa:6d:49:49:85:8d:6a:f6:90:79:1c:1e:8c:f6:5f:6a:
         02:94:d4:f2:ff:c2:93:f8:fc:40:26:86:f2:a2:a8:40:fd:ba:
         32:da:52:6c:84:a2:69:d4:ec:cb:d5:02:03:88:23:b2:57:42:
         3d:99:07:67:02:87:ea:31:77:73:df:10:10:d1:56:fe:75:8b:
         b0:67:99:47:39:e2:3d:86:d6:55:01:66:43:70:9d:e1:52:d9:
         11:b9:de:b3:a0:a5:81:94:59:a8:c0:d7:fd:22:64:fe:88:c9:
         fa:2a:9f:87:ed:01:9e:91:30:c1:92:f4:11:3f:b8:ca:7a:d0:
         f7:2c:f2:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijnT6VuBxP85uywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
OWVlMTU3YTAtMTQzOS00ODQ3LWEyMzktZjU0NTc2OGNjYWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RESOtf11BePKO1UpkmDK3K8wpI8bcl/vvbE
mACsBjG2ZOGph/f1ebj4PdU3YhIiH82kYUMivpjm4BSFpPXAlgsiR2UEpX4KHGHZ
hRZ0TA9/JptwfafDXRp7vxQ/ntWTGlPiKYRQpEzN/DtN7KqRigj98pd82nM0OMO3
GDbDQAuKGhf5ZCS+kXPun9tVOBImE9iRZyKym0jdbWwA4w28z++QdZ183lJmxiJ4
e3KtOvCGzYV7Up/Fa7sWoazhCqnK7NNv++U+pBfttEdPou60Bzg99c/JksADiWWv
MQD22foOxPRrFFD2Oro1y5OtWoHG+gYr1q+8lqWvpeUnG8rDSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKETGXuMrRV85msXS626RHPm+n7pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYmE5MzgwN2EtMjk2Yy0z
ZTczLWE0NWUtNDUyYjNlNDExMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQwlAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOVhz1Jt+l7EXa2bIP1PBXRTiFbykE2TxbisbVrMuXIVaoIBEXjiPy8
dyBY65J8f056Zcxvw2cfnJWjTGaEtcSBb3d13KtxgJIiZztSl2Qw0Jl0UD6KAMkC
A8tEiFRplH/PC8t3WmTZPtHnbgE3uKmeAA5IOzXeieOqsxen9YLh+m1JSYWNavaQ
eRwejPZfagKU1PL/wpP4/EAmhvKiqED9ujLaUmyEomnU7MvVAgOII7JXQj2ZB2cC
h+oxd3PfEBDRVv51i7BnmUc54j2G1lUBZkNwneFS2RG53rOgpYGUWajA1/0iZP6I
yfoqn4ftAZ6RMMGS9BE/uMp60Pcs8gE=
-----END CERTIFICATE-----
Generated at Wed May 1 15:56:11 2024 by rpki-client on console-ams.rpki-client.org