Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d02a42f8-4e0c-3775-ab9e-317008849673.roa
File:                     d02a42f8-4e0c-3775-ab9e-317008849673.roa (raw, json)
Hash identifier:          CWZaHxd7WpElyDIwqdfCEyPY2twEdMQbJopV9h9QfPE=
Subject key identifier:   D3:2C:92:76:A9:2B:80:C6:13:C3:C0:D2:B4:8F:A2:AB:7F:6D:4F:B2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B2E5E6C0A6645999DAC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d02a42f8-4e0c-3775-ab9e-317008849673.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        174.103.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b2:e5:e6:c0:a6:64:59:99:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=cf6b5784-595a-4de7-b78d-739d1473ea64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:f4:03:8f:17:da:51:f6:49:00:0b:cd:48:
                    c9:62:1b:5f:3d:3b:27:6f:21:50:7b:a6:fe:4c:d8:
                    cb:6d:1d:81:88:65:62:5d:ab:b1:38:4a:fe:23:8c:
                    38:37:1a:d5:7d:d9:34:db:23:9d:10:53:ae:8f:26:
                    79:cf:fe:b2:e5:39:a7:3c:ed:4d:bb:e3:19:64:bc:
                    7a:4e:54:30:27:55:68:70:f2:38:61:57:ba:ac:a4:
                    ca:6b:9b:02:78:f2:b5:be:87:43:f1:f4:0d:6b:5f:
                    0a:c8:0d:99:91:4c:47:0d:c1:92:13:c8:00:e8:ee:
                    7f:78:d2:38:e2:aa:5f:c8:0e:d2:c7:67:24:22:ee:
                    30:dd:9a:d7:a8:fc:4c:04:07:75:aa:e8:da:5c:28:
                    c8:6f:21:e3:52:f3:c5:8e:e3:e5:e1:3d:5d:bd:92:
                    c8:09:48:e8:df:ac:09:16:a7:8d:0d:36:ad:bc:bc:
                    69:26:46:43:04:af:4b:49:38:0c:d8:1d:a3:ad:99:
                    28:58:4e:aa:9e:2d:0c:48:85:44:dc:08:ba:e0:3a:
                    9e:fc:b4:26:ce:4b:49:06:83:c8:e0:6d:c3:a6:fc:
                    fa:c4:c3:df:7d:0a:08:76:e2:9d:86:e8:d8:4c:ae:
                    6a:f1:03:98:e6:1b:b5:5c:81:cf:76:ff:be:45:67:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:92:76:A9:2B:80:C6:13:C3:C0:D2:B4:8F:A2:AB:7F:6D:4F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d02a42f8-4e0c-3775-ab9e-317008849673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.103.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:57:c4:60:c6:58:53:b2:f6:54:ce:99:93:72:2a:20:ae:cf:
         0b:39:b5:d5:fb:cc:c5:56:cf:1e:96:eb:34:ab:16:cb:dd:19:
         60:ab:f3:26:a6:e2:cc:f2:fb:15:2e:dd:13:d8:a8:fb:ac:a7:
         8c:e1:de:5d:52:13:eb:2d:79:2f:0f:c8:e3:32:55:4f:44:a5:
         45:7a:b3:e6:27:e1:5b:c2:ab:6e:71:97:47:0b:8b:18:44:66:
         13:49:fd:0a:59:2a:78:b1:72:ad:4b:7f:d0:88:b2:94:88:e0:
         ad:3b:47:11:8a:42:b2:af:61:a5:f9:d0:d2:43:0a:de:86:0b:
         68:d6:10:bb:22:d1:75:74:25:75:66:4c:4d:08:19:7e:02:11:
         fa:2f:72:ba:45:0f:4b:60:3b:38:39:db:88:0a:32:84:42:89:
         26:dd:fd:b5:d6:2d:44:ba:65:69:2e:83:59:86:53:df:9f:61:
         88:1f:a8:30:d2:82:5e:44:6b:b2:0a:05:7d:74:2e:b8:9f:c4:
         30:a0:e5:59:bc:01:28:46:e3:bc:32:80:db:32:f7:32:67:15:
         9d:7f:a3:18:37:51:c8:46:77:ca:23:f3:32:61:3d:7b:f4:89:
         32:00:47:17:5f:25:79:0a:9b:5c:1f:4e:bc:e6:87:5e:ea:0b:
         2a:29:32:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0bLl5sCmZFmZ2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
Y2Y2YjU3ODQtNTk1YS00ZGU3LWI3OGQtNzM5ZDE0NzNlYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7r0A48X2lH2SQALzUjJYhtfPTsnbyFQe6b+
TNjLbR2BiGViXauxOEr+I4w4NxrVfdk02yOdEFOujyZ5z/6y5TmnPO1Nu+MZZLx6
TlQwJ1VocPI4YVe6rKTKa5sCePK1vodD8fQNa18KyA2ZkUxHDcGSE8gA6O5/eNI4
4qpfyA7Sx2ckIu4w3ZrXqPxMBAd1qujaXCjIbyHjUvPFjuPl4T1dvZLICUjo36wJ
FqeNDTatvLxpJkZDBK9LSTgM2B2jrZkoWE6qni0MSIVE3Ai64Dqe/LQmzktJBoPI
4G3Dpvz6xMPffQoIduKdhujYTK5q8QOY5hu1XIHPdv++RWd8/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMsknapK4DGE8PA0rSPoqt/bU+yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDAyYTQyZjgtNGUwYy0z
Nzc1LWFiOWUtMzE3MDA4ODQ5NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrmdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNXxGDGWFOy9lTOmZNyKiCuzws5tdX7zMVWzx6W6zSrFsvdGWCr8yam
4szy+xUu3RPYqPusp4zh3l1SE+steS8PyOMyVU9EpUV6s+Yn4VvCq25xl0cLixhE
ZhNJ/QpZKnixcq1Lf9CIspSI4K07RxGKQrKvYaX50NJDCt6GC2jWELsi0XV0JXVm
TE0IGX4CEfovcrpFD0tgOzg524gKMoRCiSbd/bXWLUS6ZWkug1mGU9+fYYgfqDDS
gl5Ea7IKBX10LrifxDCg5Vm8AShG47wygNsy9zJnFZ1/oxg3UchGd8oj8zJhPXv0
iTIARxdfJXkKm1wfTrzmh17qCyopMvI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:34:50 2025 by rpki-client