Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d2ada5bd-d925-34d6-845a-c9f0eb68be4a.roa
File:                     d2ada5bd-d925-34d6-845a-c9f0eb68be4a.roa (raw, json)
Hash identifier:          pHCsF9dibfUfvtQvEk6Bt+pXkhvZvcvcdfGYapwCL/I=
Subject key identifier:   AA:10:D9:72:3F:D3:17:D1:1E:F9:6A:03:F9:8B:D6:4F:66:FA:36:53
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E74CF82113AC428848780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d2ada5bd-d925-34d6-845a-c9f0eb68be4a.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        97.78.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:74:cf:82:11:3a:c4:28:84:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=41a9dd2f-8f84-4482-8a16-3072d4951126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:95:c8:63:63:af:b3:90:b6:73:1a:f7:cb:
                    1b:c3:57:5c:db:76:17:cb:df:f7:50:26:0f:7e:67:
                    f0:59:1b:22:54:0b:0f:c2:74:b9:2a:e1:f0:b6:8b:
                    65:02:8b:a9:d8:df:cf:ef:2c:5f:48:b0:77:bd:fc:
                    04:22:e9:79:fe:36:24:11:b3:05:21:9f:f6:5a:42:
                    a1:5f:1b:5a:4f:27:f5:78:6a:5e:2a:7d:06:b1:ee:
                    3f:ba:9b:fe:d8:7a:f1:f6:98:c5:2a:25:ce:fa:aa:
                    a1:63:ff:ca:ed:af:43:75:5e:84:a6:d5:80:2e:ff:
                    49:a5:31:db:65:99:51:12:2b:b6:db:65:4a:38:2f:
                    fe:b3:6f:67:16:cf:1f:d2:d0:2d:b0:8a:c7:8a:84:
                    2c:ec:6c:83:03:7e:ed:d4:2e:47:f4:42:86:31:60:
                    70:41:08:8d:dc:f5:5a:60:68:58:e6:fa:d1:09:50:
                    80:1b:6f:cb:32:17:ad:77:21:df:04:47:e3:f7:7d:
                    41:66:97:f3:a4:86:65:85:21:72:94:39:d2:2c:16:
                    96:d4:dc:12:4b:de:fc:d3:f9:60:62:02:3d:26:3b:
                    73:f4:da:95:c1:49:0a:8f:ed:39:36:10:57:b0:17:
                    2c:d8:70:4c:22:c8:5e:c4:4d:01:7c:a9:e4:7f:ff:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:10:D9:72:3F:D3:17:D1:1E:F9:6A:03:F9:8B:D6:4F:66:FA:36:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d2ada5bd-d925-34d6-845a-c9f0eb68be4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.78.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:78:90:61:e1:40:d6:94:01:d9:98:9d:43:86:24:3d:32:4e:
         eb:b7:00:ac:93:1f:c9:67:c7:2d:f6:f5:98:ab:fe:6c:95:17:
         07:0f:7f:f0:44:60:b6:b2:81:16:f9:ad:ad:49:ad:c9:6c:6b:
         11:d1:86:2d:31:ed:3c:4b:0f:17:48:0c:53:e4:e8:c3:6d:18:
         12:4d:a3:c0:7e:a9:54:20:9d:88:00:44:09:17:92:35:50:b9:
         0c:ef:9d:6f:81:aa:11:01:7a:9d:bd:e8:a7:07:28:67:83:68:
         42:10:89:ea:5d:e1:b1:eb:7f:c3:0d:2e:42:0b:37:cc:fe:d1:
         f7:8e:87:6d:78:57:ce:7a:55:4a:78:f1:d8:95:73:dd:3e:61:
         ce:60:3e:bc:65:f9:da:5d:36:70:02:c7:ec:cf:5f:e0:7f:ac:
         cf:60:3e:b7:81:a8:82:40:48:61:02:6c:d6:3f:0d:82:8b:08:
         8c:6b:7d:3a:59:25:42:9c:8b:af:42:aa:44:d9:2a:df:d4:be:
         23:8c:98:3f:3d:2a:1d:7f:67:af:b1:8a:1e:ce:13:2f:69:be:
         c8:59:fa:a7:f0:8a:8b:e1:a6:a8:02:f1:51:87:df:50:ed:5d:
         64:75:4d:7f:60:aa:f3:d4:e3:d3:02:66:1c:9e:28:50:ea:89:
         93:26:12:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijnTPghE6xCiEh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
NDFhOWRkMmYtOGY4NC00NDgyLThhMTYtMzA3MmQ0OTUxMTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDGVyGNjr7OQtnMa98sbw1dc23YXy9/3UCYP
fmfwWRsiVAsPwnS5KuHwtotlAoup2N/P7yxfSLB3vfwEIul5/jYkEbMFIZ/2WkKh
XxtaTyf1eGpeKn0Gse4/upv+2Hrx9pjFKiXO+qqhY//K7a9DdV6EptWALv9JpTHb
ZZlREiu222VKOC/+s29nFs8f0tAtsIrHioQs7GyDA37t1C5H9EKGMWBwQQiN3PVa
YGhY5vrRCVCAG2/LMhetdyHfBEfj931BZpfzpIZlhSFylDnSLBaW1NwSS9780/lg
YgI9Jjtz9NqVwUkKj+05NhBXsBcs2HBMIshexE0BfKnkf//XlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKoQ2XI/0xfRHvlqA/mL1k9m+jZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDJhZGE1YmQtZDkyNS0z
NGQ2LTg0NWEtYzlmMGViNjhiZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYU4gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEB4kGHhQNaUAdmYnUOGJD0yTuu3AKyTH8lnxy329Zir/myVFwcPf/BE
YLaygRb5ra1JrclsaxHRhi0x7TxLDxdIDFPk6MNtGBJNo8B+qVQgnYgARAkXkjVQ
uQzvnW+BqhEBep296KcHKGeDaEIQiepd4bHrf8MNLkILN8z+0feOh214V856VUp4
8diVc90+Yc5gPrxl+dpdNnACx+zPX+B/rM9gPreBqIJASGECbNY/DYKLCIxrfTpZ
JUKci69CqkTZKt/UviOMmD89Kh1/Z6+xih7OEy9pvshZ+qfwiovhpqgC8VGH31Dt
XWR1TX9gqvPU49MCZhyeKFDqiZMmEmI=
-----END CERTIFICATE-----