Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4fdfa9d-fb63-3d6d-ac16-529478ac9ff7.roa
File:                     d4fdfa9d-fb63-3d6d-ac16-529478ac9ff7.roa (raw, json)
Hash identifier:          Ar9IeX2GpYUqht9Bn5z3czHGe7BF9nCdYMGUgq1FkAk=
Subject key identifier:   FE:05:A3:D4:03:47:1B:6B:B0:BC:86:C9:DB:5B:93:3D:90:6E:39:31
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E5CA2D8DBF932510674C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4fdfa9d-fb63-3d6d-ac16-529478ac9ff7.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11427
IP address blocks:        24.31.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:5c:a2:d8:db:f9:32:51:06:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=24ce3aa0-4946-42b4-a927-fd48aab1d56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:10:37:1a:21:23:29:5d:6f:e3:4d:92:f6:
                    fc:85:ad:f8:f1:5b:00:08:0e:10:ff:e4:d0:c4:9e:
                    36:b9:9f:5c:9c:d5:8f:ab:ae:64:9b:13:fd:2d:09:
                    68:a8:d7:a2:61:69:6a:cb:db:3d:87:83:ae:e4:4e:
                    90:36:58:44:4d:cc:2f:03:ea:d1:65:d4:34:62:94:
                    cc:ad:e2:45:e7:d3:d7:06:20:26:e9:2c:8e:b7:33:
                    b7:13:83:14:c4:d8:d5:5a:34:e4:6b:98:d2:e2:bb:
                    5a:6f:b9:42:1e:29:88:e6:68:0f:4c:c9:34:e4:7b:
                    3d:49:92:00:2f:dd:39:4d:d8:ca:ff:8a:9d:0e:4a:
                    74:78:b8:48:c8:f8:75:d2:fd:62:d0:3d:70:76:f5:
                    0e:85:2c:69:32:91:ad:f8:08:99:66:2c:96:53:1a:
                    bc:78:a3:72:e1:83:a5:71:04:60:c0:67:18:52:7a:
                    84:d3:b4:a8:09:d9:8c:c4:45:4a:8a:1f:2c:97:6b:
                    11:ed:a3:15:d6:65:df:9c:45:9f:8d:6b:6b:ea:2b:
                    04:f4:71:36:69:f5:8e:d7:61:93:24:47:1d:38:7f:
                    0f:ab:88:8c:f4:d3:19:6f:2b:d7:22:be:18:03:01:
                    74:4b:5c:7c:6e:4d:3d:51:69:fd:94:db:52:a7:17:
                    c4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:05:A3:D4:03:47:1B:6B:B0:BC:86:C9:DB:5B:93:3D:90:6E:39:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4fdfa9d-fb63-3d6d-ac16-529478ac9ff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.31.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6c:fc:28:ca:b8:ac:45:e0:b3:b1:9b:1e:98:33:02:da:74:
         3b:25:0b:67:bb:e3:0a:72:c3:ba:db:36:26:e1:10:39:d6:09:
         e8:e3:7f:85:b9:48:6b:6e:a1:d0:6b:13:ca:9e:77:c7:bb:ca:
         1d:99:ab:9f:1e:b8:fa:87:bc:da:89:6b:1e:58:a9:84:93:7a:
         59:d6:a0:7e:da:14:43:9d:50:fc:0c:f5:3d:17:25:80:65:14:
         67:c5:24:68:77:ed:44:3e:57:57:f5:68:46:08:1f:b4:d9:a2:
         e4:c2:48:22:18:7f:b8:33:28:78:9a:40:38:9c:79:76:c5:a8:
         7c:eb:bd:53:fb:93:46:2b:b9:47:98:bc:7c:24:55:0e:94:2f:
         d4:ff:02:c2:d9:28:45:8e:b6:d4:0a:f8:e9:fe:f9:82:22:90:
         c5:51:26:55:0a:1c:e9:74:b5:c0:70:6a:01:c9:39:dc:18:22:
         23:f2:c4:70:01:7c:4d:bf:7c:dc:c6:5c:13:d9:3d:52:87:4c:
         da:f0:aa:b5:29:e9:ba:1e:57:06:64:37:39:d4:29:9c:44:b1:
         e3:aa:68:10:b1:86:d6:84:cb:2e:46:22:c6:b0:45:65:35:63:
         f2:da:dc:64:17:52:da:d5:1b:a5:64:29:71:a3:f9:f3:0c:ce:
         15:82:42:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijlyi2Nv5MlEGdMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MjRjZTNhYTAtNDk0Ni00MmI0LWE5MjctZmQ0OGFhYjFkNTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztMQNxohIyldb+NNkvb8ha348VsACA4Q/+TQ
xJ42uZ9cnNWPq65kmxP9LQloqNeiYWlqy9s9h4Ou5E6QNlhETcwvA+rRZdQ0YpTM
reJF59PXBiAm6SyOtzO3E4MUxNjVWjTka5jS4rtab7lCHimI5mgPTMk05Hs9SZIA
L905TdjK/4qdDkp0eLhIyPh10v1i0D1wdvUOhSxpMpGt+AiZZiyWUxq8eKNy4YOl
cQRgwGcYUnqE07SoCdmMxEVKih8sl2sR7aMV1mXfnEWfjWtr6isE9HE2afWO12GT
JEcdOH8Pq4iM9NMZbyvXIr4YAwF0S1x8bk09UWn9lNtSpxfEwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4Fo9QDRxtrsLyGydtbkz2QbjkxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDRmZGZhOWQtZmI2My0z
ZDZkLWFjMTYtNTI5NDc4YWM5ZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGB/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhs/CjKuKxF4LOxmx6YMwLadDslC2e74wpyw7rbNibhEDnWCejjf4W5
SGtuodBrE8qed8e7yh2Zq58euPqHvNqJax5YqYSTelnWoH7aFEOdUPwM9T0XJYBl
FGfFJGh37UQ+V1f1aEYIH7TZouTCSCIYf7gzKHiaQDiceXbFqHzrvVP7k0YruUeY
vHwkVQ6UL9T/AsLZKEWOttQK+On++YIikMVRJlUKHOl0tcBwagHJOdwYIiPyxHAB
fE2/fNzGXBPZPVKHTNrwqrUp6boeVwZkNznUKZxEseOqaBCxhtaEyy5GIsawRWU1
Y/La3GQXUtrVG6VkKXGj+fMMzhWCQvI=
-----END CERTIFICATE-----
Generated at Thu May 2 08:04:19 2024 by rpki-client on console-ams.rpki-client.org