Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d52cab0b-52b6-30e0-8f35-594af227c3ac.roa
File:                     d52cab0b-52b6-30e0-8f35-594af227c3ac.roa (raw, json)
Hash identifier:          sc77k5n48PQzM8rg1BD8TIHlBxTzJxsF/B65J6zhZFI=
Subject key identifier:   E9:71:16:66:60:ED:BE:CC:44:04:80:EB:16:35:AC:EF:F3:EF:8C:98
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1CCDE3DB97B83B4ACA300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d52cab0b-52b6-30e0-8f35-594af227c3ac.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     16787
IP address blocks:        107.14.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:cc:de:3d:b9:7b:83:b4:ac:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=4bd3c6b1-51cc-4815-9e28-f16dc14dba36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b6:68:24:71:cb:a3:64:c2:07:41:7d:10:73:
                    09:b8:11:e7:ca:af:50:a0:d4:f4:d3:32:39:16:09:
                    90:f3:e6:ef:49:b0:06:9b:69:85:37:76:5c:5e:45:
                    06:fc:e7:a7:8f:42:f5:24:76:07:a0:fd:71:1a:d1:
                    6f:a9:d8:ed:f8:ed:3b:dc:ef:1a:08:7f:14:08:a4:
                    51:02:2f:d5:a4:3a:07:e6:bf:9c:31:4a:f5:9c:13:
                    96:38:06:2c:1e:50:98:59:5d:68:9b:be:de:26:61:
                    f7:c9:3c:fd:b2:cf:9e:21:b2:27:17:6c:c7:f2:fe:
                    67:db:59:26:22:a5:cf:54:a1:12:6d:2d:0f:c1:ea:
                    b4:e3:b0:62:a9:1d:fd:ed:93:80:40:12:29:83:93:
                    af:71:47:35:df:27:21:70:d9:e4:45:8d:00:52:7e:
                    be:c1:7d:e6:7d:81:e8:09:4d:bf:2e:10:1a:91:b9:
                    e1:c4:47:dc:25:d1:84:24:74:8f:fa:7e:0c:c2:dd:
                    2c:17:1f:4b:12:a8:2b:06:6d:00:67:8f:fc:2b:bd:
                    78:3e:c8:1f:1c:2d:92:8f:eb:84:a6:19:f5:3d:83:
                    ad:ac:e5:5a:0f:9c:99:2c:f7:ab:8d:2b:e9:60:a2:
                    52:c0:ee:03:7f:90:2e:33:62:a5:3b:8d:15:69:b6:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:71:16:66:60:ED:BE:CC:44:04:80:EB:16:35:AC:EF:F3:EF:8C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d52cab0b-52b6-30e0-8f35-594af227c3ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:58:c3:49:67:fb:e3:b4:8d:73:8f:f9:35:1a:66:a4:1e:6a:
         d8:d0:df:40:c2:61:40:34:fe:30:13:7e:59:bb:69:79:4f:cc:
         56:fa:89:64:81:9e:dc:f7:d0:d4:48:2a:0a:78:6e:3a:65:81:
         ee:0b:47:78:68:f9:dd:42:48:2a:80:7c:d5:ac:14:ec:38:e6:
         e8:96:6a:c3:ed:49:6c:e4:a2:45:32:d6:46:8c:f8:d2:51:db:
         80:41:13:3b:90:cc:aa:b5:3e:c2:91:ba:b8:2c:33:dc:8b:d2:
         e9:d3:2d:03:72:c3:cf:61:fd:86:1b:d2:e3:9b:3b:bc:ec:15:
         91:73:2d:a7:72:b7:b1:da:90:39:d8:b3:f6:5d:25:27:78:ab:
         4c:21:57:05:c7:77:90:84:21:04:a0:d3:11:c3:58:03:87:ae:
         0d:61:91:fe:46:70:91:e2:8b:e5:f8:a6:a9:fd:72:c5:d8:53:
         09:95:80:c4:ab:14:dd:52:08:8a:76:c7:48:06:d2:9b:4c:d0:
         bd:0f:bc:f9:8f:3d:47:79:db:17:39:65:f7:19:8f:b3:ff:27:
         16:46:0c:a6:9c:8e:3d:c7:e4:3e:84:b5:f2:0e:07:ed:11:a0:
         41:22:33:6d:f0:eb:5f:f7:88:d2:b9:c9:5f:87:d7:4e:76:69:
         68:ae:0f:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0czePbl7g7SsowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NGJkM2M2YjEtNTFjYy00ODE1LTllMjgtZjE2ZGMxNGRiYTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7ZoJHHLo2TCB0F9EHMJuBHnyq9QoNT00zI5
FgmQ8+bvSbAGm2mFN3ZcXkUG/Oenj0L1JHYHoP1xGtFvqdjt+O073O8aCH8UCKRR
Ai/VpDoH5r+cMUr1nBOWOAYsHlCYWV1om77eJmH3yTz9ss+eIbInF2zH8v5n21km
IqXPVKESbS0Pweq047BiqR397ZOAQBIpg5OvcUc13ychcNnkRY0AUn6+wX3mfYHo
CU2/LhAakbnhxEfcJdGEJHSP+n4Mwt0sFx9LEqgrBm0AZ4/8K714PsgfHC2Sj+uE
phn1PYOtrOVaD5yZLPerjSvpYKJSwO4Df5AuM2KlO40Vabb9vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlxFmZg7b7MRASA6xY1rO/z74yYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDUyY2FiMGItNTJiNi0z
MGUwLThmMzUtNTk0YWYyMjdjM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaw6wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBYw0ln++O0jXOP+TUaZqQeatjQ30DCYUA0/jATflm7aXlPzFb6iWSB
ntz30NRIKgp4bjplge4LR3ho+d1CSCqAfNWsFOw45uiWasPtSWzkokUy1kaM+NJR
24BBEzuQzKq1PsKRurgsM9yL0unTLQNyw89h/YYb0uObO7zsFZFzLadyt7HakDnY
s/ZdJSd4q0whVwXHd5CEIQSg0xHDWAOHrg1hkf5GcJHii+X4pqn9csXYUwmVgMSr
FN1SCIp2x0gG0ptM0L0PvPmPPUd52xc5ZfcZj7P/JxZGDKacjj3H5D6EtfIOB+0R
oEEiM23w61/3iNK5yV+H1052aWiuD3Q=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:26 2025 by rpki-client