Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d7eca6bc-d709-3d10-9895-5e95fc49b3c0.roa
File:                     d7eca6bc-d709-3d10-9895-5e95fc49b3c0.roa (raw, json)
Hash identifier:          kDI36KCDBcEQ+nOYLOkIWFY8S7t0n3onFqJ0EV6lH78=
Subject key identifier:   51:76:63:FE:11:30:37:2D:61:46:E6:AC:03:D6:A7:95:49:A0:B8:40
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0B2BFB41ABBFA7B20A900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d7eca6bc-d709-3d10-9895-5e95fc49b3c0.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20001
IP address blocks:        64.183.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:b2:bf:b4:1a:bb:fa:7b:20:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=44d3b6ce-340c-4a56-8650-cb4d5babc3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:63:78:54:a6:e5:a9:e3:9e:f6:1e:cc:54:
                    fc:13:07:11:fd:0a:3f:95:22:17:b0:86:55:46:c7:
                    76:bc:e1:2f:2f:23:15:8f:78:33:4f:00:ca:36:27:
                    58:8f:1c:5c:a4:d6:e3:f5:5c:48:57:1f:13:df:a7:
                    8a:e5:7b:94:26:f7:6e:79:86:85:78:c5:d7:9c:57:
                    8f:6e:b3:b2:7e:2c:e6:17:ac:51:b2:fa:51:b6:d5:
                    cd:a3:07:ab:26:cb:14:a7:63:02:08:7c:49:90:04:
                    8c:49:63:97:02:7b:49:ba:49:4a:fd:46:35:10:64:
                    7e:d1:77:92:20:c3:d6:1b:7c:59:7b:ee:f1:cb:06:
                    70:61:a8:0c:de:28:4c:b7:52:9e:c2:73:02:c2:a4:
                    e6:87:a6:b7:e0:38:e5:b5:23:d2:31:a5:32:d2:24:
                    29:b1:82:68:74:e1:f1:24:aa:92:1e:a3:3f:f4:88:
                    5b:ed:5f:43:e4:4e:d0:e5:64:b5:87:a1:28:56:1b:
                    8f:64:1d:db:8a:72:7e:9a:a5:bf:3f:86:bb:69:d1:
                    80:06:a7:e1:75:83:d8:0a:f8:96:e5:a7:4c:35:77:
                    80:8c:1a:b9:8f:e8:92:c1:a3:f9:1c:71:2b:26:90:
                    0c:fa:a5:fa:ce:87:8c:98:fa:1c:db:6b:69:98:17:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:76:63:FE:11:30:37:2D:61:46:E6:AC:03:D6:A7:95:49:A0:B8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d7eca6bc-d709-3d10-9895-5e95fc49b3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:1f:54:d6:a2:8a:5f:3a:2f:d8:51:e7:00:d0:48:77:34:
         02:eb:39:ef:80:8b:78:3f:43:24:15:7d:bf:48:32:4d:1d:f7:
         23:ef:fd:71:54:b3:26:f6:cc:4a:b0:6b:8b:52:0f:ad:eb:a9:
         f7:dd:db:30:d2:0f:3a:48:30:68:f8:2d:d4:11:ed:81:e2:a9:
         84:8a:81:ed:98:ce:80:db:e7:86:1c:af:2c:c8:80:7a:2d:5c:
         5d:eb:cb:78:72:d0:27:5e:a7:38:ab:a2:ff:a8:63:47:ae:ef:
         b7:e4:36:ba:d9:35:06:ec:d7:d8:87:8b:39:aa:27:e1:8e:ba:
         21:a1:29:a7:ce:3b:15:da:a9:bd:f4:a7:35:be:c4:a0:2a:83:
         ec:f1:c0:b2:e7:10:03:91:f3:e1:c6:77:34:ed:6c:12:bd:7f:
         3f:5f:74:83:37:20:47:0a:17:fb:44:d2:df:5e:09:7b:b3:ea:
         cf:2c:87:03:98:67:44:e6:91:df:6b:96:71:f0:fa:42:3d:48:
         03:9b:f6:52:c8:7b:72:9b:6c:39:13:f9:af:e2:20:49:32:3b:
         eb:ef:de:00:d2:3a:ec:23:15:16:53:0c:9b:84:95:46:a9:db:
         a9:78:5c:bd:51:30:55:c4:5a:65:a6:0a:17:98:99:97:7b:31:
         86:4a:67:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioLK/tBq7+nsgqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
NDRkM2I2Y2UtMzQwYy00YTU2LTg2NTAtY2I0ZDViYWJjM2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul1jeFSm5anjnvYezFT8EwcR/Qo/lSIXsIZV
Rsd2vOEvLyMVj3gzTwDKNidYjxxcpNbj9VxIVx8T36eK5XuUJvdueYaFeMXXnFeP
brOyfizmF6xRsvpRttXNowerJssUp2MCCHxJkASMSWOXAntJuklK/UY1EGR+0XeS
IMPWG3xZe+7xywZwYagM3ihMt1KewnMCwqTmh6a34DjltSPSMaUy0iQpsYJodOHx
JKqSHqM/9Ihb7V9D5E7Q5WS1h6EoVhuPZB3binJ+mqW/P4a7adGABqfhdYPYCviW
5adMNXeAjBq5j+iSwaP5HHErJpAM+qX6zoeMmPoc22tpmBfJvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFF2Y/4RMDctYUbmrAPWp5VJoLhAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDdlY2E2YmMtZDcwOS0z
ZDEwLTk4OTUtNWU5NWZjNDliM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQLesMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwXH1TWoopfOi/YUecA0Eh3NALrOe+Ai3g/QyQVfb9IMk0d9yPv/XFU
syb2zEqwa4tSD63rqffd2zDSDzpIMGj4LdQR7YHiqYSKge2YzoDb54YcryzIgHot
XF3ry3hy0Cdepzirov+oY0eu77fkNrrZNQbs19iHizmqJ+GOuiGhKafOOxXaqb30
pzW+xKAqg+zxwLLnEAOR8+HGdzTtbBK9fz9fdIM3IEcKF/tE0t9eCXuz6s8shwOY
Z0Tmkd9rlnHw+kI9SAOb9lLIe3KbbDkT+a/iIEkyO+vv3gDSOuwjFRZTDJuElUap
26l4XL1RMFXEWmWmCheYmZd7MYZKZ0E=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:38 2024 by rpki-client on console-fra.rpki-client.org