Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da2858a7-eec0-30f3-b81f-480864e238db.roa
File:                     da2858a7-eec0-30f3-b81f-480864e238db.roa (raw, json)
Hash identifier:          qwr3Br2wfpyCqWhc5Fql9jkKEcKckCxEjWrAd3woT1Y=
Subject key identifier:   17:1D:29:5D:8F:72:37:A5:73:6B:75:8A:FC:C5:50:B9:DF:DB:01:09
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E69DA1A19B47A843BBD40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da2858a7-eec0-30f3-b81f-480864e238db.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     17291
IP address blocks:        71.41.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:69:da:1a:19:b4:7a:84:3b:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=5589931e-2063-48e4-a71d-c01e5361dd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:ad:c4:67:bf:24:ae:c9:4f:50:99:d4:8d:
                    98:70:7f:07:54:d1:97:da:df:59:90:5b:ae:c9:d9:
                    ad:f8:aa:12:4d:62:db:ac:f0:c1:0b:38:62:e0:e1:
                    44:23:5c:c7:26:7e:0f:8f:e2:04:0d:75:f7:2c:7a:
                    d0:59:74:6f:aa:ae:b5:43:2f:e0:56:0b:a7:a4:69:
                    f4:5a:0f:a9:92:0b:64:9d:4c:43:04:cb:0b:bc:18:
                    5a:02:3d:7f:d4:6f:f6:52:d0:8d:4d:b9:0a:46:46:
                    8c:76:b0:a9:2b:7c:66:0b:58:ae:4a:04:2c:28:32:
                    46:d0:b9:15:88:d3:b6:5f:9e:ab:0a:6d:30:75:a1:
                    6f:9a:43:2b:12:a9:ef:18:0d:be:e8:1c:9e:14:51:
                    83:60:64:4e:ea:42:9b:51:3d:86:c9:9e:96:fe:85:
                    b1:0e:7e:a8:e2:e8:b1:b1:71:f0:0f:f9:0e:87:06:
                    dd:e8:95:09:bd:21:72:d8:a4:94:98:d4:d0:ad:52:
                    cf:93:64:ad:ae:da:04:12:dc:07:f8:f8:c9:a5:37:
                    25:e9:4a:d1:fc:e2:c6:04:29:82:9b:f1:f3:78:c5:
                    59:02:b8:d6:d6:a8:6a:0c:8f:9c:9f:fb:4c:13:c7:
                    10:57:cd:8b:bc:1e:4c:ed:29:92:1a:e8:4a:09:b4:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1D:29:5D:8F:72:37:A5:73:6B:75:8A:FC:C5:50:B9:DF:DB:01:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da2858a7-eec0-30f3-b81f-480864e238db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.41.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6e:4d:63:3c:a6:73:0f:dd:e7:53:39:19:b0:80:9a:c9:c9:
         81:60:25:67:91:05:36:2b:2c:00:19:0c:0e:af:9c:b9:a3:0a:
         1a:e2:de:ad:86:19:3b:5e:f4:6b:b3:b8:8c:17:9e:db:38:d5:
         8f:05:6c:d3:65:4a:67:b5:12:10:fd:22:22:73:97:e9:1d:0b:
         bf:93:5f:d2:da:81:a3:83:8d:9c:66:41:93:7b:5d:5a:3e:4e:
         67:e4:61:05:c9:60:e5:f7:ea:58:f7:79:a6:35:e9:e8:7e:77:
         4f:06:5f:ad:7e:24:08:85:2a:34:e6:7f:31:33:52:c3:b5:1d:
         33:d5:f5:0a:71:ff:49:2d:2b:7d:7c:cd:73:45:61:86:ca:b7:
         ba:62:d2:58:c9:ee:3a:c9:ec:4c:85:b0:55:2a:af:59:0c:10:
         ea:9f:04:36:a1:ae:ed:f1:73:22:59:1f:e0:b1:34:be:f8:e9:
         fb:f9:52:ba:2b:96:72:3a:de:33:3b:2b:5d:20:3e:d0:c7:1a:
         fa:03:7a:b7:a4:e5:45:31:e0:d2:59:96:27:4d:56:2f:1e:84:
         b0:bc:be:c1:91:2b:68:6f:ae:b6:1a:d0:66:fc:59:6c:43:63:
         fd:a7:26:c9:e8:76:6e:06:d9:53:66:b0:5d:37:95:bd:68:81:
         40:3f:5a:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijmnaGhm0eoQ7vUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
NTU4OTkzMWUtMjA2My00OGU0LWE3MWQtYzAxZTUzNjFkZDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZCtxGe/JK7JT1CZ1I2YcH8HVNGX2t9ZkFuu
ydmt+KoSTWLbrPDBCzhi4OFEI1zHJn4Pj+IEDXX3LHrQWXRvqq61Qy/gVgunpGn0
Wg+pkgtknUxDBMsLvBhaAj1/1G/2UtCNTbkKRkaMdrCpK3xmC1iuSgQsKDJG0LkV
iNO2X56rCm0wdaFvmkMrEqnvGA2+6ByeFFGDYGRO6kKbUT2GyZ6W/oWxDn6o4uix
sXHwD/kOhwbd6JUJvSFy2KSUmNTQrVLPk2StrtoEEtwH+PjJpTcl6UrR/OLGBCmC
m/HzeMVZArjW1qhqDI+cn/tME8cQV82LvB5M7SmSGuhKCbTJdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcdKV2Pcjelc2t1ivzFULnf2wEJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZGEyODU4YTctZWVjMC0z
MGYzLWI4MWYtNDgwODY0ZTIzOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARykNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRuTWM8pnMP3edTORmwgJrJyYFgJWeRBTYrLAAZDA6vnLmjChri3q2G
GTte9GuzuIwXnts41Y8FbNNlSme1EhD9IiJzl+kdC7+TX9LagaODjZxmQZN7XVo+
TmfkYQXJYOX36lj3eaY16eh+d08GX61+JAiFKjTmfzEzUsO1HTPV9Qpx/0ktK318
zXNFYYbKt7pi0ljJ7jrJ7EyFsFUqr1kMEOqfBDahru3xcyJZH+CxNL746fv5Uror
lnI63jM7K10gPtDHGvoDerek5UUx4NJZlidNVi8ehLC8vsGRK2hvrrYa0Gb8WWxD
Y/2nJsnodm4G2VNmsF03lb1ogUA/Wqc=
-----END CERTIFICATE-----
Generated at Wed May 1 16:30:30 2024 by rpki-client on console-fra.rpki-client.org