Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
File:                     ddb07463-be38-35e3-a789-7b573b75adc3.roa (raw, json)
Hash identifier:          kChDf+S8WEgGjGF/PvHGYXvj47F/9vKAo3gSXUljX4Y=
Subject key identifier:   D4:FA:E8:C6:39:ED:91:21:1D:53:FF:0A:09:0F:C9:11:E4:DE:6E:3E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A09A6C0B5FEDB5D5525C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11351
IP address blocks:        67.252.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:9a:6c:0b:5f:ed:b5:d5:52:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a72d1e37-7180-48cb-bea2-4ff67704ac22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:90:fc:67:a9:87:a5:41:79:16:83:81:96:
                    25:a4:d6:25:bb:b8:ea:ab:73:3b:fe:f3:c7:a6:5e:
                    4c:b9:3c:87:80:f9:9d:1a:34:63:05:14:0a:09:af:
                    c3:da:61:89:0f:b7:25:d0:87:6a:88:90:23:ab:43:
                    09:38:f2:f9:c2:01:9d:26:84:cc:3c:bf:73:13:b9:
                    e6:de:df:ec:58:3f:ff:02:75:b0:5b:16:bf:7d:fa:
                    af:76:27:48:93:f8:11:2c:f1:6a:2e:4c:91:e9:db:
                    99:a2:6f:2b:8b:11:1c:ea:22:0a:fa:3f:11:c9:8a:
                    03:73:11:d5:62:63:80:6c:ed:bb:2c:f6:a7:d4:32:
                    e6:75:61:be:c2:b1:7a:23:5e:a1:bb:c4:cd:42:ae:
                    2c:8c:0f:e1:fd:9c:7e:54:fd:5e:af:6c:1c:d1:b3:
                    46:e0:8f:ec:cb:5a:e4:7f:70:0a:fa:eb:16:ac:2d:
                    9d:ea:4a:bf:38:25:85:d7:46:c8:f7:36:ca:8e:0f:
                    2b:83:49:c2:8f:7d:8c:02:16:35:a1:09:0e:c7:ab:
                    64:0a:0c:96:40:2b:23:0e:e0:3a:31:fc:9a:83:f3:
                    51:36:f7:46:4a:75:ee:7f:62:c7:fa:82:d3:c5:2e:
                    9d:be:a4:7b:24:b6:11:f8:88:c2:de:19:7d:92:67:
                    b6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FA:E8:C6:39:ED:91:21:1D:53:FF:0A:09:0F:C9:11:E4:DE:6E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.252.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:a4:d9:08:c3:5b:9e:96:1e:9d:56:53:25:db:67:ce:4a:
         30:ae:f9:26:bf:03:be:28:47:ab:d4:75:dd:1f:8f:19:d7:44:
         2b:5d:69:36:0f:e1:bb:e8:37:f3:ce:44:09:be:03:5a:1b:19:
         9a:7a:1b:a8:22:96:42:a5:57:d6:a5:ef:8a:c4:b7:0b:a5:92:
         5b:2f:5e:1c:8d:a5:16:3f:14:f8:74:8b:a8:23:02:ef:f3:19:
         f3:b3:d9:17:47:bd:f3:d6:21:a5:75:88:b1:9a:00:b6:5f:bf:
         05:4a:27:74:bc:cf:e9:63:81:26:44:66:ba:c2:4d:86:da:e9:
         0b:c5:f8:78:d3:7b:ad:59:cd:34:b0:54:20:da:bc:46:35:4f:
         f8:8b:9e:c2:81:20:5c:2c:2a:41:57:5b:72:91:8a:65:d1:ee:
         4a:eb:bb:e0:2a:dc:84:c7:f1:04:5c:14:0e:96:a3:40:3f:9f:
         b8:54:e4:2f:86:de:bc:11:16:47:fc:c8:6b:07:91:60:8c:0c:
         21:8e:f0:77:e5:6c:ec:4b:cc:e4:7b:35:b7:b9:5a:a4:9b:a6:
         37:11:3a:9a:28:d6:c5:29:d4:77:50:2a:c8:9d:04:8f:5a:97:
         f1:5c:56:15:d3:af:0d:2a:e9:49:17:51:22:85:74:43:88:02:
         f0:9e:53:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcioJpsC1/ttdVSXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
YTcyZDFlMzctNzE4MC00OGNiLWJlYTItNGZmNjc3MDRhYzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTaQ/Geph6VBeRaDgZYlpNYlu7jqq3M7/vPH
pl5MuTyHgPmdGjRjBRQKCa/D2mGJD7cl0IdqiJAjq0MJOPL5wgGdJoTMPL9zE7nm
3t/sWD//AnWwWxa/ffqvdidIk/gRLPFqLkyR6duZom8rixEc6iIK+j8RyYoDcxHV
YmOAbO27LPan1DLmdWG+wrF6I16hu8TNQq4sjA/h/Zx+VP1er2wc0bNG4I/sy1rk
f3AK+usWrC2d6kq/OCWF10bI9zbKjg8rg0nCj32MAhY1oQkOx6tkCgyWQCsjDuA6
Mfyag/NRNvdGSnXuf2LH+oLTxS6dvqR7JLYR+IjC3hl9kme2kQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNT66MY57ZEhHVP/CgkPyRHk3m4+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZGRiMDc0NjMtYmUzOC0z
NWUzLWE3ODktN2I1NzNiNzVhZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQ/wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACNek2QjDW56WHp1WUyXbZ85KMK75Jr8DvihHq9R13R+PGddEK11pNg/h
u+g3885ECb4DWhsZmnobqCKWQqVX1qXvisS3C6WSWy9eHI2lFj8U+HSLqCMC7/MZ
87PZF0e989YhpXWIsZoAtl+/BUondLzP6WOBJkRmusJNhtrpC8X4eNN7rVnNNLBU
INq8RjVP+IuewoEgXCwqQVdbcpGKZdHuSuu74CrchMfxBFwUDpajQD+fuFTkL4be
vBEWR/zIaweRYIwMIY7wd+Vs7EvM5Hs1t7lapJumNxE6mijWxSnUd1AqyJ0Ej1qX
8VxWFdOvDSrpSRdRIoV0Q4gC8J5TPg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:39 2024 by rpki-client on console-fra.rpki-client.org