Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea4b518a-5736-3c0e-bf42-6f70c1d56390.roa
File:                     ea4b518a-5736-3c0e-bf42-6f70c1d56390.roa (raw, json)
Hash identifier:          5rZWzbK6vaiMbtHDWLP3nXlkatlH8MkNycyZJuOmR9w=
Subject key identifier:   88:DF:B4:B7:99:2C:45:C3:AC:38:84:31:CD:43:67:36:05:41:49:18
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858385B114874BDCD8F29A43E3C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea4b518a-5736-3c0e-bf42-6f70c1d56390.roa
Signing time:             Tue 22 Dec 2020 05:00:00 +0000
ROA not before:           Tue 22 Dec 2020 05:00:00 +0000
ROA not after:            Tue 15 Dec 2026 05:00:00 +0000
asID:                     8052
IP address blocks:        72.129.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5b:11:48:74:bd:cd:8f:29:a4:3e:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 22 05:00:00 2020 GMT
            Not After : Dec 15 05:00:00 2026 GMT
        Subject: CN=e31d3b27-686a-4cd6-a7d1-4fadbf596084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:8d:54:7a:87:89:8d:a0:a5:bf:d3:c4:62:
                    14:6d:d4:f7:91:08:8e:6e:d9:45:f7:d7:39:9d:0b:
                    bc:de:ee:eb:1b:61:a1:97:fe:f0:39:5d:8b:b9:a2:
                    ff:f5:85:9e:2a:bd:83:fc:da:a9:28:4a:ea:96:4d:
                    02:04:b2:c4:7b:22:1b:a0:a6:8a:2d:3a:3b:5a:cb:
                    b1:3b:e0:ec:e8:58:26:a9:a2:fc:17:a1:2b:79:05:
                    f2:2f:ab:0f:23:4e:f3:c2:02:0c:46:36:26:fd:fd:
                    ed:b8:ad:a3:44:80:25:eb:31:fc:30:46:5d:01:56:
                    c9:75:aa:4d:20:4b:30:4c:75:a6:9c:91:8d:eb:a2:
                    f7:a0:b0:45:b8:df:b6:0d:76:55:dc:ec:f3:b4:b9:
                    d2:2d:01:5c:c5:58:85:3b:e5:36:bf:23:09:1d:01:
                    75:01:79:c6:6e:5a:c9:8c:78:9b:28:a8:ca:da:15:
                    24:92:fd:f3:bd:c1:7a:51:05:47:5a:80:21:62:8c:
                    a7:5e:c2:96:06:25:5e:20:77:e2:87:6a:bc:3a:18:
                    64:67:2d:86:68:90:8d:c5:e6:f4:c6:8e:87:0f:03:
                    f2:37:75:8b:e3:70:68:fc:32:38:a6:58:2d:aa:7e:
                    ed:23:41:aa:70:0d:a0:60:7f:bc:9c:46:6b:d0:31:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DF:B4:B7:99:2C:45:C3:AC:38:84:31:CD:43:67:36:05:41:49:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea4b518a-5736-3c0e-bf42-6f70c1d56390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.129.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:1d:c1:fb:b7:29:6c:47:75:cc:9b:14:2f:27:c3:07:99:74:
         43:93:e4:f5:09:21:08:16:b5:9c:ec:c3:13:3c:4b:51:99:c2:
         d7:41:6c:15:46:c6:80:c7:38:c3:d0:5f:0f:1a:9d:b4:37:9a:
         4a:10:8b:8c:b2:3a:c1:0d:e7:9b:42:a0:2c:a4:c9:17:38:02:
         47:59:e5:eb:62:dc:c0:61:be:1f:e5:4a:cd:73:aa:e7:e1:ba:
         00:ac:7d:24:57:08:15:00:c7:04:e5:f0:4d:e3:34:a6:92:78:
         7f:f4:4b:0a:0d:02:c7:9a:77:05:94:d1:c3:31:17:68:13:e7:
         c2:03:61:01:e3:40:68:71:da:ef:f2:37:91:f8:d6:aa:f0:d1:
         dd:15:66:5b:06:03:e6:83:da:d8:31:f3:34:29:48:d3:9e:6b:
         14:02:1a:2d:0a:a6:66:b8:be:e6:86:5d:cf:a4:7a:15:18:9d:
         de:02:90:6d:06:28:c7:d8:30:57:66:f7:78:dc:c7:71:99:14:
         8e:7a:c2:d1:89:6f:45:be:b2:9d:58:7f:13:e8:05:b3:48:02:
         87:c3:24:87:c1:68:11:b8:74:0f:6a:e7:53:09:de:78:28:14:
         6e:99:4c:31:cd:f7:be:e6:3e:d5:6c:d2:75:48:31:a9:f7:c6:
         dd:6c:fd:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDhbEUh0vc2PKaQ+PIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIwMTIyMjA1MDAwMFoXDTI2MTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTMxZDNiMjctNjg2YS00Y2Q2LWE3ZDEtNGZhZGJmNTk2MDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2qNVHqHiY2gpb/TxGIUbdT3kQiObtlF99c5
nQu83u7rG2Ghl/7wOV2LuaL/9YWeKr2D/NqpKErqlk0CBLLEeyIboKaKLTo7Wsux
O+Ds6FgmqaL8F6EreQXyL6sPI07zwgIMRjYm/f3tuK2jRIAl6zH8MEZdAVbJdapN
IEswTHWmnJGN66L3oLBFuN+2DXZV3OzztLnSLQFcxViFO+U2vyMJHQF1AXnGblrJ
jHibKKjK2hUkkv3zvcF6UQVHWoAhYoynXsKWBiVeIHfih2q8OhhkZy2GaJCNxeb0
xo6HDwPyN3WL43Bo/DI4plgtqn7tI0GqcA2gYH+8nEZr0DE51QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIjftLeZLEXDrDiEMc1DZzYFQUkYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZWE0YjUxOGEtNTczNi0z
YzBlLWJmNDItNmY3MGMxZDU2MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASIHfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYdwfu3KWxHdcybFC8nwweZdEOT5PUJIQgWtZzswxM8S1GZwtdBbBVG
xoDHOMPQXw8anbQ3mkoQi4yyOsEN55tCoCykyRc4AkdZ5eti3MBhvh/lSs1zqufh
ugCsfSRXCBUAxwTl8E3jNKaSeH/0SwoNAseadwWU0cMxF2gT58IDYQHjQGhx2u/y
N5H41qrw0d0VZlsGA+aD2tgx8zQpSNOeaxQCGi0Kpma4vuaGXc+kehUYnd4CkG0G
KMfYMFdm93jcx3GZFI56wtGJb0W+sp1YfxPoBbNIAofDJIfBaBG4dA9q51MJ3ngo
FG6ZTDHN977mPtVs0nVIMan3xt1s/ZI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:40 2024 by rpki-client on console-fra.rpki-client.org