Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f114ae47-e05e-3261-8ac2-ea2017b38078.roa
File:                     f114ae47-e05e-3261-8ac2-ea2017b38078.roa (raw, json)
Hash identifier:          3CiZsIuHy0t0Ibm2DNhz3i7yYEUhQYH3IqSndVb0SbE=
Subject key identifier:   81:40:A8:25:37:20:14:F2:B4:35:82:16:2C:D8:FA:31:0B:2C:10:C2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DB166654527B07C2FF180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f114ae47-e05e-3261-8ac2-ea2017b38078.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10838
IP address blocks:        72.129.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:b1:66:65:45:27:b0:7c:2f:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=f9afff50-5439-4b31-9a4d-0f0a53447f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:be:31:44:d6:5e:0f:1c:e3:2a:57:ac:08:55:
                    3f:be:54:49:e0:92:a2:cf:a4:12:2e:a1:73:95:e4:
                    15:05:fe:55:00:cd:74:7c:c9:bc:44:1a:1c:69:06:
                    ff:9b:85:dc:20:34:6e:04:ab:1d:cc:6c:9f:77:15:
                    bd:77:69:bd:53:cb:04:4f:ef:f7:bb:15:b6:99:e5:
                    0d:69:d3:8e:8e:0d:8c:bc:67:b3:87:d9:56:15:fe:
                    f4:37:5a:48:d8:a0:37:05:4a:ae:20:4b:b1:c7:e2:
                    41:67:52:22:cb:5d:ab:8f:bb:9d:83:d0:87:0b:c5:
                    48:8c:30:51:8b:8c:14:e5:ac:ee:b7:c9:56:e8:a7:
                    b8:56:c9:9b:cb:fe:f7:d1:3a:bd:f2:0b:c9:2e:2a:
                    c1:5d:2e:1b:e1:b5:00:29:ca:c8:3c:a0:7f:37:66:
                    eb:14:97:ac:aa:59:dd:af:99:e0:25:a8:07:f6:23:
                    13:52:f8:23:9b:d7:38:cf:be:4e:e9:87:c0:8b:a5:
                    6a:45:e2:32:5e:9f:40:87:3f:7d:5b:00:15:e2:51:
                    73:1f:d7:7a:8a:c7:69:d3:7b:a5:6c:2e:da:8f:ce:
                    4c:54:90:47:bb:0b:3a:60:db:5e:8e:18:b9:2f:7d:
                    2e:bd:3e:f2:56:27:b2:b6:3d:83:a8:1c:06:27:36:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:40:A8:25:37:20:14:F2:B4:35:82:16:2C:D8:FA:31:0B:2C:10:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f114ae47-e05e-3261-8ac2-ea2017b38078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.129.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:02:c8:9a:71:81:e7:28:8e:f3:1d:e7:ac:99:d5:f9:b7:ea:
         cb:65:8b:64:e2:bc:56:1b:31:ed:3a:c0:14:42:4d:9f:23:c6:
         66:73:1a:38:b7:04:6a:73:18:65:b1:fb:ae:9d:e6:91:3c:1e:
         c8:05:c6:f1:e2:23:8d:b9:71:61:78:0e:87:30:44:6e:4e:b3:
         54:62:f0:b0:7c:7b:24:50:c9:88:d9:6c:46:f8:34:d9:3c:d3:
         2b:ad:4a:ff:3e:79:59:e4:d2:60:bb:6e:88:ec:bf:2b:b2:80:
         ef:64:04:fa:8b:60:3b:78:53:3d:0e:e2:1a:24:36:db:4f:5e:
         50:de:3a:a6:db:fd:dc:fa:76:e2:52:a1:ac:9b:ec:01:a3:95:
         6e:1e:88:ac:a4:a4:08:2b:64:a6:2a:3e:f2:8d:f1:0a:6c:d1:
         cc:c6:d6:c4:e1:c7:7f:68:00:c1:eb:58:16:60:86:97:cd:ff:
         df:f1:ba:1b:d5:e7:ab:ee:aa:7d:32:b3:46:44:1f:78:8c:fc:
         47:34:20:34:f0:15:37:50:03:ef:16:5e:51:fb:ff:ff:dc:84:
         4a:f6:26:94:5f:62:c0:fd:37:4a:b9:90:5a:12:b1:92:b6:d2:
         79:85:51:63:5e:ca:48:c1:e9:ea:4d:d7:03:e4:61:c0:31:7d:
         4b:81:3c:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijbFmZUUnsHwv8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
ZjlhZmZmNTAtNTQzOS00YjMxLTlhNGQtMGYwYTUzNDQ3ZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb4xRNZeDxzjKlesCFU/vlRJ4JKiz6QSLqFz
leQVBf5VAM10fMm8RBocaQb/m4XcIDRuBKsdzGyfdxW9d2m9U8sET+/3uxW2meUN
adOOjg2MvGezh9lWFf70N1pI2KA3BUquIEuxx+JBZ1Iiy12rj7udg9CHC8VIjDBR
i4wU5azut8lW6Ke4Vsmby/730Tq98gvJLirBXS4b4bUAKcrIPKB/N2brFJesqlnd
r5ngJagH9iMTUvgjm9c4z75O6YfAi6VqReIyXp9Ahz99WwAV4lFzH9d6isdp03ul
bC7aj85MVJBHuws6YNtejhi5L30uvT7yVieytj2DqBwGJzZ13wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFAqCU3IBTytDWCFizY+jELLBDCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZjExNGFlNDctZTA1ZS0z
MjYxLThhYzItZWEyMDE3YjM4MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSIEqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACICyJpxgecojvMd56yZ1fm36stli2TivFYbMe06wBRCTZ8jxmZzGji3
BGpzGGWx+66d5pE8HsgFxvHiI425cWF4DocwRG5Os1Ri8LB8eyRQyYjZbEb4NNk8
0yutSv8+eVnk0mC7bojsvyuygO9kBPqLYDt4Uz0O4hokNttPXlDeOqbb/dz6duJS
oayb7AGjlW4eiKykpAgrZKYqPvKN8Qps0czG1sThx39oAMHrWBZghpfN/9/xuhvV
56vuqn0ys0ZEH3iM/Ec0IDTwFTdQA+8WXlH7///chEr2JpRfYsD9N0q5kFoSsZK2
0nmFUWNeykjB6epN1wPkYcAxfUuBPIY=
-----END CERTIFICATE-----
Generated at Wed May 1 15:56:16 2024 by rpki-client on console-ams.rpki-client.org