Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/a3fc6399-f603-3a63-a6c5-7fb9584d4d41.roa
File:                     a3fc6399-f603-3a63-a6c5-7fb9584d4d41.roa (raw, json)
Hash identifier:          5ejCwc69hVQ+gQ12w83KoHY9ILn86JmEjEVoDYjKzvM=
Subject key identifier:   AE:0F:7D:12:F1:BF:C8:D8:1C:B9:CF:DB:E3:30:DC:74:C4:F0:48:4E
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584882808BAB2853E7BA6AC69300
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/a3fc6399-f603-3a63-a6c5-7fb9584d4d41.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        69.7.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:8b:ab:28:53:e7:ba:6a:c6:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=47cbac7a-1231-4619-b5ea-24aa47506f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:44:f1:06:f0:39:2f:eb:48:ab:3e:48:6e:7c:
                    e6:23:5e:0b:c1:14:ff:e3:97:14:59:bd:f3:17:fb:
                    3a:23:af:bc:3a:d3:c6:35:0f:dd:cf:27:77:fa:d7:
                    71:d4:15:05:f0:c1:be:4b:cd:9b:2a:c1:f5:58:c1:
                    da:a2:28:3b:e4:07:74:8b:f3:e0:b5:0d:9e:dc:a6:
                    18:59:eb:07:cc:28:2d:70:c7:2b:10:74:b1:d4:07:
                    75:ea:d4:c4:10:53:ad:54:07:a0:d9:ea:65:81:e7:
                    39:81:b0:50:40:de:ff:62:8e:56:b2:56:26:cd:98:
                    fe:cf:a7:b4:05:c3:4f:ba:e5:a9:ac:42:ea:0d:2b:
                    f3:20:d3:8f:77:30:e8:cf:95:98:40:5c:02:07:70:
                    2c:48:e8:33:84:05:6d:b9:4c:1b:19:08:a4:60:b5:
                    59:6d:c9:58:a0:b5:fb:57:5b:3d:41:39:e2:a4:7a:
                    30:f0:5d:55:73:31:09:9f:2c:16:db:d8:c8:b0:83:
                    0a:d1:08:d9:27:d9:54:04:f5:23:42:1b:24:2a:8a:
                    39:cc:44:49:83:2c:b7:a8:13:a1:84:11:dc:77:9b:
                    a8:26:41:e2:f3:48:d5:25:68:70:f1:17:92:db:57:
                    f4:1f:09:51:a6:4f:26:e0:dc:f0:43:fd:dc:b0:8b:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0F:7D:12:F1:BF:C8:D8:1C:B9:CF:DB:E3:30:DC:74:C4:F0:48:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/a3fc6399-f603-3a63-a6c5-7fb9584d4d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:36:ff:8d:2b:c3:62:09:71:2f:3e:e2:9a:1d:c4:30:96:de:
         07:15:01:65:ce:b2:24:cc:21:e8:98:b4:0d:61:6e:8b:31:4c:
         22:b8:c5:dc:aa:b3:a9:dd:06:c9:8e:62:2c:21:b3:c3:73:4e:
         da:49:0a:76:08:58:82:a9:42:de:f6:73:ef:2d:84:f1:e6:82:
         45:98:4c:84:44:b6:eb:2e:0b:c4:8d:22:9e:04:00:78:c2:34:
         3c:cf:d0:f7:20:5e:4c:49:c7:00:c9:4f:7f:3e:9f:e5:cb:55:
         1a:8b:e1:3e:17:71:14:27:7d:65:89:d7:a8:70:d4:16:09:67:
         6d:2d:46:00:be:7c:95:dc:f7:38:01:5d:a9:7c:bd:31:7a:fd:
         9e:08:c5:81:b0:4a:97:bd:6a:96:1c:91:df:21:e2:c0:ba:1e:
         3d:32:c3:5d:7d:41:2a:4c:8e:dc:2f:77:90:f0:47:e0:39:21:
         99:6e:7f:ef:4d:92:5f:c4:a7:04:c5:f4:53:12:b8:5f:2a:2b:
         f0:9a:ac:9d:ee:c8:a5:90:73:4a:e9:d3:bc:db:01:e0:04:b6:
         85:39:d5:d8:39:50:aa:02:af:dc:19:fa:99:03:89:2c:f1:03:
         6f:97:86:8f:2f:c6:8a:c0:ee:3e:21:9d:91:65:f1:c8:24:06:
         2e:af:10:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIurKFPnumrGkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTExYWZjYzQtZGIyMi00MjgyLWFjY2EtZTFlNjc2YTVh
ZTIwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDdjYmFjN2EtMTIzMS00NjE5LWI1ZWEtMjRhYTQ3NTA2ZjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgETxBvA5L+tIqz5IbnzmI14LwRT/45cUWb3z
F/s6I6+8OtPGNQ/dzyd3+tdx1BUF8MG+S82bKsH1WMHaoig75Ad0i/PgtQ2e3KYY
WesHzCgtcMcrEHSx1Ad16tTEEFOtVAeg2eplgec5gbBQQN7/Yo5WslYmzZj+z6e0
BcNPuuWprELqDSvzINOPdzDoz5WYQFwCB3AsSOgzhAVtuUwbGQikYLVZbclYoLX7
V1s9QTnipHow8F1VczEJnywW29jIsIMK0QjZJ9lUBPUjQhskKoo5zERJgyy3qBOh
hBHcd5uoJkHi80jVJWhw8ReS21f0HwlRpk8m4NzwQ/3csIt2XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4PfRLxv8jYHLnP2+Mw3HTE8EhOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MTFh
ZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2NzZhNWFlMjAvYTNmYzYzOTktZjYwMy0z
YTYzLWE2YzUtN2ZiOTU4NGQ0ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTExYWZjYzQtZGIyMi00MjgyLWFj
Y2EtZTFlNjc2YTVhZTIwLzkxMWFmY2M0LWRiMjItNDI4Mi1hY2NhLWUxZTY3NmE1
YWUyMC5jcmwwHwYDVR0jBBgwFoAUaRq26D5nlEY54u/RTNXkdWk2kOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MTFhZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2
NzZhNWFlMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQeNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEk2/40rw2IJcS8+4podxDCW3gcVAWXOsiTMIeiYtA1hbosxTCK4xdyq
s6ndBsmOYiwhs8NzTtpJCnYIWIKpQt72c+8thPHmgkWYTIREtusuC8SNIp4EAHjC
NDzP0PcgXkxJxwDJT38+n+XLVRqL4T4XcRQnfWWJ16hw1BYJZ20tRgC+fJXc9zgB
Xal8vTF6/Z4IxYGwSpe9apYckd8h4sC6Hj0yw119QSpMjtwvd5DwR+A5IZluf+9N
kl/EpwTF9FMSuF8qK/CarJ3uyKWQc0rp07zbAeAEtoU51dg5UKoCr9wZ+pkDiSzx
A2+Xho8vxorA7j4hnZFl8cgkBi6vEBs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:07 2025 by rpki-client