Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d68c9a1e-9f0f-3509-9f25-fc4773fd1a1b.roa
File:                     d68c9a1e-9f0f-3509-9f25-fc4773fd1a1b.roa (raw, json)
Hash identifier:          5ej1EuCchwIfjl5j6qzN+Hpddh5Z0c2wXRkLLqql0Us=
Subject key identifier:   4B:C8:93:2B:25:27:11:24:A2:D4:92:1A:CE:FA:F8:0B:B9:74:D8:C1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285844F19AABF19DD2F4FE617D43C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d68c9a1e-9f0f-3509-9f25-fc4773fd1a1b.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     400031
IP address blocks:        216.10.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:ab:f1:9d:d2:f4:fe:61:7d:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=e837af08-e096-4fc5-91b4-fcc2fac5b4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:29:0c:73:61:df:eb:5e:1c:3b:94:5a:9e:
                    f8:fb:f5:8f:27:ee:a8:6e:15:01:b6:9a:60:d4:14:
                    27:8e:b5:97:b6:cb:c8:eb:9c:93:3e:7c:d7:5d:6c:
                    62:fe:87:bf:be:cb:93:e5:ca:8d:3f:0c:19:13:f0:
                    3d:fc:ce:d7:d4:20:22:89:4f:80:aa:3e:68:cc:53:
                    36:9c:2e:3e:4e:be:7e:99:bd:2c:cf:3b:4b:47:d5:
                    df:17:db:85:43:c1:06:22:6c:d0:fe:89:ba:b9:97:
                    cc:19:6b:13:9c:8b:dc:92:80:1c:6e:a5:2e:7f:a0:
                    2f:0e:de:8b:be:38:34:a8:5c:44:dd:f2:b9:a9:3f:
                    0a:b9:36:dd:e4:31:f0:48:db:b9:a4:93:95:b6:4b:
                    1c:df:96:1c:cc:b3:04:39:6c:58:ab:01:28:de:bd:
                    22:a5:99:cd:05:7f:98:a8:c6:57:b4:78:a0:5d:a6:
                    7d:3c:07:32:2e:52:df:f7:48:81:d5:25:00:15:54:
                    48:1d:4b:3f:cb:49:08:93:d9:d8:4e:d4:af:2d:52:
                    f5:cd:ba:37:22:bf:53:04:43:aa:34:cf:6a:18:9e:
                    d0:5b:0c:cd:be:b4:8d:62:bf:64:30:c8:55:35:b7:
                    9f:6f:61:5f:0f:97:cf:d0:f6:a9:4e:22:75:d1:74:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C8:93:2B:25:27:11:24:A2:D4:92:1A:CE:FA:F8:0B:B9:74:D8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d68c9a1e-9f0f-3509-9f25-fc4773fd1a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:24:db:c1:6b:d4:ea:09:e8:e8:37:89:e1:18:1d:c6:b0:5a:
         83:ec:69:a7:3b:ba:f7:fb:2c:ac:b8:7d:b0:83:17:81:43:04:
         9d:25:6e:77:b4:73:18:0f:10:c6:77:04:d9:48:a6:28:42:e1:
         b1:ac:1b:4a:ed:25:7f:d0:a4:65:02:71:bf:9a:aa:7e:9a:d8:
         04:84:86:5e:ec:62:6c:1f:37:39:73:44:46:c2:88:96:62:6d:
         ab:db:82:89:df:74:61:eb:52:47:b6:7a:31:9c:18:7b:0c:08:
         df:01:5a:8c:47:3d:b2:67:43:c4:33:cf:a2:69:d8:b6:a8:c3:
         be:b0:43:3b:03:8e:d6:00:85:80:c8:c7:26:81:1a:3c:c1:34:
         dd:ee:05:a4:a4:ba:40:3e:97:90:d4:c5:f2:19:e0:4d:18:29:
         c4:4a:8e:ec:db:ce:18:8d:60:85:90:7e:74:09:5c:43:d8:f7:
         79:a0:df:b2:6c:d6:01:14:c2:1f:e8:0d:98:a7:ef:21:01:15:
         35:c8:85:10:90:fc:66:3f:00:0d:6c:0e:e3:c2:38:4d:5a:5a:
         56:c9:e5:47:6e:67:29:0d:10:79:0e:8e:01:eb:f4:8f:8a:d5:
         1a:b3:b4:d9:4e:db:0a:cf:6f:b1:d2:1f:d8:04:7f:b9:8b:9f:
         0b:3d:0d:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETxmqvxndL0/mF9Q8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDIxOTE0MDAzMVoXDTI0MDUxOTEzMDAzMVowLzEtMCsGA1UEAxMk
ZTgzN2FmMDgtZTA5Ni00ZmM1LTkxYjQtZmNjMmZhYzViNGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSgpDHNh3+teHDuUWp74+/WPJ+6obhUBtppg
1BQnjrWXtsvI65yTPnzXXWxi/oe/vsuT5cqNPwwZE/A9/M7X1CAiiU+Aqj5ozFM2
nC4+Tr5+mb0szztLR9XfF9uFQ8EGImzQ/om6uZfMGWsTnIvckoAcbqUuf6AvDt6L
vjg0qFxE3fK5qT8KuTbd5DHwSNu5pJOVtksc35YczLMEOWxYqwEo3r0ipZnNBX+Y
qMZXtHigXaZ9PAcyLlLf90iB1SUAFVRIHUs/y0kIk9nYTtSvLVL1zbo3Ir9TBEOq
NM9qGJ7QWwzNvrSNYr9kMMhVNbefb2FfD5fP0PapTiJ10XRkhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvIkyslJxEkotSSGs76+Au5dNjBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDY4YzlhMWUtOWYwZi0z
NTA5LTlmMjUtZmM0NzczZmQxYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AoLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAck28Fr1OoJ6Og3ieEYHcawWoPsaac7uvf7LKy4fbCDF4FDBJ0lbne0
cxgPEMZ3BNlIpihC4bGsG0rtJX/QpGUCcb+aqn6a2ASEhl7sYmwfNzlzREbCiJZi
bavbgonfdGHrUke2ejGcGHsMCN8BWoxHPbJnQ8Qzz6Jp2Laow76wQzsDjtYAhYDI
xyaBGjzBNN3uBaSkukA+l5DUxfIZ4E0YKcRKjuzbzhiNYIWQfnQJXEPY93mg37Js
1gEUwh/oDZin7yEBFTXIhRCQ/GY/AA1sDuPCOE1aWlbJ5UduZykNEHkOjgHr9I+K
1RqztNlO2wrPb7HSH9gEf7mLnws9DSg=
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:28:46 2024 by rpki-client on console-ams.rpki-client.org