Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/19147fbc-9b03-3805-96e0-3f7524943c5b.roa
File:                     19147fbc-9b03-3805-96e0-3f7524943c5b.roa (raw, json)
Hash identifier:          6NH2xHR76awmBx0oZQ5O38fsxJcgovHHECq/eGajCJo=
Subject key identifier:   06:30:97:60:9F:A4:8E:4A:D6:2F:41:8C:4A:EA:EA:26:56:7C:02:FD
Certificate issuer:       /CN=06951899-7f4f-486b-bb86-0aee5ea26079
Certificate serial:       010D0C9F43285848FD569E49A4478EAC53B75F10
Authority key identifier: 99:9E:13:10:94:90:6E:07:46:81:31:9C:F9:59:3B:B6:35:DE:E9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/19147fbc-9b03-3805-96e0-3f7524943c5b.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        52.119.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:9e:49:a4:47:8e:ac:53:b7:5f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06951899-7f4f-486b-bb86-0aee5ea26079
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=4d4ed0bb-dd8c-4b99-9e62-18894da3fc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:37:37:b7:d8:3a:bd:8b:2e:79:c7:7b:09:
                    12:71:ad:3f:ae:4a:18:b5:1c:20:fa:2d:69:3d:64:
                    83:c6:53:53:e1:bc:69:34:a1:fa:cd:8e:53:0b:74:
                    4f:ca:1d:4e:e4:0e:ce:e6:e4:2f:f4:0f:2d:d7:05:
                    24:40:cd:eb:b5:ad:a9:38:3d:ab:73:88:96:67:92:
                    af:71:ed:8f:70:e1:c4:11:e6:f0:44:36:2a:9a:3f:
                    e7:56:35:02:d7:c3:f4:2b:10:71:3e:79:20:45:38:
                    48:c3:06:98:91:2d:f9:68:d5:7b:21:00:80:98:63:
                    e6:da:49:ba:a1:58:6e:5f:b4:c3:3f:8d:7d:d3:8f:
                    d4:a3:6b:73:cd:86:66:e2:e3:3d:9a:55:52:df:46:
                    00:e5:1d:46:6a:94:e6:f8:02:1b:3a:d0:ad:6d:d7:
                    7c:55:ed:71:c0:e5:33:c4:44:26:c1:9e:25:c7:31:
                    47:af:26:a1:3b:63:bd:52:33:fc:1c:e0:3f:a3:a0:
                    60:00:b6:a2:56:51:0c:1f:ae:52:f8:ef:cc:6c:f0:
                    65:08:75:00:63:d9:03:72:b4:4c:42:c5:4d:8e:19:
                    48:cd:fe:db:a9:0a:1c:68:1a:96:7e:d4:d6:a0:07:
                    26:bd:6b:7c:7f:91:e2:e9:fb:a9:21:9a:a3:b2:50:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:30:97:60:9F:A4:8E:4A:D6:2F:41:8C:4A:EA:EA:26:56:7C:02:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/19147fbc-9b03-3805-96e0-3f7524943c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.crl

            X509v3 Authority Key Identifier:
                keyid:99:9E:13:10:94:90:6E:07:46:81:31:9C:F9:59:3B:B6:35:DE:E9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:22:6c:7e:ee:71:27:86:cf:fa:4b:77:38:aa:22:95:de:
         97:40:01:44:24:2b:78:cb:b5:92:9c:c0:11:b4:d4:ed:e8:45:
         d0:5f:c4:db:19:1b:fe:2d:c7:d9:c6:16:b2:9f:26:82:a0:28:
         f9:d4:67:c0:6b:ea:77:74:b7:60:9f:c7:6b:bf:7d:14:7d:37:
         d5:36:25:8d:ca:7d:b0:fd:87:f3:59:72:e9:c0:9c:22:16:b3:
         2d:27:ed:ed:56:05:1f:0b:88:8f:67:b1:12:53:6e:c1:b5:15:
         78:8f:5a:12:ef:48:23:a0:1c:d4:67:46:c4:7c:0c:47:36:ef:
         ef:31:32:6a:f0:81:ce:db:65:87:d7:3d:11:32:36:46:3d:58:
         45:1f:ec:e5:80:3b:f6:50:d8:04:a1:8f:ba:5d:5b:70:9a:dc:
         7f:82:8f:d4:8e:fb:70:bc:c9:32:84:62:fe:95:af:2d:6b:b0:
         c8:5c:71:56:46:2c:84:30:48:0e:1f:94:e3:cf:f0:95:44:8a:
         a2:02:2c:61:2f:82:58:2c:2c:76:a4:78:2f:08:86:73:a8:ba:
         74:d7:08:f0:dd:31:6a:67:15:09:8c:fb:19:20:72:0e:3f:77:
         bc:db:77:06:1e:6f:81:5b:d0:a6:11:9a:cc:c9:a8:45:00:59:
         b9:97:2f:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vp5JpEeOrFO3XxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY5NTE4OTktN2Y0Zi00ODZiLWJiODYtMGFlZTVlYTI2
MDc5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NGQ0ZWQwYmItZGQ4Yy00Yjk5LTllNjItMTg4OTRkYTNmYzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqQ3N7fYOr2LLnnHewkSca0/rkoYtRwg+i1p
PWSDxlNT4bxpNKH6zY5TC3RPyh1O5A7O5uQv9A8t1wUkQM3rta2pOD2rc4iWZ5Kv
ce2PcOHEEebwRDYqmj/nVjUC18P0KxBxPnkgRThIwwaYkS35aNV7IQCAmGPm2km6
oVhuX7TDP41904/Uo2tzzYZm4uM9mlVS30YA5R1GapTm+AIbOtCtbdd8Ve1xwOUz
xEQmwZ4lxzFHryahO2O9UjP8HOA/o6BgALaiVlEMH65S+O/MbPBlCHUAY9kDcrRM
QsVNjhlIzf7bqQocaBqWftTWoAcmvWt8f5Hi6fupIZqjslD8gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYwl2CfpI5K1i9BjErq6iZWfAL9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNjk1
MTg5OS03ZjRmLTQ4NmItYmI4Ni0wYWVlNWVhMjYwNzkvMTkxNDdmYmMtOWIwMy0z
ODA1LTk2ZTAtM2Y3NTI0OTQzYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDY5NTE4OTktN2Y0Zi00ODZiLWJi
ODYtMGFlZTVlYTI2MDc5LzA2OTUxODk5LTdmNGYtNDg2Yi1iYjg2LTBhZWU1ZWEy
NjA3OS5jcmwwHwYDVR0jBBgwFoAUmZ4TEJSQbgdGgTGc+Vk7tjXe6TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wNjk1MTg5OS03ZjRmLTQ4NmItYmI4Ni0wYWVl
NWVhMjYwNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCaImx+7nEnhs/6S3c4qiKV3pdAAUQkK3jLtZKcwBG01O3oRdBfxNsZ
G/4tx9nGFrKfJoKgKPnUZ8Br6nd0t2Cfx2u/fRR9N9U2JY3KfbD9h/NZcunAnCIW
sy0n7e1WBR8LiI9nsRJTbsG1FXiPWhLvSCOgHNRnRsR8DEc27+8xMmrwgc7bZYfX
PREyNkY9WEUf7OWAO/ZQ2AShj7pdW3Ca3H+Cj9SO+3C8yTKEYv6Vry1rsMhccVZG
LIQwSA4flOPP8JVEiqICLGEvglgsLHakeC8IhnOounTXCPDdMWpnFQmM+xkgcg4/
d7zbdwYeb4Fb0KYRmszJqEUAWbmXL4w=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:15 2025 by rpki-client