Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
File:                     df5385bc-7c9f-361d-8431-48648c5562f2.roa (raw, json)
Hash identifier:          UApVub2vmErdATdTTA5tIB6hN/89LVmU6pKcoNIR0Fs=
Subject key identifier:   BE:7F:72:9C:79:03:BD:0B:91:4A:BC:CD:2E:17:CE:90:76:23:99:37
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584589A31E379A125B180D186EC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     6643
IP address blocks:        173.199.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1e:37:9a:12:5b:18:0d:18:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=78c5bd6a-15ec-4211-95ef-ecde0a916b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:4d:b7:c3:f7:d0:41:c0:69:9b:f5:b8:40:
                    47:25:19:be:2b:ce:ae:cf:88:95:68:a3:a5:a0:70:
                    0b:70:e0:a0:1d:05:64:ee:89:31:ab:fc:7b:57:e9:
                    76:27:ef:b3:42:b1:69:8d:8d:47:e6:9b:b1:0a:04:
                    60:2c:d2:73:82:b1:29:f6:87:59:fd:e8:42:fd:7f:
                    9a:4f:70:94:5f:35:fe:2e:4c:54:da:0c:35:cf:9e:
                    32:cf:08:a8:32:06:56:7c:c6:f4:6e:f6:e9:5f:61:
                    49:80:d0:1f:fe:bf:72:97:53:18:96:3d:19:ef:43:
                    e6:21:41:9d:20:f3:7a:18:c4:2a:41:43:58:2a:8f:
                    13:e3:e8:f1:66:b1:37:0c:a1:6c:c0:34:de:7c:2f:
                    da:96:fc:6a:14:d1:79:8f:63:f5:16:a5:01:32:a8:
                    0c:fc:55:88:53:b9:3d:0f:b9:05:44:fb:71:7e:ba:
                    8a:92:76:12:a3:09:dc:84:cf:31:5b:b9:60:95:28:
                    1c:ac:60:69:88:64:bc:63:42:df:0d:42:3a:17:ae:
                    b5:92:b0:8a:f5:af:dc:3d:67:f5:d3:fd:77:fc:a4:
                    c4:6d:1b:56:29:6e:f6:15:56:8d:43:de:27:31:e9:
                    4e:1d:2f:d4:e4:d4:62:56:3d:3f:83:68:55:58:f0:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7F:72:9C:79:03:BD:0B:91:4A:BC:CD:2E:17:CE:90:76:23:99:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:f5:87:7a:da:36:e0:69:cf:c1:92:dc:55:f2:24:3a:4f:
         66:ef:3a:6e:8f:e0:d0:b5:16:3a:e4:0f:02:b7:36:7f:23:bf:
         ec:67:11:dc:c6:c5:c3:6c:72:ff:ed:fd:01:90:64:37:d2:c1:
         eb:68:73:de:28:54:40:63:54:e6:88:3c:b4:1a:48:5b:f3:bc:
         8b:87:d3:ff:b1:c6:e8:f2:2f:32:5b:02:0a:f9:84:98:e2:a2:
         c8:42:e9:7c:06:0b:68:75:17:da:09:bb:3a:cd:8f:2d:8e:c7:
         5c:17:7c:35:6f:dc:b5:44:22:a2:92:42:86:c2:0e:3d:e4:03:
         ed:e8:76:ea:96:4b:51:75:73:4b:39:17:04:4f:f9:c0:53:f6:
         44:a2:b3:04:0a:0d:60:9c:90:58:20:c4:d4:c7:70:42:d7:79:
         a0:45:f3:20:2f:89:a4:0f:72:ae:e6:55:82:b0:5f:d1:e1:63:
         f4:97:58:f9:66:84:ac:94:7f:fd:be:1e:d2:c0:37:93:e1:9e:
         f2:d0:11:ff:d2:44:0a:1f:c3:e4:5e:e4:c6:98:ad:aa:38:46:
         19:71:93:60:04:43:4f:3c:f8:f4:66:9b:69:c3:2c:4d:da:85:
         51:7e:14:71:17:4f:f2:79:97:3d:91:bc:da:c1:bf:4f:7a:55:
         4f:de:87:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWJox43mhJbGA0YbsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI0MDQxNDAxMDAyNFoXDTI0MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
NzhjNWJkNmEtMTVlYy00MjExLTk1ZWYtZWNkZTBhOTE2YjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmexNt8P30EHAaZv1uEBHJRm+K86uz4iVaKOl
oHALcOCgHQVk7okxq/x7V+l2J++zQrFpjY1H5puxCgRgLNJzgrEp9odZ/ehC/X+a
T3CUXzX+LkxU2gw1z54yzwioMgZWfMb0bvbpX2FJgNAf/r9yl1MYlj0Z70PmIUGd
IPN6GMQqQUNYKo8T4+jxZrE3DKFswDTefC/alvxqFNF5j2P1FqUBMqgM/FWIU7k9
D7kFRPtxfrqKknYSownchM8xW7lglSgcrGBpiGS8Y0LfDUI6F661krCK9a/cPWf1
0/13/KTEbRtWKW72FVaNQ94nMelOHS/U5NRiVj0/g2hVWPB1XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5/cpx5A70LkUq8zS4XzpB2I5k3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGY1Mzg1YmMtN2M5Zi0z
NjFkLTg0MzEtNDg2NDhjNTU2MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwL9Yd62jbgac/BktxV8iQ6T2bvOm6P4NC1FjrkDwK3Nn8jv+xnEdzG
xcNscv/t/QGQZDfSwetoc94oVEBjVOaIPLQaSFvzvIuH0/+xxujyLzJbAgr5hJji
oshC6XwGC2h1F9oJuzrNjy2Ox1wXfDVv3LVEIqKSQobCDj3kA+3oduqWS1F1c0s5
FwRP+cBT9kSiswQKDWCckFggxNTHcELXeaBF8yAviaQPcq7mVYKwX9HhY/SXWPlm
hKyUf/2+HtLAN5PhnvLQEf/SRAofw+Re5MaYrao4Rhlxk2AEQ088+PRmm2nDLE3a
hVF+FHEXT/J5lz2RvNrBv096VU/eh58=
-----END CERTIFICATE-----
Generated at Tue May 21 16:43:04 2024 by rpki-client on console-ams.rpki-client.org