Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a7078f8-48e1-3134-bd8c-f38486949922.roa
File:                     5a7078f8-48e1-3134-bd8c-f38486949922.roa (raw, json)
Hash identifier:          iGQut/tmWPjKxOQC95WwiQTV1+/f7EfjKwJM8PVRQ9M=
Subject key identifier:   9D:4C:E7:BD:BB:56:B1:2A:80:84:20:10:BD:84:9A:32:E1:A0:36:DA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD68B85774697BEB04800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a7078f8-48e1-3134-bd8c-f38486949922.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        72.133.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d6:8b:85:77:46:97:be:b0:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=257b27a4-8ff9-4811-81ba-7337591a34a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:ee:ae:7b:9f:04:e8:a5:d1:a4:8e:c1:08:
                    0d:5f:13:ce:87:a5:c3:bd:63:cb:f8:bf:d9:bb:5b:
                    5e:6d:3b:d5:01:71:33:f6:06:11:c4:29:51:13:1b:
                    a1:03:30:fd:69:a7:1e:87:f3:7f:29:fb:2e:e5:ee:
                    28:ce:5e:6c:30:14:aa:0f:b4:80:cb:67:b3:b2:2a:
                    56:2b:b6:d7:38:33:f6:d9:d5:c3:48:e5:b8:db:57:
                    f4:f9:ad:0e:00:20:92:4d:0a:a4:76:90:a3:a5:c4:
                    5f:08:9a:43:49:a3:18:94:ef:b6:b6:42:32:1a:5f:
                    87:b7:58:d7:8b:9b:65:3c:00:c5:b1:73:f3:85:b6:
                    e5:a8:25:27:ed:88:2d:3e:5f:8a:6b:27:82:d6:c5:
                    6d:7d:fe:b4:84:e5:1f:00:cf:a8:cb:33:21:6d:94:
                    f8:42:d0:93:75:49:ba:4e:4a:8b:16:6a:a5:0d:f2:
                    51:85:53:89:8c:9c:f0:f0:6d:27:46:b0:23:02:04:
                    6b:de:5d:7b:a4:53:b3:16:9d:39:7a:9c:b9:5b:15:
                    11:0d:8e:09:b3:c9:bc:6f:9d:1d:f7:9a:2f:78:c4:
                    6b:11:94:36:f8:26:47:3c:9a:c6:16:bc:fa:9d:73:
                    96:d7:da:4d:77:b0:7e:49:e1:18:87:5e:98:2b:a3:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4C:E7:BD:BB:56:B1:2A:80:84:20:10:BD:84:9A:32:E1:A0:36:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a7078f8-48e1-3134-bd8c-f38486949922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.133.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:57:e3:8e:41:10:b4:46:8f:a7:91:5c:6b:6b:c2:0c:07:
         c6:41:b5:b8:ac:0c:4e:c5:b8:91:d0:74:fc:8e:0d:66:3e:a6:
         39:84:96:f3:2e:26:cf:75:a4:b4:d8:ae:57:ab:54:c0:34:29:
         c6:e0:dd:0f:4b:44:93:74:27:71:f7:2a:d8:ad:63:62:99:de:
         ee:6c:9e:02:8c:95:67:69:a8:9f:16:52:47:ed:2c:95:b7:d3:
         a9:60:a8:91:7e:a3:82:ea:79:b8:d7:a2:42:28:52:7a:9e:c4:
         63:57:aa:1f:28:d0:0e:35:b8:37:1c:40:14:04:d5:15:49:be:
         44:99:83:0b:22:32:4d:49:78:42:2b:36:1c:79:10:1a:0d:e4:
         30:f5:33:e8:5e:b5:fa:15:af:09:c8:8a:30:cb:5f:ba:10:a0:
         72:de:bc:b0:53:bc:b7:64:65:f2:68:ff:dc:96:25:2e:d1:0e:
         55:75:eb:7c:6c:ff:2d:df:0c:8f:77:61:1f:94:a1:f9:67:52:
         b3:cf:80:64:7a:7c:c7:7f:33:65:8f:56:63:cb:4d:24:34:c4:
         b0:41:8f:fc:9f:ec:c1:26:3f:27:ba:9e:97:11:dd:d7:b3:b3:
         ba:4a:51:41:c8:a6:0c:18:45:a3:c8:db:bd:80:89:59:24:e6:
         fe:05:97:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCtaLhXdGl76wSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MjU3YjI3YTQtOGZmOS00ODExLTgxYmEtNzMzNzU5MWEzNGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxarurnufBOil0aSOwQgNXxPOh6XDvWPL+L/Z
u1tebTvVAXEz9gYRxClRExuhAzD9aaceh/N/Kfsu5e4ozl5sMBSqD7SAy2ezsipW
K7bXODP22dXDSOW421f0+a0OACCSTQqkdpCjpcRfCJpDSaMYlO+2tkIyGl+Ht1jX
i5tlPADFsXPzhbblqCUn7YgtPl+KayeC1sVtff60hOUfAM+oyzMhbZT4QtCTdUm6
TkqLFmqlDfJRhVOJjJzw8G0nRrAjAgRr3l17pFOzFp05epy5WxURDY4Js8m8b50d
95oveMRrEZQ2+CZHPJrGFrz6nXOW19pNd7B+SeEYh16YK6PecwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1M5727VrEqgIQgEL2EmjLhoDbaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNWE3MDc4ZjgtNDhlMS0z
MTM0LWJkOGMtZjM4NDg2OTQ5OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESIXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPgV+OOQRC0Ro+nkVxra8IMB8ZBtbisDE7FuJHQdPyODWY+pjmElvMu
Js91pLTYrlerVMA0Kcbg3Q9LRJN0J3H3KtitY2KZ3u5sngKMlWdpqJ8WUkftLJW3
06lgqJF+o4LqebjXokIoUnqexGNXqh8o0A41uDccQBQE1RVJvkSZgwsiMk1JeEIr
Nhx5EBoN5DD1M+hetfoVrwnIijDLX7oQoHLevLBTvLdkZfJo/9yWJS7RDlV163xs
/y3fDI93YR+UoflnUrPPgGR6fMd/M2WPVmPLTSQ0xLBBj/yf7MEmPye6npcR3dez
s7pKUUHIpgwYRaPI272AiVkk5v4Fl5g=
-----END CERTIFICATE-----
Generated at Mon May 12 18:28:28 2025 by rpki-client