Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6cc8ec77-818e-3cfc-8575-562f4c6489dd.roa
File:                     6cc8ec77-818e-3cfc-8575-562f4c6489dd.roa (raw, json)
Hash identifier:          ocpflKkK2IJs7hxqyghpe/gaeZ9+xiFTk/wTtDm6pxo=
Subject key identifier:   AA:9E:A5:B4:F9:5F:B3:CC:1C:70:A4:A9:C2:1E:08:7E:84:8E:B3:26
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ACF138FD9C1B5ABF3C380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6cc8ec77-818e-3cfc-8575-562f4c6489dd.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        67.244.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:cf:13:8f:d9:c1:b5:ab:f3:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=7022d92b-8436-4cfa-9e06-3fff42d8f75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:7f:d9:76:52:5d:b0:34:55:6d:8a:45:72:
                    d0:7c:77:21:3a:ab:e5:cd:58:65:17:2f:6c:95:34:
                    ab:43:24:26:d0:7c:f5:de:0e:53:ec:b3:bf:08:fe:
                    6f:4a:5d:cd:c6:1b:c9:12:3e:8d:ad:6e:c6:2d:d9:
                    a5:74:51:d2:2b:e5:bd:82:87:5e:0a:65:5f:03:85:
                    99:f2:98:96:3c:27:fe:05:18:a5:79:43:13:46:f2:
                    71:9c:b0:fc:ec:14:3a:3b:7a:4d:98:47:cf:8a:fe:
                    ee:37:86:a8:8c:6b:94:dd:60:9e:6a:96:4c:cc:10:
                    8c:5f:8c:d7:86:bc:b2:ee:c6:60:02:24:c8:17:68:
                    12:c3:07:21:ee:2c:24:4d:e7:4e:55:db:98:00:cf:
                    e2:3e:fc:f5:0e:bf:56:d6:22:2c:80:73:61:49:52:
                    a9:55:78:28:64:cf:39:57:82:2c:0d:95:e2:f2:fd:
                    38:f4:97:41:e4:e9:a8:5c:ea:fd:49:6f:7a:7f:ac:
                    04:3d:b8:92:1a:75:a0:9f:7f:39:e6:22:54:b8:97:
                    68:02:15:75:d7:c6:e5:1d:22:20:e4:f3:04:17:16:
                    e9:78:e4:b8:6d:cd:ae:29:2a:33:d7:e0:80:d3:82:
                    f2:38:88:cd:f6:31:09:dc:43:f2:57:3e:03:2d:38:
                    6c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9E:A5:B4:F9:5F:B3:CC:1C:70:A4:A9:C2:1E:08:7E:84:8E:B3:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6cc8ec77-818e-3cfc-8575-562f4c6489dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.244.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:74:6f:60:88:93:c8:ef:bd:7e:c7:30:c9:8d:36:bf:6e:b7:
         a5:e0:aa:16:12:36:95:21:42:d5:e3:ee:34:33:40:3d:ee:94:
         54:6c:3c:9f:1d:60:56:3f:c7:75:01:f6:39:ea:85:59:98:96:
         9e:d5:92:a4:86:24:b7:2f:3a:c2:71:3e:48:05:a5:e0:55:97:
         21:4e:f5:f0:ee:03:ff:03:a9:9f:a8:84:f3:0e:f4:f7:c7:ad:
         dd:8a:a4:0e:d8:17:0b:a2:6e:dd:2e:b1:2b:0a:05:df:e1:43:
         11:95:36:e7:f6:0a:3e:52:b5:1c:ea:bc:cc:78:df:a5:c9:81:
         95:57:1c:39:9d:c3:2b:98:5b:11:75:ba:ed:5d:ab:cf:7b:fb:
         8a:42:56:17:e9:ef:e1:1d:72:c5:41:0b:84:1a:f7:fa:f9:80:
         a4:53:a5:2d:df:d6:68:f7:f7:ca:ba:b1:6b:79:c0:b6:18:08:
         11:54:53:90:80:92:76:4d:4c:c2:08:4c:7a:eb:19:c2:3c:d7:
         b0:27:d6:b8:73:fe:f3:9f:d7:ce:64:cb:d5:20:c9:3a:f7:f6:
         8c:e8:84:ed:8f:27:a2:2c:93:62:ac:7c:f9:ba:85:e3:f6:a2:
         eb:73:00:fd:95:c7:5a:b8:00:9d:8f:fb:b2:f6:bc:99:0f:9c:
         d9:cf:09:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCs8Tj9nBtavzw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NzAyMmQ5MmItODQzNi00Y2ZhLTllMDYtM2ZmZjQyZDhmNzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTJ/2XZSXbA0VW2KRXLQfHchOqvlzVhlFy9s
lTSrQyQm0Hz13g5T7LO/CP5vSl3NxhvJEj6NrW7GLdmldFHSK+W9godeCmVfA4WZ
8piWPCf+BRileUMTRvJxnLD87BQ6O3pNmEfPiv7uN4aojGuU3WCeapZMzBCMX4zX
hryy7sZgAiTIF2gSwwch7iwkTedOVduYAM/iPvz1Dr9W1iIsgHNhSVKpVXgoZM85
V4IsDZXi8v049JdB5OmoXOr9SW96f6wEPbiSGnWgn3855iJUuJdoAhV118blHSIg
5PMEFxbpeOS4bc2uKSoz1+CA04LyOIjN9jEJ3EPyVz4DLThs+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqepbT5X7PMHHCkqcIeCH6EjrMmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNmNjOGVjNzctODE4ZS0z
Y2ZjLTg1NzUtNTYyZjRjNjQ4OWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQ/SAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADV0b2CIk8jvvX7HMMmNNr9ut6XgqhYSNpUhQtXj7jQzQD3ulFRsPJ8d
YFY/x3UB9jnqhVmYlp7VkqSGJLcvOsJxPkgFpeBVlyFO9fDuA/8DqZ+ohPMO9PfH
rd2KpA7YFwuibt0usSsKBd/hQxGVNuf2Cj5StRzqvMx436XJgZVXHDmdwyuYWxF1
uu1dq897+4pCVhfp7+EdcsVBC4Qa9/r5gKRTpS3f1mj398q6sWt5wLYYCBFUU5CA
knZNTMIITHrrGcI817An1rhz/vOf185ky9UgyTr39ozohO2PJ6Isk2KsfPm6heP2
outzAP2Vx1q4AJ2P+7L2vJkPnNnPCe8=
-----END CERTIFICATE-----
Generated at Sun May 11 18:55:46 2025 by rpki-client