Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/78b4b933-447e-3d1a-ad81-91ee999cbeae.roa
File:                     78b4b933-447e-3d1a-ad81-91ee999cbeae.roa (raw, json)
Hash identifier:          5vHGGCECkcvwuScOj86A0XSpS2IBQHmXCtxxBvPfnC0=
Subject key identifier:   BF:35:68:58:69:C1:33:23:6F:18:DF:CD:26:3E:5F:BE:32:D0:93:5D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4C6E975DFC5C37DB6720
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/78b4b933-447e-3d1a-ad81-91ee999cbeae.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     12271
IP address blocks:        68.172.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:4c:6e:97:5d:fc:5c:37:db:67:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8318edbd-d58b-4dbc-8c52-5b8ef2e03090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:94:d7:ce:0d:cd:1a:1a:62:d9:aa:da:e7:
                    99:de:89:2d:61:7a:9e:e0:65:a6:bc:12:05:f8:62:
                    2e:c7:f9:d5:71:51:35:ee:a2:87:c5:9b:9e:1f:22:
                    b8:c3:36:92:63:15:bf:de:ca:60:b7:50:6a:24:47:
                    70:50:2b:86:5b:1d:d0:b6:5d:20:72:e4:e1:e8:73:
                    b2:f5:bc:7a:98:1f:9e:a3:b6:bd:21:9a:a7:48:99:
                    78:44:b4:04:b8:96:3b:96:64:5a:af:50:15:2b:8e:
                    8a:4d:80:25:5a:e7:ba:d5:81:d5:c4:ca:6a:62:0a:
                    c2:9d:82:e4:d1:9f:d1:28:28:ff:9e:b6:95:01:b1:
                    ae:d3:df:89:71:38:6c:b4:c2:4c:be:9f:75:61:3a:
                    c5:75:6b:d2:c1:b1:4f:29:53:10:a7:94:26:88:01:
                    8a:87:15:52:f6:e0:49:d0:56:f2:84:5f:a8:d9:a3:
                    38:52:7c:e1:92:42:ce:57:1b:b2:86:6e:3e:16:fa:
                    e3:6b:a9:3b:80:36:13:35:d1:6c:73:29:b7:43:4b:
                    f6:a1:0b:88:45:bf:56:9c:ee:15:57:3d:7a:17:87:
                    7a:ce:b3:70:76:40:7b:4e:70:67:fd:b3:54:ed:79:
                    18:9d:ad:00:8f:b8:bf:52:53:58:0e:17:3f:d0:2c:
                    5d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:35:68:58:69:C1:33:23:6F:18:DF:CD:26:3E:5F:BE:32:D0:93:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/78b4b933-447e-3d1a-ad81-91ee999cbeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.172.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:a0:eb:b7:a7:17:cf:86:c8:47:a8:f8:48:c9:b5:60:0c:
         b3:71:72:6e:ca:25:1e:78:73:38:c4:92:d2:70:5e:f5:a5:73:
         fa:13:fd:5f:92:27:3b:49:31:4f:49:b3:8d:2a:2d:49:f0:37:
         d5:33:91:10:3f:5b:28:6a:e1:24:45:91:92:d8:32:01:2e:b9:
         4c:6b:64:15:ff:fd:94:14:fd:32:ca:89:4c:89:63:41:ee:de:
         76:0a:ce:4e:af:c9:22:0b:03:80:b3:ff:e3:87:f2:93:1b:f3:
         7b:d0:cc:2a:8f:66:37:37:89:4a:3c:ab:c6:8f:6f:2f:45:43:
         eb:fa:c2:93:92:7d:14:2c:54:57:75:98:62:7b:ee:07:60:d5:
         1d:d3:63:ac:50:eb:3b:ef:8a:61:34:60:a8:ca:72:0c:20:6f:
         e1:32:ca:f4:84:73:10:48:b3:97:e9:e6:59:51:8c:7b:15:71:
         6b:22:2e:0f:77:2b:5e:9e:1e:66:97:3a:ac:10:36:84:ab:97:
         b5:57:b3:40:2f:15:9d:94:2a:bc:22:51:85:e5:f4:5b:5c:ba:
         e6:f8:81:33:c6:d4:a2:b4:24:81:ff:79:4d:d5:01:4e:b2:10:
         1d:0e:06:23:ca:ab:46:47:4a:8f:63:df:5f:cb:24:a9:44:8c:
         8e:3a:6e:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCkxul138XDfbZyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ODMxOGVkYmQtZDU4Yi00ZGJjLThjNTItNWI4ZWYyZTAzMDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqSU184NzRoaYtmq2ueZ3oktYXqe4GWmvBIF
+GIux/nVcVE17qKHxZueHyK4wzaSYxW/3spgt1BqJEdwUCuGWx3Qtl0gcuTh6HOy
9bx6mB+eo7a9IZqnSJl4RLQEuJY7lmRar1AVK46KTYAlWue61YHVxMpqYgrCnYLk
0Z/RKCj/nraVAbGu09+JcThstMJMvp91YTrFdWvSwbFPKVMQp5QmiAGKhxVS9uBJ
0FbyhF+o2aM4UnzhkkLOVxuyhm4+Fvrja6k7gDYTNdFscym3Q0v2oQuIRb9WnO4V
Vz16F4d6zrNwdkB7TnBn/bNU7XkYna0Aj7i/UlNYDhc/0Cxd9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL81aFhpwTMjbxjfzSY+X74y0JNdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNzhiNGI5MzMtNDQ3ZS0z
ZDFhLWFkODEtOTFlZTk5OWNiZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKzgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7BoOu3pxfPhshHqPhIybVgDLNxcm7KJR54czjEktJwXvWlc/oT/V+S
JztJMU9Js40qLUnwN9UzkRA/Wyhq4SRFkZLYMgEuuUxrZBX//ZQU/TLKiUyJY0Hu
3nYKzk6vySILA4Cz/+OH8pMb83vQzCqPZjc3iUo8q8aPby9FQ+v6wpOSfRQsVFd1
mGJ77gdg1R3TY6xQ6zvvimE0YKjKcgwgb+EyyvSEcxBIs5fp5llRjHsVcWsiLg93
K16eHmaXOqwQNoSrl7VXs0AvFZ2UKrwiUYXl9Ftcuub4gTPG1KK0JIH/eU3VAU6y
EB0OBiPKq0ZHSo9j31/LJKlEjI46bgs=
-----END CERTIFICATE-----
Generated at Mon May 12 10:25:48 2025 by rpki-client