Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c283375-a493-322d-8d1a-7909fdf1298d.roa
File:                     7c283375-a493-322d-8d1a-7909fdf1298d.roa (raw, json)
Hash identifier:          fVGFfjVJtvjB2/bMe/JM07JeBEsE2U6FJqBTxI1+WvA=
Subject key identifier:   D0:8E:A8:CE:4D:40:F3:58:AA:39:AA:0D:8B:D2:53:2E:25:A2:B1:5B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4890BB06B65908FF6000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c283375-a493-322d-8d1a-7909fdf1298d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        24.153.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:48:90:bb:06:b6:59:08:ff:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ceb4a1d3-3e05-40d1-bfbe-57dce473ea65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:ab:f1:67:31:56:cd:2b:fb:c7:45:f0:c2:
                    64:f3:6d:f2:15:87:c1:d1:35:63:3f:97:22:d1:d3:
                    00:bb:83:d2:5d:37:ee:c9:44:8b:7c:8d:df:36:3e:
                    39:39:31:52:34:bb:e0:bb:ca:d3:38:28:df:85:c6:
                    a1:f2:5e:9c:93:89:f4:64:a1:e4:7c:f1:0a:43:23:
                    a8:0a:b1:06:4e:80:e9:c9:0a:67:e7:41:0d:ea:29:
                    5a:a9:d5:9b:75:1a:70:38:9a:c6:0a:35:b8:d1:36:
                    fe:f0:7e:3e:19:41:98:9f:51:e1:a8:d5:00:7b:cd:
                    38:a1:0f:45:b6:7b:9d:8c:dc:44:7a:5a:07:22:4a:
                    7b:88:98:b2:65:2a:14:e8:1e:21:0d:9d:cf:98:31:
                    57:41:66:ff:c2:0f:6b:e8:3f:e9:a8:77:db:e2:1c:
                    48:0b:47:b4:42:8b:94:2c:69:61:d6:5f:73:b1:8d:
                    c9:20:57:63:c6:20:ae:cc:74:1e:da:53:ac:a5:0d:
                    37:22:24:c6:74:ca:48:d6:be:49:ba:67:54:eb:6c:
                    d5:36:c6:34:f1:88:f6:94:70:97:22:e4:52:40:f7:
                    c3:b8:68:31:e8:86:49:d8:61:67:35:0b:c3:68:0d:
                    8f:2f:af:87:c1:28:78:26:eb:a2:ea:f0:77:b0:1f:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8E:A8:CE:4D:40:F3:58:AA:39:AA:0D:8B:D2:53:2E:25:A2:B1:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c283375-a493-322d-8d1a-7909fdf1298d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.153.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b2:6a:95:a6:93:f1:20:27:52:a6:46:a2:ab:b2:e8:3a:07:
         e2:70:f3:24:c1:0c:43:98:79:73:d3:27:2d:61:8e:0f:5a:e4:
         6d:a3:1c:41:5b:b6:e4:bd:33:70:2a:95:e3:19:3f:a3:f8:19:
         e3:f8:d9:e4:af:95:28:65:11:47:47:ec:e3:1c:42:70:c3:92:
         85:fe:87:43:3d:59:d3:a4:95:fd:9b:6a:d8:9a:16:48:38:06:
         c7:54:72:8e:16:82:d1:f7:3a:96:38:5e:b2:f4:83:9e:72:45:
         dc:c9:0e:ea:7c:3d:10:3d:8a:37:ab:cd:a3:11:42:50:16:91:
         7c:f5:d1:81:6d:16:a2:fb:b1:c3:53:37:64:8b:f8:93:3a:a9:
         13:cb:29:78:63:15:53:a1:65:80:d1:54:9d:56:ef:fc:ec:ae:
         37:19:fc:df:21:11:d6:ec:35:21:b9:55:25:db:8d:a3:10:8d:
         5e:ba:c7:d5:45:b3:13:d5:c2:20:18:f7:0b:99:fa:1f:5b:3d:
         31:cf:dd:72:c3:e3:84:2f:aa:d0:c9:9d:84:a2:60:11:26:57:
         c6:ee:31:14:0c:a1:b9:59:cb:b6:87:0e:34:9b:0e:83:dc:a9:
         58:84:f4:f8:d7:20:ce:98:6c:ed:83:d8:60:6f:7c:9f:f4:7b:
         57:5f:a9:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCkiQuwa2WQj/YAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
Y2ViNGExZDMtM2UwNS00MGQxLWJmYmUtNTdkY2U0NzNlYTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVGr8WcxVs0r+8dF8MJk823yFYfB0TVjP5ci
0dMAu4PSXTfuyUSLfI3fNj45OTFSNLvgu8rTOCjfhcah8l6ck4n0ZKHkfPEKQyOo
CrEGToDpyQpn50EN6ilaqdWbdRpwOJrGCjW40Tb+8H4+GUGYn1HhqNUAe804oQ9F
tnudjNxEeloHIkp7iJiyZSoU6B4hDZ3PmDFXQWb/wg9r6D/pqHfb4hxIC0e0QouU
LGlh1l9zsY3JIFdjxiCuzHQe2lOspQ03IiTGdMpI1r5JumdU62zVNsY08Yj2lHCX
IuRSQPfDuGgx6IZJ2GFnNQvDaA2PL6+HwSh4Juui6vB3sB/l4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCOqM5NQPNYqjmqDYvSUy4lorFbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvN2MyODMzNzUtYTQ5My0z
MjJkLThkMWEtNzkwOWZkZjEyOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGJmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGyapWmk/EgJ1KmRqKrsug6B+Jw8yTBDEOYeXPTJy1hjg9a5G2jHEFb
tuS9M3AqleMZP6P4GeP42eSvlShlEUdH7OMcQnDDkoX+h0M9WdOklf2batiaFkg4
BsdUco4WgtH3OpY4XrL0g55yRdzJDup8PRA9ijerzaMRQlAWkXz10YFtFqL7scNT
N2SL+JM6qRPLKXhjFVOhZYDRVJ1W7/zsrjcZ/N8hEdbsNSG5VSXbjaMQjV66x9VF
sxPVwiAY9wuZ+h9bPTHP3XLD44QvqtDJnYSiYBEmV8buMRQMoblZy7aHDjSbDoPc
qViE9PjXIM6YbO2D2GBvfJ/0e1dfqfc=
-----END CERTIFICATE-----
Generated at Tue May 13 01:59:20 2025 by rpki-client