Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/949d87e7-29ac-3a5e-9e4a-fed987988e81.roa
File:                     949d87e7-29ac-3a5e-9e4a-fed987988e81.roa (raw, json)
Hash identifier:          LEVAJk0bmb/q5iK2JZuZ0lFr3CN5KKcFBSyvKFzrPUg=
Subject key identifier:   F0:F8:78:EE:11:2F:54:C7:2C:D8:33:62:1D:CA:5B:01:A5:40:EE:C0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD43CAA523B6E1791E380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/949d87e7-29ac-3a5e-9e4a-fed987988e81.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11426
IP address blocks:        70.61.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d4:3c:aa:52:3b:6e:17:91:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=72927cb0-0a5f-477a-9f6b-dfaba2909abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:96:7a:a7:7f:69:ae:16:35:61:2d:ed:3f:
                    b5:00:4e:27:e1:f0:d5:61:72:81:23:b4:23:ee:bd:
                    17:5e:e9:17:da:d5:a7:7d:f5:a2:ec:cc:e6:1c:b1:
                    4d:06:6e:ef:89:cc:6e:52:38:25:ae:9e:df:a4:87:
                    94:57:fc:18:0a:0b:fc:b0:83:b5:aa:ca:cc:f4:18:
                    25:79:72:ab:8b:a7:a4:f2:35:1c:7b:b0:9a:03:1e:
                    20:e1:d9:e4:95:5e:fb:fc:89:d7:44:44:78:f3:8a:
                    61:18:82:10:f9:45:c1:06:5e:d8:af:b4:00:45:f6:
                    89:1e:61:95:e7:3e:84:b4:56:dd:21:36:4d:3a:d2:
                    cb:0f:ca:c7:53:a1:dd:fa:0d:39:f8:ae:9c:09:cb:
                    eb:d6:40:e8:4e:9e:78:55:af:e5:51:d8:75:6e:64:
                    97:00:af:7b:29:3a:78:a0:3e:20:6b:c6:12:d3:03:
                    8d:d4:a9:33:6b:b4:20:f5:c3:f7:2c:52:fd:a3:28:
                    a3:5b:fb:0e:d3:ba:aa:ef:a5:b7:27:07:a7:83:56:
                    54:80:25:f4:cc:af:6e:f4:e5:e7:f9:29:cc:56:f5:
                    56:56:20:03:cb:4d:66:37:3c:f3:2e:33:6b:d7:c0:
                    56:94:ff:a7:20:46:b9:61:b4:1c:65:58:95:36:df:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:78:EE:11:2F:54:C7:2C:D8:33:62:1D:CA:5B:01:A5:40:EE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/949d87e7-29ac-3a5e-9e4a-fed987988e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.61.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b9:01:37:f0:24:fe:ec:1b:b1:0e:b5:4b:37:29:d1:9a:9d:
         aa:db:9a:a6:9c:86:c4:d7:32:31:67:27:ea:30:31:81:1a:34:
         42:31:09:9d:d2:1d:4d:b0:6b:83:10:fc:6d:91:e4:ac:01:ff:
         5d:a7:65:da:0f:c5:8d:db:d3:84:e2:a7:03:b5:4a:46:bf:94:
         41:cc:54:ed:6a:f7:a2:18:8d:d6:06:e7:75:19:68:c7:1a:9c:
         8f:57:db:6e:24:59:7f:74:a9:b6:db:7d:7f:46:1a:bc:66:82:
         e5:dd:c0:c0:4f:3f:b3:e0:d2:e8:a6:f1:7c:23:dd:af:80:88:
         68:ed:b7:66:dc:e8:18:79:dd:42:af:05:ee:ce:c9:13:7f:06:
         f9:b7:69:a3:ff:b9:88:aa:ff:d1:f0:e5:c9:db:87:10:6c:3f:
         2a:22:99:7e:83:9b:0d:d7:ec:fb:0b:4d:52:64:75:ff:d3:da:
         fd:d7:3e:dc:19:59:3c:bf:34:77:15:19:71:db:9b:e6:1f:15:
         f1:60:cb:24:94:f3:d0:a4:c4:93:e8:7e:4b:ee:53:16:8c:90:
         b2:fa:50:40:d1:5e:ff:be:bd:27:cf:fa:01:32:ec:7f:44:b4:
         01:4a:87:21:36:96:52:86:18:99:71:a4:80:fd:42:0a:29:b3:
         7c:58:95:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCtQ8qlI7bheR44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NzI5MjdjYjAtMGE1Zi00NzdhLTlmNmItZGZhYmEyOTA5YWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbaWeqd/aa4WNWEt7T+1AE4n4fDVYXKBI7Qj
7r0XXukX2tWnffWi7MzmHLFNBm7vicxuUjglrp7fpIeUV/wYCgv8sIO1qsrM9Bgl
eXKri6ek8jUce7CaAx4g4dnklV77/InXRER484phGIIQ+UXBBl7Yr7QARfaJHmGV
5z6EtFbdITZNOtLLD8rHU6Hd+g05+K6cCcvr1kDoTp54Va/lUdh1bmSXAK97KTp4
oD4ga8YS0wON1Kkza7Qg9cP3LFL9oyijW/sO07qq76W3Jweng1ZUgCX0zK9u9OXn
+SnMVvVWViADy01mNzzzLjNr18BWlP+nIEa5YbQcZViVNt8MNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPD4eO4RL1THLNgzYh3KWwGlQO7AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTQ5ZDg3ZTctMjlhYy0z
YTVlLTllNGEtZmVkOTg3OTg4ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRj3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe5ATfwJP7sG7EOtUs3KdGanarbmqachsTXMjFnJ+owMYEaNEIxCZ3S
HU2wa4MQ/G2R5KwB/12nZdoPxY3b04TipwO1Ska/lEHMVO1q96IYjdYG53UZaMca
nI9X224kWX90qbbbfX9GGrxmguXdwMBPP7Pg0uim8Xwj3a+AiGjtt2bc6Bh53UKv
Be7OyRN/Bvm3aaP/uYiq/9Hw5cnbhxBsPyoimX6Dmw3X7PsLTVJkdf/T2v3XPtwZ
WTy/NHcVGXHbm+YfFfFgyySU89CkxJPofkvuUxaMkLL6UEDRXv++vSfP+gEy7H9E
tAFKhyE2llKGGJlxpID9Qgops3xYlcM=
-----END CERTIFICATE-----
Generated at Sun May 11 09:28:29 2025 by rpki-client