Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3dd8308-f545-32a9-93b7-a84568d632ac.roa
File:                     a3dd8308-f545-32a9-93b7-a84568d632ac.roa (raw, json)
Hash identifier:          SU7Xefg20pHG3u8u0ktFu9YparRsBWQTGe1B3zKJc7s=
Subject key identifier:   0B:3C:E7:DD:8C:E9:89:77:AA:7C:2D:2E:20:65:8B:D8:AF:99:C7:C3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ACA1313876E9E8491DBA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3dd8308-f545-32a9-93b7-a84568d632ac.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        69.63.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ca:13:13:87:6e:9e:84:91:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=a8fb3b5c-8564-4027-8075-7b4af1a09454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8e:1c:4a:18:6d:cc:3d:af:0f:e7:52:2a:06:
                    0b:b3:a8:72:27:03:6f:17:1d:74:3f:8a:e4:93:56:
                    1e:b6:16:bf:b1:06:f1:65:cb:76:d3:30:82:6e:39:
                    26:91:2d:0f:88:c9:cf:b8:de:61:dc:14:42:59:56:
                    1b:9e:9c:44:bf:ce:3a:58:3f:59:a3:aa:f1:d7:71:
                    a1:63:5b:8d:25:1e:4d:bd:48:e1:e5:e9:fa:26:37:
                    68:7a:30:24:ca:df:80:ff:d3:57:3d:11:09:2f:c7:
                    1c:73:1a:4c:c8:09:cf:96:b0:61:55:65:cb:f7:db:
                    03:e1:19:ca:2a:77:6e:fe:d8:d0:fe:60:90:01:1d:
                    87:ec:29:09:bd:a6:ed:e5:cb:ec:ce:7e:24:e9:d0:
                    15:77:22:0f:3e:72:4f:d0:d2:f4:04:03:b4:59:25:
                    8c:67:e9:67:a2:0c:68:1b:14:c6:54:ac:22:9a:1e:
                    0f:ec:9f:02:f7:ab:43:8c:35:cf:d8:1d:a4:99:2c:
                    8e:28:bc:ec:cd:dc:27:2a:b0:ee:61:dc:16:fa:b2:
                    fe:f3:dc:32:62:de:ff:70:e9:70:62:64:ea:48:9d:
                    46:b0:21:8d:ec:1a:f1:38:0d:62:7f:3a:3d:70:6b:
                    09:3d:0e:a6:40:4e:46:23:c1:1b:87:a3:fe:4d:18:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:E7:DD:8C:E9:89:77:AA:7C:2D:2E:20:65:8B:D8:AF:99:C7:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3dd8308-f545-32a9-93b7-a84568d632ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.63.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:81:56:17:1f:91:d1:9b:39:9f:20:64:04:f6:11:35:9d:a5:
         92:4a:92:b8:3c:81:20:27:13:7e:f5:99:bb:1c:0b:2c:6c:6e:
         fc:dd:f5:33:3e:4f:19:fa:45:04:48:7b:4b:4b:b0:8a:a8:79:
         a2:e2:4b:f8:c0:49:c1:f9:71:ab:4e:d9:55:20:b5:80:d6:80:
         5c:19:e4:6e:00:0d:40:8d:92:e5:d6:a8:1d:fa:fb:b5:a6:86:
         f3:47:88:a3:fd:79:d3:5a:1a:eb:98:3c:ac:c1:4f:32:6d:3d:
         b5:26:b5:79:10:dd:d2:53:d0:80:7f:21:cd:4a:2d:9c:79:ba:
         5b:89:c0:0d:98:0d:e6:7a:66:83:64:65:b5:21:5e:b3:b7:39:
         5d:9e:11:ef:eb:96:0a:1a:42:83:5f:e0:09:1d:9f:bb:36:23:
         90:83:60:c7:8d:19:1d:e3:83:f7:5b:f7:8a:11:32:96:b3:e6:
         c0:48:65:e5:f7:00:39:50:85:a6:b0:e3:1e:7b:9d:51:e2:35:
         4d:3e:e4:0d:8c:ef:43:83:a4:b3:e8:c7:79:e7:ee:65:00:a7:
         60:db:4c:98:10:34:59:25:c5:ee:ca:d9:77:95:a4:eb:35:10:
         5a:95:17:44:6f:28:4e:de:be:79:6b:37:ab:75:56:2b:b2:ec:
         33:85:6e:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCsoTE4dunoSR26AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YThmYjNiNWMtODU2NC00MDI3LTgwNzUtN2I0YWYxYTA5NDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o4cShhtzD2vD+dSKgYLs6hyJwNvFx10P4rk
k1Yetha/sQbxZct20zCCbjkmkS0PiMnPuN5h3BRCWVYbnpxEv846WD9Zo6rx13Gh
Y1uNJR5NvUjh5en6JjdoejAkyt+A/9NXPREJL8cccxpMyAnPlrBhVWXL99sD4RnK
Kndu/tjQ/mCQAR2H7CkJvabt5cvszn4k6dAVdyIPPnJP0NL0BAO0WSWMZ+lnogxo
GxTGVKwimh4P7J8C96tDjDXP2B2kmSyOKLzszdwnKrDuYdwW+rL+89wyYt7/cOlw
YmTqSJ1GsCGN7BrxOA1ifzo9cGsJPQ6mQE5GI8Ebh6P+TRjt1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAs8592M6Yl3qnwtLiBli9ivmcfDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTNkZDgzMDgtZjU0NS0z
MmE5LTkzYjctYTg0NTY4ZDYzMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRT9aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCBVhcfkdGbOZ8gZAT2ETWdpZJKkrg8gSAnE371mbscCyxsbvzd9TM+
Txn6RQRIe0tLsIqoeaLiS/jAScH5catO2VUgtYDWgFwZ5G4ADUCNkuXWqB36+7Wm
hvNHiKP9edNaGuuYPKzBTzJtPbUmtXkQ3dJT0IB/Ic1KLZx5uluJwA2YDeZ6ZoNk
ZbUhXrO3OV2eEe/rlgoaQoNf4Akdn7s2I5CDYMeNGR3jg/db94oRMpaz5sBIZeX3
ADlQhaaw4x57nVHiNU0+5A2M70ODpLPox3nn7mUAp2DbTJgQNFklxe7K2XeVpOs1
EFqVF0RvKE7evnlrN6t1Viuy7DOFbig=
-----END CERTIFICATE-----
Generated at Sun May 11 10:20:09 2025 by rpki-client