Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bb60ea0a-bd09-3b42-aa04-024437e58712.roa
File:                     bb60ea0a-bd09-3b42-aa04-024437e58712.roa (raw, json)
Hash identifier:          WVyKqo87xNKq0wPYxb6vCFi72BxLos221pu9uJO7dHM=
Subject key identifier:   46:61:10:CA:0E:CC:CB:00:75:7D:D4:F5:F2:10:20:A9:3F:C6:25:E9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A2E06920575F66CBB3A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bb60ea0a-bd09-3b42-aa04-024437e58712.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        69.133.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:2e:06:92:05:75:f6:6c:bb:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ccdf79c0-e0dd-4abd-a80e-e1b2aee5b7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:9c:3d:0b:fa:79:5f:81:b6:46:63:aa:26:
                    88:b0:f7:99:78:94:ae:ee:c0:68:ee:f6:be:c6:34:
                    33:f7:12:13:92:26:5f:44:28:bc:c2:5f:5f:82:70:
                    02:e1:9b:0b:d0:04:b2:45:f7:4e:68:2b:39:d9:26:
                    fa:67:a1:cc:3e:10:6e:41:7f:37:d8:88:bd:4f:e1:
                    c0:23:d2:42:8d:92:84:7a:ab:0c:49:60:54:c5:06:
                    23:17:de:66:de:c5:47:c6:14:53:51:0f:f5:1b:ef:
                    00:42:e3:d6:b0:5a:0f:2a:dc:07:14:b7:3b:98:33:
                    0d:dc:ba:bb:9f:9c:f7:7e:12:fb:4c:30:ea:19:7f:
                    d9:a4:2d:5c:a6:be:d2:5b:6b:ed:62:dd:ac:57:82:
                    7e:d2:85:87:27:1a:c4:92:dc:97:ea:48:7e:07:d6:
                    f6:ab:56:cd:5a:c8:18:5e:09:34:c3:7f:96:e6:1e:
                    b5:ea:98:fc:cf:d9:8f:4b:00:07:bc:33:34:ad:2c:
                    68:5b:9d:04:ff:eb:cc:24:e6:c6:ac:f4:2c:9e:a2:
                    fa:d7:d8:57:44:cc:29:a1:16:97:cd:34:e2:c8:8b:
                    06:67:91:59:ff:94:9e:31:b3:10:23:b9:16:5e:b1:
                    4b:4f:5f:f5:d9:d8:c0:e4:3d:58:fa:69:bd:9f:14:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:61:10:CA:0E:CC:CB:00:75:7D:D4:F5:F2:10:20:A9:3F:C6:25:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bb60ea0a-bd09-3b42-aa04-024437e58712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.133.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:22:ce:df:f3:2b:8e:c7:68:41:8f:89:8a:8b:f5:74:3e:76:
         83:5e:63:ee:1c:04:53:59:11:be:1a:00:8c:7d:8c:b5:2d:72:
         46:be:ee:29:05:7e:55:58:d9:09:82:16:6b:3a:dc:23:cc:50:
         3d:3d:9a:7f:6c:dc:71:4d:9a:58:4a:08:8c:6c:f5:24:22:79:
         44:1f:ac:07:c4:e0:d4:09:a7:76:95:34:e8:77:3f:f9:54:5c:
         c3:2f:37:54:37:e2:6e:13:22:10:b6:24:04:67:71:85:cd:55:
         57:3c:99:60:cc:27:31:71:75:31:33:e3:f8:ae:1f:94:1c:06:
         35:aa:5d:52:04:20:43:bf:bb:36:d7:b6:f2:cf:f1:86:d9:64:
         bb:07:98:f7:16:24:74:3d:fc:b6:da:43:2f:b4:a0:02:15:de:
         be:03:3a:54:8e:34:9f:6c:fb:16:0d:30:f0:c2:9f:90:5c:0f:
         51:30:7e:ce:24:2f:2f:34:f5:de:88:6f:21:51:51:c7:53:1c:
         c0:33:a1:aa:71:58:51:58:b9:33:04:70:eb:b9:58:24:f4:2f:
         72:b8:af:df:04:49:31:31:3a:fd:73:6a:88:19:b1:12:bb:29:
         29:01:d3:2c:f0:0e:a8:48:49:8a:1f:49:b8:d9:51:40:67:5f:
         7b:f4:92:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCi4GkgV19my7OgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
Y2NkZjc5YzAtZTBkZC00YWJkLWE4MGUtZTFiMmFlZTViN2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2CcPQv6eV+BtkZjqiaIsPeZeJSu7sBo7va+
xjQz9xITkiZfRCi8wl9fgnAC4ZsL0ASyRfdOaCs52Sb6Z6HMPhBuQX832Ii9T+HA
I9JCjZKEeqsMSWBUxQYjF95m3sVHxhRTUQ/1G+8AQuPWsFoPKtwHFLc7mDMN3Lq7
n5z3fhL7TDDqGX/ZpC1cpr7SW2vtYt2sV4J+0oWHJxrEktyX6kh+B9b2q1bNWsgY
Xgk0w3+W5h616pj8z9mPSwAHvDM0rSxoW50E/+vMJObGrPQsnqL619hXRMwpoRaX
zTTiyIsGZ5FZ/5SeMbMQI7kWXrFLT1/12djA5D1Y+mm9nxQ/GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZhEMoOzMsAdX3U9fIQIKk/xiXpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYmI2MGVhMGEtYmQwOS0z
YjQyLWFhMDQtMDI0NDM3ZTU4NzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRYUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcizt/zK47HaEGPiYqL9XQ+doNeY+4cBFNZEb4aAIx9jLUtcka+7ikF
flVY2QmCFms63CPMUD09mn9s3HFNmlhKCIxs9SQieUQfrAfE4NQJp3aVNOh3P/lU
XMMvN1Q34m4TIhC2JARncYXNVVc8mWDMJzFxdTEz4/iuH5QcBjWqXVIEIEO/uzbX
tvLP8YbZZLsHmPcWJHQ9/LbaQy+0oAIV3r4DOlSONJ9s+xYNMPDCn5BcD1Ewfs4k
Ly809d6IbyFRUcdTHMAzoapxWFFYuTMEcOu5WCT0L3K4r98ESTExOv1zaogZsRK7
KSkB0yzwDqhISYofSbjZUUBnX3v0kgI=
-----END CERTIFICATE-----
Generated at Sun May 11 04:20:27 2025 by rpki-client