Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d36fc52e-a8a0-3655-95c5-54f9f29af753.roa
File:                     d36fc52e-a8a0-3655-95c5-54f9f29af753.roa (raw, json)
Hash identifier:          1pWx/nEVKIpnlyefZGbhVQHXr3qKZqc/NSkiF1xCUyk=
Subject key identifier:   BC:AC:F5:44:CF:84:9F:5D:F9:53:48:C7:40:6F:88:65:C3:1A:A2:EF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A2D46A839285B1085E690
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d36fc52e-a8a0-3655-95c5-54f9f29af753.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        174.97.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:2d:46:a8:39:28:5b:10:85:e6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f436dd79-a819-49ae-a404-4789a2ba430f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:fa:b0:18:e2:fb:b2:19:4a:cc:f5:b5:67:
                    8f:de:91:74:b0:2a:15:44:84:4a:33:ea:e9:8f:dd:
                    af:47:86:f3:df:5d:1f:85:59:0a:83:64:56:ae:e7:
                    6f:5d:3e:a6:fe:4f:da:6f:dd:c9:b9:81:4d:27:3e:
                    07:33:79:37:d4:ae:cd:3c:b9:90:d7:05:0e:90:82:
                    96:5d:f2:25:06:a2:b3:2f:ca:ea:4f:44:da:f8:d1:
                    22:29:45:48:66:32:b6:3b:8b:c4:9f:cf:91:36:f7:
                    33:3b:d1:f4:d5:c6:e2:7d:09:53:41:0d:0c:c1:78:
                    89:3d:1a:fd:b0:1c:69:9d:71:74:39:9e:07:e0:5d:
                    8a:82:3a:a3:bb:0d:aa:be:7e:bb:b0:ea:8f:10:20:
                    c1:fc:7e:fc:69:7b:fd:39:8e:f9:56:4f:0a:04:04:
                    e9:a8:0e:1a:89:85:68:8c:e9:a2:09:8b:79:29:2b:
                    fd:b2:5a:40:18:15:d4:65:1c:93:a5:c8:59:e5:cf:
                    51:9b:92:75:10:92:cc:22:94:e1:ec:64:cd:a7:d5:
                    29:79:ca:c8:1a:4f:d1:6d:c9:41:60:88:f4:16:f9:
                    d7:48:89:96:37:23:61:02:20:db:d7:c7:64:7b:75:
                    41:9b:a2:a2:5e:7e:4e:b6:28:4b:f7:47:a2:35:cc:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AC:F5:44:CF:84:9F:5D:F9:53:48:C7:40:6F:88:65:C3:1A:A2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d36fc52e-a8a0-3655-95c5-54f9f29af753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.97.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:eb:17:df:e7:f8:1b:64:30:1e:f2:ad:59:71:16:a5:c1:
         fa:86:f9:19:a5:da:61:92:61:db:08:99:0f:fc:70:e8:8a:ce:
         72:64:54:ae:b7:f4:ac:e0:e0:4e:ca:4f:77:9b:6d:5c:08:6c:
         ce:c8:0f:fc:72:48:0e:bc:7e:98:dd:f8:2d:4a:22:e5:a5:55:
         ef:cb:0e:ea:69:74:cf:12:8c:7f:43:8b:6e:22:4c:64:9f:00:
         88:13:ef:16:81:d5:0e:b3:dd:42:cf:41:04:e3:5a:3e:c4:d6:
         48:00:14:62:2e:9e:5b:46:b7:fe:ea:54:33:75:75:fd:95:ff:
         0c:fa:c9:c2:56:7f:fd:3a:e7:a0:dd:97:69:ac:f4:92:77:7f:
         0e:28:79:0a:c0:fc:34:e9:c6:7f:8d:c5:8d:17:7e:84:11:6e:
         cc:8c:0d:ec:24:e9:3c:49:3d:ab:11:b5:00:c0:81:14:9c:2e:
         57:2e:8a:eb:c8:16:6a:e8:dd:e3:a9:46:35:32:f3:d7:a4:6d:
         96:21:c2:70:39:4a:ac:b8:6b:ff:80:fd:07:00:ac:60:45:7c:
         f9:fc:65:3f:65:97:c8:0a:be:28:ed:87:25:54:c6:c3:77:12:
         a4:6c:bb:06:ef:02:c7:88:d0:09:4d:b3:b0:03:3f:cb:a1:93:
         44:2f:6c:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCi1GqDkoWxCF5pAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZjQzNmRkNzktYTgxOS00OWFlLWE0MDQtNDc4OWEyYmE0MzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVT6sBji+7IZSsz1tWeP3pF0sCoVRIRKM+rp
j92vR4bz310fhVkKg2RWrudvXT6m/k/ab93JuYFNJz4HM3k31K7NPLmQ1wUOkIKW
XfIlBqKzL8rqT0Ta+NEiKUVIZjK2O4vEn8+RNvczO9H01cbifQlTQQ0MwXiJPRr9
sBxpnXF0OZ4H4F2Kgjqjuw2qvn67sOqPECDB/H78aXv9OY75Vk8KBATpqA4aiYVo
jOmiCYt5KSv9slpAGBXUZRyTpchZ5c9Rm5J1EJLMIpTh7GTNp9UpecrIGk/RbclB
YIj0FvnXSImWNyNhAiDb18dke3VBm6KiXn5OtihL90eiNcyhDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLys9UTPhJ9d+VNIx0BviGXDGqLvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDM2ZmM1MmUtYThhMC0z
NjU1LTk1YzUtNTRmOWYyOWFmNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrmGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+d6xff5/gbZDAe8q1ZcRalwfqG+Rml2mGSYdsImQ/8cOiKznJkVK63
9Kzg4E7KT3ebbVwIbM7ID/xySA68fpjd+C1KIuWlVe/LDuppdM8SjH9Di24iTGSf
AIgT7xaB1Q6z3ULPQQTjWj7E1kgAFGIunltGt/7qVDN1df2V/wz6ycJWf/0656Dd
l2ms9JJ3fw4oeQrA/DTpxn+NxY0XfoQRbsyMDewk6TxJPasRtQDAgRScLlcuiuvI
Fmro3eOpRjUy89ekbZYhwnA5Sqy4a/+A/QcArGBFfPn8ZT9ll8gKvijthyVUxsN3
EqRsuwbvAseI0AlNs7ADP8uhk0QvbAc=
-----END CERTIFICATE-----
Generated at Sun May 11 19:10:16 2025 by rpki-client