Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e5cdfdd5-0e20-3ca2-b7b0-ac271d543bf9.roa
File:                     e5cdfdd5-0e20-3ca2-b7b0-ac271d543bf9.roa (raw, json)
Hash identifier:          4GTPJmO4BVwfa048jklGBxUIeh4aocPax833FA3Vm5M=
Subject key identifier:   63:A7:02:D5:BA:69:4C:8A:27:DC:6E:BB:19:3F:44:A3:F3:5D:BD:6B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A451C8FB3459F3B9B1E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e5cdfdd5-0e20-3ca2-b7b0-ac271d543bf9.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11426
IP address blocks:        65.190.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:45:1c:8f:b3:45:9f:3b:9b:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c152ee9c-7830-48c2-b671-e1655bdc478d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:67:36:fb:f2:f3:b7:c2:22:6d:df:2e:bc:
                    42:a8:4f:d2:9c:d4:a5:d5:8d:c5:90:b1:32:a2:d9:
                    e9:81:d9:d6:2d:ad:31:ca:a2:2b:b3:57:72:6e:6e:
                    4b:bb:b7:80:a9:6c:b3:88:b6:81:03:cc:6e:b1:5a:
                    fb:69:b5:58:b0:6b:7b:22:66:ee:c9:60:ca:d9:85:
                    c0:95:bc:0f:cf:52:19:29:86:66:c7:8c:22:b1:64:
                    9c:2e:c8:bc:33:29:59:d9:53:53:75:97:ad:08:05:
                    87:cd:1b:f8:02:8e:15:0c:58:6c:d8:f1:3d:97:b9:
                    2d:a9:58:1a:b8:7c:e2:99:9b:94:a8:4c:ce:03:76:
                    4d:c2:d8:d9:d0:e0:ea:83:7f:e8:1c:88:49:c9:c8:
                    56:12:e5:41:fc:4f:21:a8:75:bb:0d:33:04:f6:79:
                    ff:f9:85:7c:55:84:c8:4a:7e:48:73:c3:52:a1:e7:
                    ad:7b:e2:a8:6a:c1:37:07:67:b7:f1:e5:c9:1f:62:
                    cd:7f:23:0c:77:b3:36:21:26:b1:5d:bd:7b:66:78:
                    00:a2:87:a8:b9:88:29:9a:88:e7:86:ff:86:95:00:
                    17:03:59:f3:10:12:a9:79:19:09:c0:48:78:db:31:
                    c9:5f:54:83:c9:04:8a:17:bc:9f:11:5d:81:64:0f:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A7:02:D5:BA:69:4C:8A:27:DC:6E:BB:19:3F:44:A3:F3:5D:BD:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e5cdfdd5-0e20-3ca2-b7b0-ac271d543bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.190.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:17:14:5d:32:98:71:7e:cf:1e:1f:8b:c9:19:3f:ef:e7:a3:
         62:11:df:4c:4f:fc:22:f6:ae:5c:1a:95:26:a4:7d:2c:93:a8:
         c8:42:fe:64:81:5b:f1:5f:a1:58:d2:cc:d4:25:e5:49:53:83:
         b7:7a:7a:8b:a3:1e:f7:53:3f:19:f7:ba:7f:17:da:94:2e:17:
         62:62:a7:22:b1:f9:b0:30:21:b7:e6:83:71:6a:82:96:11:04:
         37:46:01:46:87:28:19:13:88:79:48:05:2b:26:bb:aa:c3:cf:
         cf:b4:9d:7a:8e:5e:24:a7:e7:86:df:a7:43:c0:88:4c:33:b0:
         53:af:b8:dd:ad:3a:d2:d9:ee:73:49:ba:c1:29:c1:10:4a:7a:
         1a:df:9e:cf:3a:0f:69:2e:34:34:f7:8c:1b:42:e6:dc:6f:33:
         7e:d5:59:5e:d7:83:b7:9f:93:1f:bf:53:21:8b:ac:6a:6a:22:
         38:99:19:19:0e:4e:19:b5:37:d2:23:a8:69:bd:40:81:34:08:
         b1:3e:e4:7f:35:93:44:65:8d:f0:7c:ad:3f:8e:c9:3c:5f:8b:
         cb:18:7c:ca:df:03:7f:54:bd:17:33:fd:88:3f:a8:3d:47:46:
         f5:17:b2:b0:b2:ef:ec:ec:aa:19:a2:77:6b:f6:16:ba:b3:2c:
         14:07:40:e5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnCCkUcj7NFnzubHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YzE1MmVlOWMtNzgzMC00OGMyLWI2NzEtZTE2NTViZGM0NzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri5nNvvy87fCIm3fLrxCqE/SnNSl1Y3FkLEy
otnpgdnWLa0xyqIrs1dybm5Lu7eAqWyziLaBA8xusVr7abVYsGt7ImbuyWDK2YXA
lbwPz1IZKYZmx4wisWScLsi8MylZ2VNTdZetCAWHzRv4Ao4VDFhs2PE9l7ktqVga
uHzimZuUqEzOA3ZNwtjZ0ODqg3/oHIhJychWEuVB/E8hqHW7DTME9nn/+YV8VYTI
Sn5Ic8NSoeete+KoasE3B2e38eXJH2LNfyMMd7M2ISaxXb17ZngAooeouYgpmojn
hv+GlQAXA1nzEBKpeRkJwEh42zHJX1SDyQSKF7yfEV2BZA/A9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGOnAtW6aUyKJ9xuuxk/RKPzXb1rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZTVjZGZkZDUtMGUyMC0z
Y2EyLWI3YjAtYWMyNzFkNTQzYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQb4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALRcUXTKYcX7PHh+LyRk/7+ejYhHfTE/8IvauXBqVJqR9LJOoyEL+ZIFb
8V+hWNLM1CXlSVODt3p6i6Me91M/Gfe6fxfalC4XYmKnIrH5sDAht+aDcWqClhEE
N0YBRocoGROIeUgFKya7qsPPz7Sdeo5eJKfnht+nQ8CITDOwU6+43a060tnuc0m6
wSnBEEp6Gt+ezzoPaS40NPeMG0Lm3G8zftVZXteDt5+TH79TIYusamoiOJkZGQ5O
GbU30iOoab1AgTQIsT7kfzWTRGWN8HytP47JPF+Lyxh8yt8Df1S9FzP9iD+oPUdG
9ReysLLv7OyqGaJ3a/YWurMsFAdA5Q==
-----END CERTIFICATE-----
Generated at Sat May 10 09:47:25 2025 by rpki-client