Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa
File:                     f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa (raw, json)
Hash identifier:          3Z4xKPO4QXHMcGXx0pMud9kZw76rqFpit4Xkxced6tI=
Subject key identifier:   B5:A8:54:71:F0:7B:67:E2:41:CD:76:C9:DD:33:86:AE:B7:D5:93:E2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A668324DE19228A0A6580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        71.43.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:66:83:24:de:19:22:8a:0a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b56eb8ef-5d77-405b-aa5f-2c02450726ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:da:65:f0:42:ea:7c:26:74:4c:bf:b9:4e:
                    30:38:d8:09:24:1c:ad:26:97:1c:3a:f1:ca:b3:0e:
                    98:7d:c6:d0:75:cc:ea:fa:c5:b9:14:6f:de:da:e6:
                    52:89:ca:38:0f:c8:14:11:b9:a3:dd:f0:1c:84:e6:
                    1a:e7:86:be:c8:bf:81:93:c0:93:10:56:a8:e4:9b:
                    32:f3:f7:5f:b8:e5:73:35:f6:f7:04:87:d5:7a:0f:
                    8e:c3:56:6b:e1:ea:ad:76:b6:9f:ec:9d:17:7f:c3:
                    91:86:81:de:cf:43:9c:a5:d4:0a:30:91:52:28:23:
                    76:44:bc:ce:ba:7d:71:1b:26:94:2b:27:3f:a1:a9:
                    9b:85:67:a8:eb:8b:ae:a2:b1:82:d9:e8:19:10:a5:
                    0c:0c:05:a0:ab:ec:14:b1:7a:94:7e:e4:5c:e2:78:
                    3d:08:d4:2c:03:b2:5e:91:26:a8:2c:48:e9:09:98:
                    97:d8:f6:77:85:ad:9f:b6:0f:ac:13:52:38:e8:c8:
                    50:d3:bb:ba:b3:d1:dc:38:7a:00:85:a0:96:d7:f2:
                    39:b1:5b:c1:ca:4b:1a:fe:19:ad:c6:8c:b8:16:af:
                    bb:5e:65:65:d9:5b:77:96:e3:e2:00:32:8e:19:e8:
                    84:ae:10:26:d3:1f:99:1d:14:e9:c7:f0:b0:81:43:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A8:54:71:F0:7B:67:E2:41:CD:76:C9:DD:33:86:AE:B7:D5:93:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:e5:32:1c:67:11:81:c9:19:71:91:da:75:9f:0d:49:03:
         f9:d7:6f:e1:2a:b8:3d:de:6f:01:0d:92:b1:78:22:28:8f:ce:
         61:53:2f:48:38:0d:68:1e:33:7f:07:a6:2f:9d:13:d9:3c:1d:
         e9:02:99:9d:c2:3e:99:db:38:86:48:09:8a:9e:5f:5b:8c:5d:
         b4:5e:64:59:0a:1d:d4:63:30:46:f2:49:fb:8a:e9:ae:09:0f:
         92:44:bd:49:c8:25:c0:12:17:dd:78:90:4a:5b:ec:ec:9e:f8:
         a2:d5:03:25:e6:e9:d4:f4:3e:fa:d1:01:71:98:db:5b:e4:d5:
         1e:f8:de:60:34:97:91:54:d7:3e:bf:14:7d:e1:fd:3e:ec:60:
         f4:f0:4f:16:38:59:d8:ae:19:89:3a:9c:cf:5c:16:06:90:37:
         4b:63:10:7e:5e:e5:5f:6e:1d:33:6a:7b:3c:eb:bb:ef:fb:dd:
         27:3d:7a:8d:95:ad:e8:ad:e0:3d:f7:fc:f0:f3:7f:59:a0:b7:
         e4:c2:50:48:7f:6b:84:4e:5c:c6:33:50:ed:95:40:66:dc:03:
         b7:92:76:cb:2a:19:21:dd:1f:75:9c:34:01:5c:3f:24:0d:c9:
         75:59:7d:18:34:98:cd:58:94:4b:44:e1:d0:6a:b8:19:e1:ad:
         51:8e:7a:e2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnCCmaDJN4ZIooKZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YjU2ZWI4ZWYtNWQ3Ny00MDViLWFhNWYtMmMwMjQ1MDcyNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm3aZfBC6nwmdEy/uU4wONgJJBytJpccOvHK
sw6YfcbQdczq+sW5FG/e2uZSico4D8gUEbmj3fAchOYa54a+yL+Bk8CTEFao5Jsy
8/dfuOVzNfb3BIfVeg+Ow1Zr4eqtdraf7J0Xf8ORhoHez0OcpdQKMJFSKCN2RLzO
un1xGyaUKyc/oambhWeo64uuorGC2egZEKUMDAWgq+wUsXqUfuRc4ng9CNQsA7Je
kSaoLEjpCZiX2PZ3ha2ftg+sE1I46MhQ07u6s9HcOHoAhaCW1/I5sVvByksa/hmt
xoy4Fq+7XmVl2Vt3luPiADKOGeiErhAm0x+ZHRTpx/CwgUPhuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLWoVHHwe2fiQc12yd0zhq631ZPiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZjM4Y2RkYzMtMTUyMS0z
N2ViLTliNTAtM2YzMWFlMWYwMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARyswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAh8nlMhxnEYHJGXGR2nWfDUkD+ddv4Sq4Pd5vAQ2SsXgiKI/OYVMvSDgN
aB4zfwemL50T2Twd6QKZncI+mds4hkgJip5fW4xdtF5kWQod1GMwRvJJ+4rprgkP
kkS9ScglwBIX3XiQSlvs7J74otUDJebp1PQ++tEBcZjbW+TVHvjeYDSXkVTXPr8U
feH9Puxg9PBPFjhZ2K4ZiTqcz1wWBpA3S2MQfl7lX24dM2p7POu77/vdJz16jZWt
6K3gPff88PN/WaC35MJQSH9rhE5cxjNQ7ZVAZtwDt5J2yyoZId0fdZw0AVw/JA3J
dVl9GDSYzViUS0Th0Gq4GeGtUY564g==
-----END CERTIFICATE-----
Generated at Thu Jun 19 07:46:30 2025 by rpki-client