Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/21e0b6f5-3c15-31ed-bd48-9f8d63c4178f.roa
File:                     21e0b6f5-3c15-31ed-bd48-9f8d63c4178f.roa (raw, json)
Hash identifier:          t4gjg2K/nbXS4PDEjnc8o15lKLhyfHfc8JcYkgCGySc=
Subject key identifier:   8A:AE:72:AB:57:5E:85:F4:67:47:5D:68:78:91:C0:A5:16:CF:10:A6
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664242535B
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/21e0b6f5-3c15-31ed-bd48-9f8d63c4178f.roa
Signing time:             Fri 05 Oct 2018 03:25:34 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        128.241.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:42:53:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=159e93c1-0ef5-44ac-9137-5a380f2ab134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:e4:86:3e:2f:39:53:af:0f:c2:65:8a:99:
                    25:ae:69:a5:3a:e8:2e:1b:79:2f:5f:73:00:43:35:
                    81:7f:a7:b8:a3:92:0e:75:82:6e:3b:3c:65:40:4c:
                    11:ff:40:72:58:4e:1f:ff:56:a0:bb:f2:91:94:77:
                    eb:0d:1e:26:ba:8e:29:fe:dd:90:24:0a:98:5d:27:
                    f0:1e:60:58:1b:b1:30:e2:42:67:12:ff:8c:4b:23:
                    45:f0:08:e6:a0:98:53:6b:98:31:3a:fa:b4:f9:f2:
                    6e:ed:99:60:78:42:d6:c7:c8:55:16:3e:aa:51:69:
                    8e:17:1f:fe:71:9c:41:cb:72:ae:a3:ff:3b:dd:45:
                    2b:cf:74:87:bd:59:05:9d:f8:f5:ab:b0:77:57:38:
                    74:a7:a8:94:61:08:fd:c3:04:1e:7c:52:e6:18:1a:
                    d6:34:46:cf:33:29:54:a4:56:ef:03:07:a8:91:4c:
                    35:b7:8f:19:d9:85:99:ce:12:38:71:d3:81:f7:51:
                    ce:5a:9c:36:a7:de:d7:bf:3f:e7:b7:03:91:5f:a9:
                    e0:69:52:26:4d:a9:d0:51:8a:e5:ea:1b:56:47:ca:
                    d4:71:22:e8:aa:d4:71:14:29:fe:c6:e1:cb:a0:c7:
                    df:f0:97:a5:7b:86:11:57:0e:14:b8:b3:ee:df:39:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AE:72:AB:57:5E:85:F4:67:47:5D:68:78:91:C0:A5:16:CF:10:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/21e0b6f5-3c15-31ed-bd48-9f8d63c4178f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:4f:a1:e4:2a:e1:85:c5:55:02:0e:be:72:0c:59:58:91:e0:
         24:7c:f9:33:eb:f3:b4:2f:e4:f0:13:bc:5f:57:2a:18:ac:a8:
         96:21:e8:74:82:73:69:c7:3d:d5:15:9c:fc:78:be:1d:c0:15:
         39:4e:ce:70:79:6c:fc:6d:3f:3f:c5:67:66:69:61:ee:bd:09:
         62:5e:5f:8a:bc:26:c3:00:49:70:89:33:bb:e7:1b:94:3c:3c:
         3b:c6:d1:bc:28:d7:f3:49:66:29:41:54:3a:8b:db:23:eb:3a:
         8f:30:46:13:94:13:a6:fd:68:31:27:82:91:76:0c:71:59:7b:
         c4:00:af:23:9d:76:8c:df:79:26:aa:00:00:0a:e5:fe:6c:8e:
         f5:f4:a5:5e:3d:11:7c:d0:c1:e2:33:5d:13:02:32:d7:2a:8e:
         11:76:67:fa:c6:56:79:8e:28:0c:fa:b9:13:76:55:75:12:20:
         0c:3e:9c:6f:9d:33:45:6e:b4:83:18:0a:28:46:d8:d9:c0:a5:
         b2:d2:83:94:70:44:e1:dd:41:53:e2:a1:72:16:33:e8:e5:f2:
         b1:92:03:8b:5e:5e:bb:99:eb:60:10:a9:61:94:62:43:3b:71:
         43:68:be:4d:27:8b:8f:57:65:e3:83:b4:60:67:51:81:3a:3b:
         2a:13:ad:25
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZkJCU1swCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMDQwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDE1
OWU5M2MxLTBlZjUtNDRhYy05MTM3LTVhMzgwZjJhYjEzNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKE55IY+LzlTrw/CZYqZJa5ppTroLht5L19zAEM1
gX+nuKOSDnWCbjs8ZUBMEf9AclhOH/9WoLvykZR36w0eJrqOKf7dkCQKmF0n8B5g
WBuxMOJCZxL/jEsjRfAI5qCYU2uYMTr6tPnybu2ZYHhC1sfIVRY+qlFpjhcf/nGc
QctyrqP/O91FK890h71ZBZ349auwd1c4dKeolGEI/cMEHnxS5hga1jRGzzMpVKRW
7wMHqJFMNbePGdmFmc4SOHHTgfdRzlqcNqfe178/57cDkV+p4GlSJk2p0FGK5eob
VkfK1HEi6KrUcRQp/sbhy6DH3/CXpXuGEVcOFLiz7t85qzECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSKrnKrV16F9GdHXWh4kcClFs8QpjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzIxZTBiNmY1LTNjMTUtMzFl
ZC1iZDQ4LTlmOGQ2M2M0MTc4Zi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA4DxwDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAtU+h5CrhhcVVAg6+cgxZWJHgJHz5M+vztC/k8BO8X1cqGKyoliHodIJzacc9
1RWc/Hi+HcAVOU7OcHls/G0/P8VnZmlh7r0JYl5firwmwwBJcIkzu+cblDw8O8bR
vCjX80lmKUFUOovbI+s6jzBGE5QTpv1oMSeCkXYMcVl7xACvI512jN95JqoAAArl
/myO9fSlXj0RfNDB4jNdEwIy1yqOEXZn+sZWeY4oDPq5E3ZVdRIgDD6cb50zRW60
gxgKKEbY2cClstKDlHBE4d1BU+KhchYz6OXysZIDi15eu5nrYBCpYZRiQztxQ2i+
TSeLj1dl44O0YGdRgTo7KhOtJQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:08 2024 by rpki-client on console-ams.rpki-client.org