Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4126b35e-744f-350d-a1ea-822611f74736.roa
File:                     4126b35e-744f-350d-a1ea-822611f74736.roa (raw, json)
Hash identifier:          ERrS5vpCSb2RBxjGpMFzaKBseDJ2t0zfT6fHCqBfX/4=
Subject key identifier:   63:8B:F3:D8:91:6D:2E:33:9C:82:6C:0B:24:BF:83:57:24:0F:ED:09
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285847ED24C7518861567223EFAD20
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4126b35e-744f-350d-a1ea-822611f74736.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     11090
IP address blocks:        216.137.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c7:51:88:61:56:72:23:ef:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=01331938-dbe6-46f8-8311-31da67c570af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:24:1f:30:48:d3:0e:03:d6:12:8c:46:b7:9e:
                    07:f2:6f:e5:3d:c2:a1:d7:52:a6:35:10:25:4d:0f:
                    f2:9e:dc:17:96:6f:b8:71:4f:a6:e9:fa:89:80:61:
                    09:5d:54:8a:ec:00:b3:79:32:b6:c3:9d:72:c7:6b:
                    7c:96:6d:70:e8:38:43:c0:87:a0:42:6a:82:de:0f:
                    3f:c3:0b:35:79:ea:56:cd:bd:8d:9d:36:b6:0b:c0:
                    5c:42:f2:62:92:39:f9:42:04:d4:d4:d1:2a:5b:ee:
                    8d:76:19:da:00:1b:fe:ba:b9:2f:bd:cc:5e:b5:2d:
                    72:e5:b0:bd:eb:99:34:01:2b:cd:0d:b3:23:9c:67:
                    15:5f:1f:b5:72:ce:7e:de:80:28:49:07:14:8b:f7:
                    bb:dc:cc:ec:4f:fc:97:88:e1:9a:f8:64:39:02:e5:
                    8f:61:2c:5e:52:18:da:01:d1:0d:ce:93:71:ce:ef:
                    30:da:c0:99:19:f5:0e:10:ac:3b:6d:c0:76:a4:da:
                    52:5c:6a:03:6f:b5:74:24:a4:c2:9a:3e:b5:93:0d:
                    d2:2b:f2:77:62:21:7f:a0:6c:a0:fd:81:a7:20:0f:
                    fc:51:8b:e6:cd:3f:0c:8b:7e:88:66:c2:46:97:f4:
                    51:a4:69:98:95:17:3c:01:34:0f:b0:94:7f:7c:d4:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:F3:D8:91:6D:2E:33:9C:82:6C:0B:24:BF:83:57:24:0F:ED:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4126b35e-744f-350d-a1ea-822611f74736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:26:b5:1d:4c:a3:d0:c2:86:b6:e0:f9:4b:aa:4d:b2:b4:eb:
         30:d7:1c:ee:a4:6e:e6:86:9f:33:21:d3:6d:14:27:c0:ae:18:
         30:a7:2d:ca:26:02:e4:d6:1d:2f:12:50:18:5c:4c:35:9d:74:
         f0:73:a2:65:81:d0:d0:8e:1a:00:85:1b:b4:1b:56:64:ca:e8:
         65:0c:e0:b7:5e:70:67:c4:da:6c:ae:22:2c:d4:15:c8:1c:76:
         cf:51:b0:c0:37:9c:f9:5a:f0:fa:e2:43:2d:c7:42:1a:0c:4f:
         46:70:d8:7d:0e:eb:f3:aa:87:6d:41:71:2e:09:2a:45:4b:fb:
         29:4f:c1:a0:c8:f8:21:0f:69:10:43:1c:1e:e7:ce:29:af:25:
         a8:97:d2:c8:6e:84:12:b8:b6:3d:90:ba:b2:c6:91:39:2a:84:
         85:d4:78:92:b2:a4:86:f5:b1:eb:64:ed:33:25:80:9f:6f:6e:
         47:bf:0a:d6:e2:94:10:99:62:4f:0e:ff:dd:4f:df:d1:79:a8:
         1d:59:aa:f1:7f:36:c7:9c:03:6d:48:79:0b:b0:6a:04:7c:55:
         28:c2:2e:55:47:0e:c8:a7:8f:4d:16:18:5e:be:2b:cf:98:65:
         22:2d:b7:17:18:f1:bf:bd:90:54:c8:d7:83:b9:f3:b7:9f:19:
         34:41:7b:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMdRiGFWciPvrSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
MDEzMzE5MzgtZGJlNi00NmY4LTgzMTEtMzFkYTY3YzU3MGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiQfMEjTDgPWEoxGt54H8m/lPcKh11KmNRAl
TQ/yntwXlm+4cU+m6fqJgGEJXVSK7ACzeTK2w51yx2t8lm1w6DhDwIegQmqC3g8/
wws1eepWzb2NnTa2C8BcQvJikjn5QgTU1NEqW+6NdhnaABv+urkvvcxetS1y5bC9
65k0ASvNDbMjnGcVXx+1cs5+3oAoSQcUi/e73MzsT/yXiOGa+GQ5AuWPYSxeUhja
AdENzpNxzu8w2sCZGfUOEKw7bcB2pNpSXGoDb7V0JKTCmj61kw3SK/J3YiF/oGyg
/YGnIA/8UYvmzT8Mi36IZsJGl/RRpGmYlRc8ATQPsJR/fNSIPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOL89iRbS4znIJsCyS/g1ckD+0JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDEyNmIzNWUtNzQ0Zi0z
NTBkLWExZWEtODIyNjExZjc0NzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcmtR1Mo9DChrbg+UuqTbK06zDXHO6kbuaGnzMh020UJ8CuGDCnLcom
AuTWHS8SUBhcTDWddPBzomWB0NCOGgCFG7QbVmTK6GUM4LdecGfE2myuIizUFcgc
ds9RsMA3nPla8PriQy3HQhoMT0Zw2H0O6/Oqh21BcS4JKkVL+ylPwaDI+CEPaRBD
HB7nzimvJaiX0shuhBK4tj2QurLGkTkqhIXUeJKypIb1setk7TMlgJ9vbke/Ctbi
lBCZYk8O/91P39F5qB1ZqvF/NsecA21IeQuwagR8VSjCLlVHDsinj00WGF6+K8+Y
ZSIttxcY8b+9kFTI14O587efGTRBe0Y=
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:19 2024 by rpki-client on console-fra.rpki-client.org