Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa
File:                     3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa (raw, json)
Hash identifier:          pJDNumOzQnIHYLRY1aVyPF0vSYaMGBTJ5Sibr+YvJdA=
Subject key identifier:   17:D4:5E:48:8D:DC:F5:B1:4A:D8:2E:58:00:A8:7D:F6:D7:F2:06:CA
Certificate issuer:       /CN=58d440e8-959f-43ab-a410-371a599ce552
Certificate serial:       010D0C9F432858473A5B30C0F39E2006E5F30F40
Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     26806
IP address blocks:        198.169.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:30:c0:f3:9e:20:06:e5:f3:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=1372704f-ee2c-422f-93ad-babd0102e053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:20:40:99:2d:f2:94:57:cf:80:a3:25:ac:
                    42:06:58:78:1c:61:0e:ef:dc:b5:1d:82:86:31:13:
                    f9:b9:fc:c9:c0:98:1a:71:e0:5c:d8:19:32:90:50:
                    03:8a:9f:9b:e6:ef:a2:85:31:f2:dd:df:39:11:3f:
                    9d:a4:ad:e5:e1:84:a7:20:82:dd:87:0b:fa:a7:6a:
                    76:ce:d9:4d:64:28:9b:f1:34:ac:a4:80:36:37:65:
                    87:38:5f:1c:8a:f9:82:9a:1c:6d:62:86:c6:d7:82:
                    eb:11:cb:d9:4f:f9:d9:95:ad:f2:6d:7d:98:14:81:
                    e0:d2:ca:8e:9b:49:6a:4c:10:be:8b:f2:35:49:49:
                    af:ae:74:0f:35:5f:b6:b5:cd:80:6a:65:a9:e5:db:
                    02:c4:e1:2f:20:62:dd:44:ee:28:91:9c:6b:90:6e:
                    33:78:8d:91:8d:05:51:2a:0e:1f:62:14:56:49:47:
                    70:3a:b9:3f:c0:60:0e:07:f2:17:5a:0c:1b:d6:0c:
                    17:55:f7:47:ec:f9:71:db:24:35:b1:0d:3f:cf:22:
                    fb:0e:30:81:69:25:6a:da:37:cf:5b:ac:31:a6:86:
                    c4:5f:00:cc:02:ec:bd:dc:df:57:f8:0b:19:a4:b7:
                    e1:82:0b:45:57:ff:57:5c:ad:7a:0a:16:a5:85:0e:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:5E:48:8D:DC:F5:B1:4A:D8:2E:58:00:A8:7D:F6:D7:F2:06:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl

            X509v3 Authority Key Identifier:
                keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:57:13:25:0a:28:84:ba:f9:dc:e6:11:6a:1f:74:18:68:35:
         ec:43:0c:6c:3c:72:6a:37:72:20:81:ef:7d:3e:f7:4a:e3:06:
         e8:14:8d:d9:84:be:91:3d:95:3c:6c:3f:48:2c:06:b5:02:27:
         ef:27:98:8a:ee:33:ff:7c:52:e6:71:8f:c1:38:0a:ae:a3:5e:
         5e:65:d3:24:cc:a9:3d:41:81:7c:1a:81:36:cf:eb:23:e0:62:
         0b:1a:ef:65:ca:a2:86:64:a1:56:8e:55:41:d7:3e:02:c1:e1:
         be:ea:5e:23:a9:30:01:b3:6d:5c:18:80:9f:c3:62:16:13:09:
         15:3d:27:73:5b:b8:8d:61:71:c6:cc:44:c8:77:98:23:67:48:
         88:a8:6a:db:1c:16:7e:d3:56:c2:e5:c6:2b:8a:73:e6:82:ff:
         bb:9d:88:e6:8d:fd:d2:02:f6:d9:24:be:5c:f7:a5:18:41:ce:
         19:f5:8a:a9:b8:9a:10:9d:88:7e:ac:53:24:57:3c:d5:c6:4d:
         8e:55:7c:a1:ce:c3:86:62:ca:c4:b9:4f:1f:49:b1:1c:c2:af:
         de:46:d9:bc:28:9a:e8:da:a4:4d:75:be:6d:ac:f1:0f:8b:8c:
         dc:59:9b:d8:9c:cb:ca:7e:bc:bd:a4:ca:8d:4d:f5:f5:a4:a2:
         04:38:9f:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6WzDA854gBuXzD0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThkNDQwZTgtOTU5Zi00M2FiLWE0MTAtMzcxYTU5OWNl
NTUyMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
MTM3MjcwNGYtZWUyYy00MjJmLTkzYWQtYmFiZDAxMDJlMDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDUgQJkt8pRXz4CjJaxCBlh4HGEO79y1HYKG
MRP5ufzJwJgaceBc2BkykFADip+b5u+ihTHy3d85ET+dpK3l4YSnIILdhwv6p2p2
ztlNZCib8TSspIA2N2WHOF8civmCmhxtYobG14LrEcvZT/nZla3ybX2YFIHg0sqO
m0lqTBC+i/I1SUmvrnQPNV+2tc2AamWp5dsCxOEvIGLdRO4okZxrkG4zeI2RjQVR
Kg4fYhRWSUdwOrk/wGAOB/IXWgwb1gwXVfdH7Plx2yQ1sQ0/zyL7DjCBaSVq2jfP
W6wxpobEXwDMAuy93N9X+AsZpLfhggtFV/9XXK16ChalhQ74AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfUXkiN3PWxStguWACoffbX8gbKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0
NDBlOC05NTlmLTQzYWItYTQxMC0zNzFhNTk5Y2U1NTIvM2RiY2JhZWUtYTJhNi0z
Y2EwLWI5ZjctZDI1ODQ2MzU2ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNThkNDQwZTgtOTU5Zi00M2FiLWE0
MTAtMzcxYTU5OWNlNTUyLzU4ZDQ0MGU4LTk1OWYtNDNhYi1hNDEwLTM3MWE1OTlj
ZTU1Mi5jcmwwHwYDVR0jBBgwFoAU+o/TvOByBEZ4B0MbQZDqQMFu+IMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0NDBlOC05NTlmLTQzYWItYTQxMC0zNzFh
NTk5Y2U1NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNXEyUKKIS6+dzmEWofdBhoNexDDGw8cmo3ciCB730+90rjBugUjdmE
vpE9lTxsP0gsBrUCJ+8nmIruM/98UuZxj8E4Cq6jXl5l0yTMqT1BgXwagTbP6yPg
Ygsa72XKooZkoVaOVUHXPgLB4b7qXiOpMAGzbVwYgJ/DYhYTCRU9J3NbuI1hccbM
RMh3mCNnSIioatscFn7TVsLlxiuKc+aC/7udiOaN/dIC9tkkvlz3pRhBzhn1iqm4
mhCdiH6sUyRXPNXGTY5VfKHOw4ZiysS5Tx9JsRzCr95G2bwomujapE11vm2s8Q+L
jNxZm9icy8p+vL2kyo1N9fWkogQ4nyo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:15 2024 by rpki-client on console-ams.rpki-client.org