Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/438c589e-2177-3211-a62b-376cb849d0ba.roa
File:                     438c589e-2177-3211-a62b-376cb849d0ba.roa (raw, json)
Hash identifier:          AqksJ0a7VdLJSTHGyEa+ShrJKVrbpmE1c6e9ko2E0J0=
Subject key identifier:   29:AE:15:39:6F:F7:63:C2:A4:ED:8F:9C:F9:48:7E:79:87:84:8D:6B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838E3DAB442C5E5B6E0454C2DC4
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/438c589e-2177-3211-a62b-376cb849d0ba.roa
Signing time:             Tue 09 Feb 2021 05:00:00 +0000
ROA not before:           Tue 09 Feb 2021 05:00:00 +0000
ROA not after:            Tue 02 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        96.58.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:e3:da:b4:42:c5:e5:b6:e0:45:4c:2d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb  9 05:00:00 2021 GMT
            Not After : Feb  2 05:00:00 2027 GMT
        Subject: CN=7c49f7ae-7b53-4302-850b-a90efc73219f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:11:a8:7c:1e:59:61:b5:51:71:29:bd:f5:a9:
                    79:72:ac:d9:9c:8a:d4:53:4e:05:d3:05:0f:a0:9a:
                    4e:2f:bb:3c:2c:37:a2:3f:67:7b:f7:e7:60:3f:f8:
                    3b:75:2e:cc:3f:45:0e:37:4d:ea:b9:30:63:a1:38:
                    70:a3:c6:b8:d8:65:1e:37:74:76:e3:ec:34:a0:9c:
                    25:3e:00:5a:e1:36:5c:da:9b:b8:0a:b4:9c:dc:97:
                    24:2b:37:7b:a0:41:4a:cd:cd:71:a6:a5:c7:90:54:
                    bd:62:73:4c:43:de:56:c2:2a:57:ff:f2:38:cd:09:
                    4d:1b:9c:a8:a7:23:4f:4d:26:6e:04:30:f9:dd:12:
                    6e:ec:73:0b:39:37:93:b7:70:8e:b8:3e:1a:ff:9f:
                    53:0f:35:60:40:91:7b:1b:08:77:c2:26:5b:a6:89:
                    be:65:f3:29:32:6f:1e:ae:61:8f:9f:33:ae:48:cb:
                    e6:15:46:a5:22:67:af:3f:97:6a:d4:b4:fc:da:c5:
                    d7:69:26:ea:6f:e6:03:16:8a:2e:bc:b4:26:29:10:
                    0e:f2:1d:d1:97:ef:52:23:65:b0:ab:d4:b2:60:ae:
                    8a:47:cb:76:f4:52:f6:39:a1:a3:16:76:01:67:39:
                    a0:20:9d:bb:a5:fe:6b:43:01:3a:a7:4b:51:10:14:
                    4d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AE:15:39:6F:F7:63:C2:A4:ED:8F:9C:F9:48:7E:79:87:84:8D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/438c589e-2177-3211-a62b-376cb849d0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.58.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:15:24:5e:f3:fe:12:e6:7b:b1:5b:06:78:da:89:bb:19:ac:
         23:59:37:4c:d3:54:57:31:19:48:3f:c0:8c:60:d7:ce:4b:f8:
         a0:a4:7c:f5:b5:41:65:35:fe:9d:6f:82:f3:67:8d:53:17:42:
         1d:f9:d4:71:32:2e:42:df:0c:83:6c:ad:cf:5a:7c:0d:a1:f4:
         39:f7:2c:b7:77:74:12:18:b1:73:ff:64:f1:00:90:77:3d:66:
         f3:4e:a5:df:66:af:39:39:53:ec:99:24:67:0d:d3:57:a4:17:
         d3:27:32:f9:50:8c:ac:89:26:27:2c:31:50:f4:23:62:3c:cf:
         40:98:71:6e:e5:cb:59:e1:de:1b:d5:42:f3:a3:b2:1d:ea:39:
         7c:ed:07:aa:49:ab:56:dc:72:c0:63:25:14:42:25:a9:30:a8:
         0f:02:c1:8e:e2:16:6f:d6:fa:83:0b:35:e4:46:7d:cd:7d:69:
         67:27:10:9e:6e:e9:c1:91:ae:1c:44:07:80:05:38:25:48:fe:
         3a:02:aa:aa:d5:e2:76:8f:3c:62:5d:cf:85:0a:25:11:2c:b9:
         92:26:64:07:1a:ac:14:4b:72:b5:70:d8:6c:d3:d5:11:61:cd:
         e5:8c:81:9b:e2:7b:ae:7a:93:d9:89:6c:4d:ea:c3:ea:28:41:
         ec:74:41:79
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDjj2rRCxeW24EVMLcQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDIwOTA1MDAwMFoXDTI3MDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
N2M0OWY3YWUtN2I1My00MzAyLTg1MGItYTkwZWZjNzMyMTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhGofB5ZYbVRcSm99al5cqzZnIrUU04F0wUP
oJpOL7s8LDeiP2d79+dgP/g7dS7MP0UON03quTBjoThwo8a42GUeN3R24+w0oJwl
PgBa4TZc2pu4CrSc3JckKzd7oEFKzc1xpqXHkFS9YnNMQ95WwipX//I4zQlNG5yo
pyNPTSZuBDD53RJu7HMLOTeTt3COuD4a/59TDzVgQJF7Gwh3wiZbpom+ZfMpMm8e
rmGPnzOuSMvmFUalImevP5dq1LT82sXXaSbqb+YDFoouvLQmKRAO8h3Rl+9SI2Ww
q9SyYK6KR8t29FL2OaGjFnYBZzmgIJ27pf5rQwE6p0tREBRNWwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCmuFTlv92PCpO2PnPlIfnmHhI1rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDM4YzU4OWUtMjE3Ny0z
MjExLWE2MmItMzc2Y2I4NDlkMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYDowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKRUkXvP+EuZ7sVsGeNqJuxmsI1k3TNNUVzEZSD/AjGDXzkv4oKR89bVB
ZTX+nW+C82eNUxdCHfnUcTIuQt8Mg2ytz1p8DaH0Ofcst3d0Ehixc/9k8QCQdz1m
806l32avOTlT7JkkZw3TV6QX0ycy+VCMrIkmJywxUPQjYjzPQJhxbuXLWeHeG9VC
86OyHeo5fO0HqkmrVtxywGMlFEIlqTCoDwLBjuIWb9b6gws15EZ9zX1pZycQnm7p
wZGuHEQHgAU4JUj+OgKqqtXido88Yl3PhQolESy5kiZkBxqsFEtytXDYbNPVEWHN
5YyBm+J7rnqT2YlsTerD6ihB7HRBeQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:24 2024 by rpki-client on console-fra.rpki-client.org