Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ca62c8b7-5b24-374d-861f-74eb0b87589a.roa
File:                     ca62c8b7-5b24-374d-861f-74eb0b87589a.roa (raw, json)
Hash identifier:          ZHfx7g5JgMwxhndC74Y4aq/vO0gEO4SLyMuWjrHmrlI=
Subject key identifier:   9F:90:73:8A:06:34:97:67:86:AB:97:1C:2B:3C:52:80:71:17:0B:C7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16677640242
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ca62c8b7-5b24-374d-861f-74eb0b87589a.roa
Signing time:             Mon 15 Oct 2018 11:02:14 +0000
ROA not before:           Mon 15 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        129.250.143.72/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:64:02:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=fb34f263-5ba5-4077-b100-2602d9661112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:81:fa:6d:1f:cf:1f:b1:ad:ec:23:a6:e7:62:
                    d2:f4:d3:76:67:df:59:cf:0f:f3:5d:a6:ed:64:10:
                    25:3a:a7:b1:bc:49:50:9e:e6:d7:76:83:d3:82:05:
                    38:bf:5b:3a:ba:a7:bd:51:2c:8f:b7:e3:55:f0:63:
                    06:36:a3:c1:2b:de:a0:7f:9f:e1:8c:76:2a:2e:49:
                    80:90:6c:d8:ae:be:38:40:67:fe:48:75:5d:2f:0f:
                    b1:80:b5:e5:f9:98:1e:5f:5c:ab:57:7a:f4:4a:a3:
                    fc:0e:4a:61:36:ba:27:34:38:f2:76:56:05:23:9d:
                    19:bf:23:53:e1:b0:78:1f:99:63:23:3c:3b:d1:62:
                    c1:57:86:17:3e:a2:19:df:78:aa:af:02:3b:2d:93:
                    91:51:b4:57:b7:d0:1b:08:be:14:15:33:f4:fa:d5:
                    10:d8:4d:c1:0c:0a:25:0e:b8:92:28:83:8f:9b:02:
                    86:dc:1f:84:c0:32:0d:38:84:40:b7:22:18:45:6d:
                    98:a8:b1:08:a6:92:15:89:fc:70:9d:33:db:79:5f:
                    69:89:f5:fc:b4:fd:f0:e3:7c:d9:43:a3:00:4c:dd:
                    17:07:c6:fb:a2:4e:a5:d1:58:86:f4:fc:2e:59:ff:
                    77:64:47:01:21:2d:85:5a:7d:fc:39:65:aa:4d:21:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:90:73:8A:06:34:97:67:86:AB:97:1C:2B:3C:52:80:71:17:0B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ca62c8b7-5b24-374d-861f-74eb0b87589a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.143.72/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:16:b3:58:5d:30:b9:69:60:15:35:49:87:37:0c:df:a4:
         6b:50:3b:a4:85:26:f0:6b:ac:e7:d0:78:08:a3:55:d8:ea:a8:
         9b:b8:ae:d5:86:88:88:a2:33:4b:d8:de:dd:7f:18:04:b1:11:
         2f:af:c3:ff:bc:bd:c1:bd:fc:22:8a:41:87:23:ca:6b:fc:8e:
         3e:b6:a3:98:56:8e:57:f7:75:d6:df:c9:1b:15:dd:5a:c2:cd:
         2b:6e:cd:47:ca:ae:1a:47:e0:a2:c6:ec:39:40:3a:d5:6a:1b:
         65:47:1e:c0:b6:09:c8:17:26:1e:fa:8e:33:e6:2e:c3:18:62:
         56:f9:0b:0a:3f:a5:fd:dd:e3:5a:86:95:08:47:33:47:a2:7f:
         d7:6f:92:92:9f:ff:58:6e:ba:ae:0f:d0:54:92:48:fd:34:d9:
         c0:93:2f:b0:88:e1:bf:5d:83:2e:fe:d0:18:67:69:c6:f7:65:
         f0:08:31:98:db:56:d1:f9:30:52:2c:b0:07:41:ea:c2:9b:d6:
         d9:e5:ef:c7:f0:09:b3:80:59:05:f7:ff:bf:5c:d3:f4:18:51:
         89:86:86:2c:f1:0c:b3:6f:51:54:26:e1:fc:9f:ee:4f:e1:b8:
         73:e7:6f:94:9d:2d:c8:09:6e:a0:13:f5:16:43:ce:25:bf:52:
         02:b1:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:47 2024 by rpki-client on console-fra.rpki-client.org