Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/1e836734-8b6b-3ba5-ad69-ae926f0a483e.roa
File:                     1e836734-8b6b-3ba5-ad69-ae926f0a483e.roa (raw, json)
Hash identifier:          CwaNEhlihf5XpYX0ZsJULAchZkOTqcnWPK5nY5gUcVo=
Subject key identifier:   75:0A:2F:29:B1:98:C7:B3:A9:46:A5:FC:4E:9A:C0:B4:CD:98:C1:7B
Certificate issuer:       /CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
Certificate serial:       010D0C9F43285845304D3995FB4AFDAF9BE0A400
Authority key identifier: E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/1e836734-8b6b-3ba5-ad69-ae926f0a483e.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        129.121.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:39:95:fb:4a:fd:af:9b:e0:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=e3ed656a-8bdc-4127-9221-cb1a45b0b996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a6:2b:f1:e6:04:e2:9e:d8:31:b9:0a:d7:f1:
                    9d:c8:89:91:89:51:b4:0f:2c:d2:06:d7:75:48:6e:
                    bb:b5:90:29:c9:f5:4a:27:1c:92:57:1c:bd:c8:be:
                    46:18:06:9d:2e:04:09:c6:1b:44:11:4b:3d:29:b1:
                    d7:bb:bf:83:59:0f:a0:17:90:26:b0:d6:4f:fc:19:
                    3a:3b:b3:92:84:6f:33:c7:12:32:56:b8:2d:08:8d:
                    6b:d8:1d:a6:68:0e:05:1c:0a:4a:87:b8:a7:02:32:
                    49:6e:66:23:2c:5f:a8:c3:5b:13:ca:ef:54:96:e0:
                    1a:e7:a9:5d:8c:87:c1:57:6d:88:02:18:be:0a:e2:
                    25:d6:6f:0a:a8:8a:1b:95:ee:75:a6:48:f9:74:89:
                    ca:d5:3a:89:ba:87:37:45:47:5b:13:9b:ec:43:1e:
                    7c:45:a2:e0:e9:41:dc:6f:a7:6a:5b:2f:e6:25:92:
                    3c:1c:7f:6b:9f:ea:48:e2:74:ce:7c:08:07:fe:ef:
                    cc:39:bf:27:ad:58:d3:15:5a:5c:6a:8f:bb:18:0f:
                    dc:d0:3e:a2:92:31:c5:55:11:87:60:af:dd:b1:4f:
                    79:53:8b:2a:28:c3:88:a2:c1:cb:ac:0e:27:f1:ae:
                    a3:11:18:21:19:2d:ec:41:06:4c:e7:dd:85:5b:6f:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0A:2F:29:B1:98:C7:B3:A9:46:A5:FC:4E:9A:C0:B4:CD:98:C1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/1e836734-8b6b-3ba5-ad69-ae926f0a483e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.crl

            X509v3 Authority Key Identifier:
                keyid:E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.121.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:35:02:35:69:29:ff:6c:9b:4a:bb:c4:b6:33:dc:0b:ca:f8:
         dd:59:3f:72:df:e6:30:9a:e9:2e:c6:8f:67:f9:76:ee:a7:c1:
         1e:27:d3:0b:48:3f:ad:73:b2:ae:16:bc:c3:f4:bf:f8:1b:da:
         4b:a3:80:f1:70:8f:88:23:bf:15:11:ee:0a:2b:88:9b:a1:c0:
         dd:76:34:70:5f:f4:6d:5e:24:b8:39:43:06:32:db:74:5b:66:
         33:43:b7:62:c9:88:b4:a3:97:ce:06:5a:ac:a3:27:73:f1:a0:
         2a:35:8d:63:6b:21:fa:46:5e:13:76:a1:ec:9d:4e:e1:47:4b:
         12:78:8d:32:0e:24:a3:fa:67:c1:3a:6d:c6:4c:7e:7e:f5:d2:
         c5:86:ac:85:a8:ec:fc:ec:b2:0c:f5:00:1a:fa:5a:26:68:e2:
         ef:ec:b8:dc:c0:2a:80:11:b9:fd:30:7d:b0:b9:e2:bc:ba:8a:
         6a:dd:c1:68:e5:c9:14:30:d6:dc:da:5d:a9:c0:1f:05:7e:6a:
         f9:dd:a0:95:12:0f:c2:4c:8e:b3:34:f0:72:17:06:b9:f8:c0:
         e9:66:2f:c2:8f:c9:2f:14:d1:5c:0a:56:92:29:9f:f7:69:60:
         87:6e:39:21:73:c7:dc:9e:1e:51:27:bf:3a:2e:b9:4c:68:07:
         05:27:ca:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:19 2024 by rpki-client on console-ams.rpki-client.org