Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa
File:                     0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa (raw, json)
Hash identifier:          7w1VIJEMbf6W2XnjDi/Az8msYp7B56CCFxnXJHkYkw4=
Subject key identifier:   F2:51:2F:D9:5B:E6:6F:18:A6:0C:F3:66:F1:B1:D9:50:8B:8F:6F:7B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FE0CD262F3C518BD1F9515
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     1225
IP address blocks:        129.250.35.248/29 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:0c:d2:62:f3:c5:18:bd:1f:95:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=2ef77ee7-b2e2-46ff-929c-7528935c9f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:54:6a:e7:a3:33:38:be:f9:00:10:a9:35:
                    88:2b:94:a9:01:6a:ce:e9:c1:f6:6e:35:bf:36:29:
                    70:a9:2b:0e:5d:68:42:19:f1:f0:cb:00:8d:ec:aa:
                    a3:fb:3e:69:a6:39:53:79:48:cd:3a:31:8d:53:95:
                    d1:98:32:62:c8:18:24:5a:31:43:7f:c4:26:ce:a1:
                    e5:b7:bf:25:e6:89:70:1b:9e:c2:23:73:4a:38:7c:
                    5f:90:25:86:5c:82:db:3f:ab:0c:41:05:8e:6e:e5:
                    a9:6d:29:9f:66:39:f5:a0:94:59:5f:92:f2:cd:24:
                    d1:c1:b8:9a:98:11:d1:f2:d7:45:15:48:f6:0a:d3:
                    68:42:c2:47:90:bb:ae:3b:76:93:7d:00:92:8e:6d:
                    81:b7:d0:89:0e:d6:84:77:26:aa:d7:9a:9e:7e:e0:
                    6e:e5:a3:92:14:5d:b1:ca:7a:c6:6d:87:b9:6f:f2:
                    18:2c:6f:1b:dd:cf:52:53:d6:43:bb:20:f8:c2:60:
                    0e:e0:45:02:6e:35:69:33:aa:f2:5d:dd:ff:00:25:
                    e2:75:ed:ba:06:3d:c4:90:ae:c3:1a:ca:e3:89:c7:
                    c9:46:6b:3f:da:53:a6:22:a3:e3:d8:33:23:14:94:
                    da:8f:e1:17:65:85:d5:6a:cc:4b:6d:f2:43:27:3e:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:51:2F:D9:5B:E6:6F:18:A6:0C:F3:66:F1:B1:D9:50:8B:8F:6F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.35.248/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ee:10:97:a0:d3:65:70:1d:6a:b7:16:60:5f:34:dd:bf:c9:
         1f:c6:65:c9:e3:22:26:f7:75:56:bb:ca:7b:9d:f4:50:e1:68:
         f5:f1:a7:c6:8a:1a:62:10:36:21:1f:10:35:23:06:2e:1c:a1:
         11:ae:24:bc:fd:90:3a:bf:cb:d0:59:a5:dd:85:7d:8f:b0:8a:
         aa:93:35:bc:c6:66:b1:af:b0:7d:8c:15:24:09:c1:4a:f3:df:
         83:61:5c:e5:01:f3:1c:ea:66:8c:0e:08:47:03:bd:71:fc:09:
         87:0f:c7:c2:47:84:28:77:1a:72:50:7e:fc:a2:f1:75:7c:03:
         4e:e8:28:d5:15:2f:c1:99:54:86:c4:af:bd:3b:51:e9:71:aa:
         1a:d2:49:86:f8:35:f7:b0:6d:0a:9f:9f:6c:b5:c2:ef:f9:47:
         b7:f6:f7:21:62:14:7b:2b:99:c2:46:0a:e9:e8:ba:a3:80:fe:
         0a:51:98:2e:62:a6:77:5a:8b:b6:21:13:65:72:4a:83:c8:f4:
         6e:00:84:d1:69:b7:2a:f1:33:98:20:2c:56:74:7f:5f:4b:ba:
         5d:80:b1:12:d7:d8:4e:e3:57:8b:ab:c3:2d:c7:bc:a1:63:f7:
         b3:10:74:08:63:65:84:71:99:2e:d1:a7:20:e9:7a:17:8d:b8:
         f9:56:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:48:32 2024 by rpki-client on console-fra.rpki-client.org