Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa
File:                     27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa (raw, json)
Hash identifier:          jt+8e+A1s263Sd1rC9E3pOdILOpGztVAOXeWRQLW8ZM=
Subject key identifier:   40:07:62:A2:CF:F8:04:CA:7A:61:B5:20:71:BB:85:92:44:D3:72:7F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285844BF5A5C10AA053ECDB7726E50
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa
Signing time:             Thu 01 Feb 2024 14:00:30 +0000
ROA not before:           Thu 01 Feb 2024 14:00:30 +0000
ROA not after:            Wed 01 May 2024 13:00:30 +0000
asID:                     2914
IP address blocks:        129.250.15.0/24 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bf:5a:5c:10:aa:05:3e:cd:b7:72:6e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Feb  1 14:00:30 2024 GMT
            Not After : May  1 13:00:30 2024 GMT
        Subject: CN=aced66fb-720d-4cc2-9f8d-62b98c64a26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:e6:3a:ca:62:6f:9e:8d:59:d2:6d:38:2f:
                    0e:d8:c7:5b:76:52:7a:44:f5:4e:29:d7:43:97:8d:
                    61:b6:80:9a:2a:07:11:55:97:f1:7a:74:c1:8a:ae:
                    a0:4f:f3:4d:21:0c:1f:00:81:79:b2:e2:57:23:9b:
                    65:39:48:12:62:f1:6e:75:11:d6:c6:f2:be:75:f4:
                    1b:63:56:d3:1a:c3:c7:94:7d:34:bf:ef:7d:d6:9d:
                    52:1a:5f:07:f5:12:9c:7b:76:22:90:d3:89:44:35:
                    40:88:92:2d:f2:1f:29:7b:29:99:60:a5:b1:27:f9:
                    4e:29:cb:48:64:84:8e:a7:d5:9d:d9:40:41:92:94:
                    09:5d:6d:b5:f3:9a:ea:6c:8e:51:55:f3:d3:03:a6:
                    d2:81:4e:47:d5:7b:ec:23:a1:ca:01:e4:49:c3:3a:
                    1f:96:31:9a:79:55:92:60:9a:a6:b6:47:6b:9f:af:
                    18:9a:cf:c0:25:27:9d:4b:43:6b:af:b7:41:46:3e:
                    09:1d:65:48:09:b6:d2:5b:fc:6b:3b:fa:ff:f8:ed:
                    de:13:72:6c:4d:b7:1c:68:13:f1:01:54:de:d8:bf:
                    34:83:6f:db:c0:2f:74:9b:bf:fc:0b:60:22:54:78:
                    e2:c2:de:af:73:15:e4:bd:a6:cc:dc:6d:d1:5a:6e:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:07:62:A2:CF:F8:04:CA:7A:61:B5:20:71:BB:85:92:44:D3:72:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:50:00:57:40:78:e3:12:9e:2e:f6:7c:b1:6e:71:7c:51:e9:
         7b:99:f7:e7:66:cc:f3:c5:92:14:ee:9b:89:fb:ed:7e:43:07:
         00:fc:00:90:01:4b:6e:3c:57:88:58:17:2c:03:95:62:33:34:
         35:b3:49:2b:a4:75:0a:36:3d:19:75:05:e5:15:22:50:55:b3:
         4a:de:2f:2e:bf:60:57:a7:97:f0:f4:5b:80:6b:66:39:c1:ca:
         ed:cc:a4:09:1c:6a:27:9d:5c:4d:58:82:96:99:76:3f:d9:6a:
         dd:e0:e5:00:48:64:32:a0:13:d6:46:9f:61:cc:c3:63:01:28:
         59:a1:ff:ab:be:45:c6:9b:64:4b:26:85:b8:ca:e5:f7:fe:29:
         06:1e:23:f3:76:9c:62:e5:f4:77:8f:5e:13:4f:87:1e:97:e8:
         a5:21:ba:ae:aa:7a:f2:f3:9e:07:07:a2:13:a1:2e:60:71:9d:
         0b:25:2d:1a:9c:fa:32:8c:10:8d:8b:6b:99:47:70:2e:64:8a:
         8f:29:08:f3:40:2b:2d:1f:ee:f2:c8:15:a9:28:b4:96:02:d4:
         5e:53:39:52:8d:56:62:69:82:b4:26:08:80:d5:79:5e:6b:89:
         70:7f:3d:f4:71:e5:79:f1:4e:a7:73:4f:a2:9e:4a:a2:be:5c:
         f9:bb:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 11:29:42 2024 by rpki-client on console-ams.rpki-client.org