Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/654db28b-a3f9-3007-ba02-58ba323c3937.roa
File:                     654db28b-a3f9-3007-ba02-58ba323c3937.roa (raw, json)
Hash identifier:          luTm+2XPsi4XW1BgV0tNoi4iokny0YFsBZpyIMgaEmY=
Subject key identifier:   1D:D4:A3:4E:11:2F:48:66:6A:9A:55:9C:D8:79:13:53:2C:18:E9:85
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858491D717CF8B6FC296750B8E200
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/654db28b-a3f9-3007-ba02-58ba323c3937.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     2914
IP address blocks:        129.250.60.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:7c:f8:b6:fc:29:67:50:b8:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=87eba31e-2486-4b13-a82a-973e0d0209b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:76:d7:38:ab:99:73:dc:55:49:79:fe:a7:
                    0d:84:d3:c5:60:5c:c7:57:b1:96:ea:a9:39:20:db:
                    d4:1c:fe:f0:e7:b4:3e:6b:27:3f:61:84:45:11:78:
                    d9:02:13:78:74:90:56:f2:a1:e1:00:bd:86:d1:b9:
                    15:74:89:4b:23:f7:e2:c5:58:44:f7:ef:b2:ce:95:
                    9c:fc:4e:9d:31:85:3c:6f:73:ac:3d:9e:e8:8c:c6:
                    ec:d4:b7:12:28:b4:c0:be:54:9b:c7:55:08:04:db:
                    d6:76:f5:b2:98:d5:4c:7c:0b:ac:a9:7c:39:30:c8:
                    6b:07:c1:d0:4c:f4:6c:e6:2e:11:8c:13:12:6a:bb:
                    b9:18:a9:9c:7d:f2:fb:20:82:cb:fc:12:ce:01:33:
                    a7:4a:4b:67:78:4f:9e:17:d2:5e:ba:a7:d1:a2:ff:
                    d5:6d:20:e7:33:93:44:70:07:be:23:da:0c:cf:79:
                    25:bc:e5:ac:6d:4a:4e:c6:63:61:ed:03:df:e8:3e:
                    56:52:11:49:86:57:b6:0f:39:13:10:e7:3b:84:f1:
                    69:dd:54:3c:b5:46:c0:b7:0a:f9:e5:97:fb:61:25:
                    c5:94:50:72:54:08:21:64:76:15:85:18:4f:f2:13:
                    ce:44:44:3f:cb:55:e5:92:d9:8a:cb:15:c3:ec:ac:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D4:A3:4E:11:2F:48:66:6A:9A:55:9C:D8:79:13:53:2C:18:E9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/654db28b-a3f9-3007-ba02-58ba323c3937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:b4:5a:45:74:ff:7d:8a:8d:29:24:c8:33:c2:a0:fb:4f:
         51:e8:cc:c6:91:b1:96:b5:5e:85:f0:68:ce:d1:b1:e5:cd:8e:
         94:1d:a8:3d:4e:00:41:03:cd:cc:70:c4:4a:76:e1:fb:cd:27:
         23:f6:41:b5:bf:13:7c:19:af:0f:12:45:4f:98:7a:0c:92:60:
         b4:02:9a:b0:13:0a:14:86:36:fa:b5:c7:89:78:d6:f6:3a:c3:
         9a:b0:e7:80:2d:c8:33:85:95:d7:59:9c:82:66:4e:0e:fb:1b:
         c7:98:6a:42:b0:f1:93:d3:ae:54:89:d5:fd:c5:04:31:c2:d9:
         d9:ed:3b:89:36:58:6a:bc:af:0f:97:44:af:53:cd:a1:e9:27:
         8f:6d:da:ba:8e:c0:e0:01:ac:d0:00:bf:12:0c:b7:9e:c6:d3:
         cf:55:30:ae:03:da:70:74:58:ce:f1:55:ea:b5:f6:1c:24:92:
         a3:0b:16:35:6a:82:7d:3c:4f:a4:8a:20:35:a0:9d:77:0b:8a:
         bd:ae:37:c3:50:4f:9e:10:0a:a7:6f:6a:c7:bd:2d:95:a7:24:
         2c:bd:99:80:da:5e:69:ab:8a:48:2e:81:e1:97:fb:07:a2:fc:
         47:ed:57:cc:58:9e:60:58:4c:3a:ab:c4:dd:68:f3:14:ad:5b:
         08:9d:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:10 2025 by rpki-client