Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6a67ffbb-b5aa-3d89-8caf-ac582be42297.roa
File:                     6a67ffbb-b5aa-3d89-8caf-ac582be42297.roa (raw, json)
Hash identifier:          Sx7mk+F+A8VAJRo0VKei+lKolosJjt+J5gUla2oB9Mw=
Subject key identifier:   44:5E:3A:92:96:80:76:63:67:8C:A4:1E:62:A9:FC:59:03:4F:50:94
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FA12F38C5
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6a67ffbb-b5aa-3d89-8caf-ac582be42297.roa
Signing time:             Mon 13 Jan 2020 23:13:44 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     7019
IP address blocks:        129.250.128.0/27 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:a1:2f:38:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=8521a049-0ec5-4f9d-8765-24dcd235e63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:54:a2:d8:8b:30:13:4c:0b:4e:3a:88:9c:
                    62:55:39:1a:4e:1f:76:c5:52:23:30:cc:ef:1d:2b:
                    45:b5:45:c9:9c:7b:6c:fb:b0:d2:7a:89:42:2e:b7:
                    d7:ea:f9:95:ac:cf:70:5d:ac:15:e1:73:8b:80:e0:
                    05:27:ac:25:0d:d8:5f:b7:fc:a0:a0:f2:28:c1:48:
                    0a:d1:f1:90:71:cb:7e:f6:54:62:b5:f8:f8:3d:63:
                    e4:06:48:fd:07:e3:54:69:3a:e0:95:a8:b9:be:2c:
                    d3:53:25:e3:65:e5:35:ac:91:36:64:68:d8:16:bb:
                    c2:2d:27:c9:d3:85:89:b2:6f:8b:86:ca:af:14:8d:
                    9b:28:48:49:18:6c:e1:d5:24:75:83:12:02:06:50:
                    62:c0:a2:6e:69:79:c2:8b:2d:f5:4b:78:ad:61:5a:
                    f1:26:4f:97:82:47:ba:03:a7:dd:49:03:09:49:61:
                    20:61:da:20:74:85:08:76:0b:2c:62:0b:4a:a4:c2:
                    b0:ed:d1:1b:78:be:d4:c4:5e:de:5e:a6:a3:b6:39:
                    bd:10:c4:cd:0c:4c:b6:23:0b:f9:1c:64:19:bd:08:
                    10:91:bc:c5:2d:83:07:d6:54:6b:78:84:e7:4b:ad:
                    aa:e0:b3:9f:22:a3:53:59:b9:0e:43:61:be:56:dc:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:3A:92:96:80:76:63:67:8C:A4:1E:62:A9:FC:59:03:4F:50:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6a67ffbb-b5aa-3d89-8caf-ac582be42297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.128.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:32:3d:cb:96:a2:eb:54:82:3a:35:b9:67:28:f1:b2:b2:cb:
         e0:89:7f:aa:10:ee:a0:9d:8d:f5:13:0b:73:ea:42:2e:05:9b:
         ae:69:35:a0:4d:c7:4a:5b:b1:f7:02:d8:15:6d:bc:4c:c2:07:
         e3:39:a1:e0:58:01:62:6b:63:d9:32:48:8c:b4:ca:22:31:e3:
         38:39:7f:ec:e3:79:c5:30:5f:19:5b:4d:71:1f:36:ae:74:23:
         dc:b8:8f:ff:e3:77:d1:71:36:6b:6e:71:a4:6d:db:5f:c0:30:
         a0:7d:04:cb:60:d2:c1:75:7e:a5:0c:37:63:d0:7c:0b:13:dd:
         d2:34:5e:73:13:46:9f:44:d2:02:f7:49:33:5c:b6:58:1e:5b:
         ff:28:5a:60:2d:2a:7c:47:a2:57:5f:96:52:d0:fb:ec:ef:56:
         d3:d5:b1:d0:f2:1c:5e:69:9a:2d:b7:9c:0b:ce:42:8e:eb:d6:
         82:7e:5a:a9:c0:f0:4d:fe:7b:84:0d:3f:7c:05:ac:ba:70:50:
         eb:4c:33:47:04:36:fe:9e:64:17:fa:39:f6:0d:f8:12:9c:73:
         24:fd:04:b3:9c:79:d8:c9:86:37:bd:a8:bf:0b:f1:16:13:4b:
         6b:c6:19:d7:25:1d:16:56:d5:3a:27:07:2d:db:34:9f:28:bf:
         3f:e6:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:02 2024 by rpki-client on console-fra.rpki-client.org