Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa
File:                     6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa (raw, json)
Hash identifier:          TaCFBqF19Aff4QIkaHZAWCks39D102q6c1xFCvmd2E4=
Subject key identifier:   B1:95:0E:31:26:66:31:D3:78:A2:C7:99:2C:D2:8B:EF:74:00:80:BE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FE0CE3319B4F2F3CB51698
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     1225
IP address blocks:        129.250.38.192/27 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:0c:e3:31:9b:4f:2f:3c:b5:16:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=685e4943-ed0d-4d9d-9537-e4a44c815035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:84:7a:37:32:a5:8d:c5:68:af:35:c6:5b:72:
                    56:82:85:e2:c6:f1:ed:10:7d:78:e0:21:a7:32:24:
                    4d:16:5b:43:4b:8b:8b:5f:b1:02:5a:90:db:c8:94:
                    bb:cf:5b:e4:7a:e0:f0:56:bb:89:ef:c1:8a:43:ff:
                    2c:b8:f3:6e:71:4b:8a:44:b7:ae:a9:10:8e:bd:fb:
                    f4:a7:19:0a:76:4f:f2:2f:56:9e:f7:8b:eb:f2:08:
                    f2:52:6a:7e:b7:f1:64:ad:44:ef:ae:b0:3d:6f:5e:
                    04:f1:75:b8:68:11:05:aa:24:72:00:48:a0:ac:37:
                    a3:af:3b:e6:c4:9b:84:4b:f8:34:47:a5:1a:d2:29:
                    51:4f:72:f1:27:24:cf:84:64:b9:a5:c9:36:a2:65:
                    09:07:60:8a:5f:c4:4c:94:c3:12:09:0e:f0:29:ed:
                    d5:6e:46:89:0a:a6:23:40:6d:98:63:fd:9d:e9:cf:
                    b6:2e:ca:78:83:88:93:db:7d:f3:3a:1b:5a:8f:a4:
                    80:77:e3:02:07:57:e3:64:e9:ac:55:d9:8d:b8:71:
                    ca:f6:d7:fc:78:31:59:3d:ab:a0:7e:2f:ca:4b:34:
                    eb:38:b8:d4:a8:1e:09:f7:16:45:33:09:36:84:6e:
                    90:1f:4a:99:b0:b6:e2:45:01:42:0a:ef:31:45:db:
                    7f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:95:0E:31:26:66:31:D3:78:A2:C7:99:2C:D2:8B:EF:74:00:80:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.38.192/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:21:e4:7c:e5:de:1b:56:51:7e:91:dd:52:3b:51:b0:c5:53:
         f7:cf:38:b4:22:44:58:da:de:e1:04:1b:1f:ba:07:a6:54:eb:
         ee:68:22:c4:39:af:4e:54:11:91:f4:72:15:b1:27:21:7b:a2:
         3b:22:5c:aa:0d:ec:24:e2:43:fe:8d:0c:d3:24:ad:17:e3:28:
         6f:86:4e:21:a5:cf:15:4f:bc:67:78:a7:91:72:77:fe:14:62:
         e6:70:55:f7:f0:88:dd:2a:26:20:8b:cc:72:e4:af:3b:92:c4:
         8f:41:d6:d7:32:ad:46:5b:76:46:3b:1e:fa:50:5c:fa:30:91:
         c2:57:d1:43:ac:dd:16:06:ac:f0:07:1f:dc:64:e7:1f:f0:2e:
         cd:0a:32:73:ce:50:de:9a:be:77:37:54:31:57:a6:69:47:b1:
         e5:45:28:80:86:d6:a9:6e:e7:96:0d:33:9f:f8:d5:70:a2:6b:
         99:b8:38:2d:2e:d2:2c:6c:cb:60:48:95:92:35:c8:d9:a4:5e:
         79:7a:49:43:e2:54:09:c5:55:7f:5e:83:9e:33:58:04:65:32:
         98:d3:69:17:c6:70:d2:ee:8c:2c:10:93:52:d5:34:a3:ab:cd:
         f1:81:e4:05:03:50:8f:22:3e:f4:4d:ff:bc:fc:be:f8:ea:0d:
         e5:b4:ec:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:12:49 2024 by rpki-client on console-ams.rpki-client.org