Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a0bde9f-6fde-3185-a30b-c0bfdf01ae16.roa
File:                     8a0bde9f-6fde-3185-a30b-c0bfdf01ae16.roa (raw, json)
Hash identifier:          71R1WdpbiI4eRVrSFnLKY0BXRfZUPFjM0DhJuzLwS6I=
Subject key identifier:   70:04:4D:5B:10:BB:E8:2B:2B:04:EB:3D:24:C2:44:84:F1:C1:77:F5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664234BA48
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a0bde9f-6fde-3185-a30b-c0bfdf01ae16.roa
Signing time:             Fri 05 Oct 2018 03:10:43 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     3573
IP address blocks:        128.121.4.32/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:34:ba:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=950d13da-2363-4948-81cf-d51dc2f487f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:57:10:ad:92:83:4f:64:aa:a0:1c:22:8e:
                    0c:5a:90:77:4f:7f:74:e4:00:78:34:6b:b9:b9:30:
                    0a:84:2c:8e:a9:68:d5:d5:21:0c:bf:e5:4f:29:45:
                    64:1f:f0:f8:8d:9b:d6:87:50:f0:3e:71:a3:fb:eb:
                    1c:8b:b5:f3:f6:33:79:27:b1:f3:a5:97:0e:67:f4:
                    2b:d4:da:c7:47:49:6f:17:12:d0:16:dc:a6:78:04:
                    c8:f1:b5:52:ea:2f:a7:27:27:3d:53:fe:04:b9:64:
                    a7:72:e9:f4:36:b2:05:dd:39:df:b8:59:9a:9f:af:
                    d9:f1:84:4d:ba:7e:59:40:ae:85:33:d6:1b:e3:e3:
                    fa:79:00:e4:ea:83:c8:6f:70:0e:d5:03:99:87:75:
                    a1:14:c8:59:9e:20:52:7a:93:36:0d:5b:79:da:8b:
                    c0:86:47:4a:b4:c8:c9:d7:42:48:9e:05:e2:d9:fa:
                    6c:2f:08:27:0f:cb:c2:4d:05:3a:f0:7c:7e:20:29:
                    2c:6d:fc:3a:5d:48:15:43:3b:a0:da:5c:46:91:05:
                    7d:7f:46:e9:4b:18:04:fd:ec:f0:53:6d:fb:33:06:
                    9d:32:23:70:32:0e:c6:eb:95:25:19:eb:18:2e:84:
                    aa:d4:b2:4f:81:fd:22:e3:e4:83:fa:97:82:42:1b:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:04:4D:5B:10:BB:E8:2B:2B:04:EB:3D:24:C2:44:84:F1:C1:77:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a0bde9f-6fde-3185-a30b-c0bfdf01ae16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.4.32/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:52:39:b8:3f:24:94:95:11:3a:a1:46:4f:3d:1c:f4:83:f5:
         0d:ae:53:c1:bc:e5:fc:42:91:7f:53:0d:c8:4b:d8:67:6d:37:
         52:e9:8e:f6:53:ef:96:e0:50:13:0c:01:0c:9f:03:af:6e:45:
         ee:55:c3:7a:e5:ee:05:27:94:30:e1:11:a2:11:a7:b9:15:eb:
         ed:1b:23:28:e1:a5:a2:8a:5e:4a:72:56:43:46:8d:3a:da:54:
         7e:30:68:68:ef:03:57:e5:6b:21:ba:5a:9d:0a:8e:76:1e:ee:
         f6:22:73:eb:68:c0:de:26:82:c9:eb:93:27:b9:37:66:d0:d5:
         31:a8:65:df:a9:ae:72:5f:ca:c0:69:d5:d6:22:0d:81:eb:0e:
         a5:56:0f:ab:7e:5d:d2:67:57:55:48:19:45:03:27:fe:7b:61:
         3a:a6:21:a1:95:10:e2:7f:65:56:be:41:62:fd:d0:8f:fc:47:
         33:95:42:4d:10:bc:84:ef:73:d9:6e:cb:e8:64:d6:6f:a8:71:
         68:76:93:9f:a0:42:9a:7b:9d:d6:01:6d:2c:50:2e:d8:ff:47:
         13:48:bd:b3:e7:d1:d3:60:d9:bd:01:5a:10:14:26:e9:d5:50:
         5f:df:9c:65:6b:31:3e:fe:46:e5:98:00:70:06:6e:16:30:d9:
         a6:49:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:04 2024 by rpki-client on console-fra.rpki-client.org