Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b745207e-a443-3f74-a1b8-4f34aee41b2e.roa
File:                     b745207e-a443-3f74-a1b8-4f34aee41b2e.roa (raw, json)
Hash identifier:          0HiqKoj6msaEw/rG1z03vqzvXs9cT40Fi9c33CYBWNc=
Subject key identifier:   9B:00:D2:B7:86:64:2C:D3:40:01:1E:44:42:40:93:39:A0:2F:DC:19
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664245E740
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b745207e-a443-3f74-a1b8-4f34aee41b2e.roa
Signing time:             Fri 05 Oct 2018 03:29:29 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        128.241.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:45:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=a3215ba5-839f-477d-913d-d11a55f0f218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:a8:a3:0d:a1:b8:07:78:0b:3e:1b:28:01:
                    d0:5d:85:71:fe:01:21:75:b5:ff:af:f0:d7:fc:c6:
                    11:89:da:c2:a0:1e:cf:83:39:0f:38:f6:07:17:3a:
                    7c:73:a2:4f:7f:bd:d8:af:c5:b6:e5:74:34:61:ce:
                    2a:a2:87:eb:64:9e:4a:ea:3c:f5:74:4f:21:de:f5:
                    bf:d1:eb:52:4c:e9:45:db:b2:18:60:71:59:2f:bb:
                    9f:32:b4:92:9c:44:72:9b:53:10:1a:4f:f0:b3:f3:
                    11:f0:65:27:b3:0f:32:00:e8:b7:8a:2f:64:35:77:
                    a9:26:e9:1b:44:cb:7d:bd:22:2f:d2:4d:b0:7e:8a:
                    01:70:63:38:c6:52:d8:ed:16:a1:88:db:f6:fb:bc:
                    5a:33:5d:01:a9:bc:9b:7e:df:d6:7e:e3:9b:d0:d1:
                    e7:8b:ec:bd:d0:2f:4a:0f:fc:19:8e:eb:1a:0d:2c:
                    ae:94:78:5b:27:85:04:f8:8d:6f:4f:14:d6:60:7e:
                    b1:50:ec:2a:12:2b:41:9e:87:a4:f5:88:1d:e4:75:
                    b7:14:89:ad:0a:7f:bb:8a:3d:9b:3f:48:eb:c1:99:
                    d1:97:70:0a:09:69:4b:ce:98:11:aa:20:67:33:89:
                    6a:9e:df:c0:d5:45:4c:87:1f:2f:36:23:64:ab:66:
                    bd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:00:D2:B7:86:64:2C:D3:40:01:1E:44:42:40:93:39:A0:2F:DC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b745207e-a443-3f74-a1b8-4f34aee41b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:07:24:ad:30:a1:07:47:a2:f2:f2:70:f4:cd:c8:d4:33:38:
         6f:7e:d3:00:eb:13:0e:c5:37:20:65:2f:5b:74:e9:3a:10:2c:
         dd:b9:6e:59:7f:a1:3c:04:01:51:2b:c6:a6:05:fc:52:02:8f:
         8a:7e:42:2d:e1:6c:02:d4:7c:60:24:c7:3f:9b:d3:f0:a7:43:
         96:42:98:39:fd:21:5d:ab:f0:e3:e7:35:ef:b5:87:e5:d9:49:
         86:f1:64:eb:17:be:4b:e7:de:70:91:87:7b:94:d4:f0:22:74:
         0f:40:27:27:af:f3:3d:d9:40:45:32:78:35:fe:d5:73:12:66:
         23:5f:bd:0d:6f:ad:d4:97:4d:db:7f:34:a3:fc:f9:3a:a2:03:
         c9:1c:b0:41:2e:6a:62:d7:c8:55:8f:c1:17:d7:e1:93:6a:b9:
         33:1d:3a:89:0b:07:de:61:b5:ac:38:0a:fe:31:65:3f:a2:84:
         ad:96:f7:bb:c1:03:ea:6c:e6:bc:ef:2e:7d:00:03:cc:f6:74:
         44:34:10:46:0b:be:37:42:1b:d2:84:e8:8a:68:22:8d:08:1a:
         68:2d:cf:b6:7f:6c:e1:fc:47:2a:b5:bf:ec:8c:e4:1b:69:ef:
         14:88:5f:5d:32:c6:76:4d:f5:93:02:98:65:ec:89:13:0a:01:
         9f:ca:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:06 2024 by rpki-client on console-fra.rpki-client.org