Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bccfccd5-e7cf-3e7b-8cc3-837ffc2d7268.roa
File:                     bccfccd5-e7cf-3e7b-8cc3-837ffc2d7268.roa (raw, json)
Hash identifier:          Om2eGkZW31Dd/KvfcKQ2uAM/MyvnwwWXu4k8kwvjg5U=
Subject key identifier:   C7:0A:6F:ED:FD:85:80:F7:CF:B9:46:32:4A:E4:05:BD:CB:FA:4C:34
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166776A7526
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bccfccd5-e7cf-3e7b-8cc3-837ffc2d7268.roa
Signing time:             Mon 15 Oct 2018 11:09:17 +0000
ROA not before:           Mon 15 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        129.250.113.216/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:6a:75:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=b9a0c0bb-7ed1-4c45-9715-c86b35b8d3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:8a:03:ec:e4:45:47:9a:bf:00:33:e5:a5:
                    33:f7:65:98:ce:d3:36:64:44:ca:1d:ab:6b:12:3f:
                    75:10:55:c3:86:a0:86:0a:66:13:bc:c4:26:69:39:
                    b4:7f:b7:ac:f3:77:47:a6:ce:86:e2:3f:b4:cf:78:
                    22:43:27:ed:92:43:75:e0:82:1c:0b:f9:5c:e5:6c:
                    f1:7b:63:7f:82:03:bc:fd:0d:7b:68:9e:2f:4f:ef:
                    ef:35:e9:56:b0:be:3d:73:e7:4b:b3:86:40:5d:19:
                    ee:22:e9:30:f9:e5:19:35:e5:06:bf:89:97:21:9a:
                    0a:f7:be:57:34:fd:03:1c:17:c4:ca:58:8c:93:c3:
                    29:09:a3:8f:85:e7:87:44:2d:bf:0e:b0:8e:4a:e0:
                    78:a4:93:2e:d6:72:24:db:57:27:e6:c2:c3:bc:3a:
                    bb:d1:b6:81:34:c0:c2:31:23:44:9f:93:7d:39:9f:
                    05:bd:c3:8f:85:45:6c:ec:0c:30:d9:05:a4:e8:7c:
                    8b:63:df:fd:c5:ee:2b:82:e7:75:eb:7e:2e:f9:20:
                    2f:c7:38:19:fb:a0:42:1a:8b:e9:41:f1:a8:f0:51:
                    7f:12:c6:15:ef:75:09:e3:d7:01:7e:13:6b:37:ea:
                    48:1e:87:3d:ca:e2:7c:62:e2:9d:a7:64:51:ac:3c:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0A:6F:ED:FD:85:80:F7:CF:B9:46:32:4A:E4:05:BD:CB:FA:4C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bccfccd5-e7cf-3e7b-8cc3-837ffc2d7268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.216/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:52:b2:7f:eb:25:e5:ff:6e:cc:01:aa:87:70:1e:72:72:e0:
         18:39:18:c7:19:da:ba:c5:da:1c:64:2a:d8:67:0d:2c:b3:f2:
         83:ed:f8:1e:30:10:5e:7c:6d:64:3d:75:32:c2:53:62:10:53:
         07:d2:dc:b2:25:6d:85:bc:3f:31:d3:97:cd:4f:fb:eb:37:67:
         45:f0:2c:33:dc:5c:05:87:d4:6c:24:16:39:9d:73:eb:5a:fa:
         60:a4:d3:62:e0:36:60:2d:37:4e:88:93:ba:a1:19:c0:01:50:
         fd:57:2a:22:38:88:87:e8:e7:f9:6e:b1:c8:79:cb:ee:ed:77:
         62:7a:73:a2:70:31:57:03:64:89:e1:bd:e1:e7:f4:81:55:4f:
         45:fd:01:8e:ab:cd:a4:3c:82:6c:9c:d9:a9:1c:6c:ca:fd:d2:
         2b:cc:ce:d2:c6:92:5e:47:0d:bd:d8:58:dc:b3:b8:a0:54:be:
         98:ee:ba:b2:40:46:f7:46:06:5a:8e:56:c1:d6:f8:8b:2e:af:
         2b:3b:0e:f6:d2:44:1e:e3:ba:a6:42:80:f5:86:d2:6a:1b:08:
         69:70:b3:8f:54:44:04:b6:ad:40:99:d5:1c:6f:1d:21:9f:9b:
         38:af:6c:5d:9f:be:38:39:da:24:55:b2:03:3f:2e:35:7d:de:
         ab:61:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:07 2024 by rpki-client on console-fra.rpki-client.org