Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d1778909-636a-34cd-9058-a31e640179df.roa
File:                     d1778909-636a-34cd-9058-a31e640179df.roa (raw, json)
Hash identifier:          FF04/WrcaRTIjOWp6D0/RtT7OC8Ydd6VwnpcGcmB+94=
Subject key identifier:   51:6F:1B:01:A0:9C:61:CB:FB:D9:33:DB:4D:9A:C1:A9:A7:7E:E5:66
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475EA6256EE6814363C72A3780
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d1778909-636a-34cd-9058-a31e640179df.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     2914
IP address blocks:        129.250.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:25:6e:e6:81:43:63:c7:2a:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=9957bac7-7e2f-47d0-97d4-4f543ed43933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:31:a9:69:c8:04:4b:eb:11:a2:33:00:91:
                    1b:13:61:82:f2:fc:df:2d:fc:43:89:a2:09:38:1f:
                    5a:71:a5:ad:cb:8c:5e:26:4f:df:04:67:89:ff:81:
                    73:9d:ce:0e:f9:1c:36:e7:a0:83:ca:90:6e:8f:46:
                    ee:94:07:83:7a:b9:52:f7:25:5d:7a:1e:52:d4:77:
                    fa:77:9c:e4:46:92:a9:d2:29:c0:10:18:40:d0:76:
                    ef:18:fc:a0:7c:50:61:2d:b7:09:89:5b:56:e6:1a:
                    55:93:7e:b3:ff:e7:98:9e:1b:62:ef:cb:94:8c:a6:
                    6c:cc:19:6b:65:7a:db:79:33:7f:3b:0a:7a:dd:e7:
                    89:4d:7f:35:b0:51:2e:c3:fb:8e:07:b2:c5:96:1f:
                    d0:f6:b3:0e:76:ca:db:15:eb:ae:a0:23:04:fe:61:
                    e3:f4:77:c7:88:70:b3:d7:df:c1:43:58:01:76:3e:
                    04:73:e6:e2:fc:2b:e7:0e:a7:ba:ab:a9:09:14:7d:
                    29:24:9c:e6:eb:23:29:c9:3f:11:c3:6d:95:a5:25:
                    2a:a6:d7:68:0e:aa:42:6c:ce:71:8d:cd:e5:b5:65:
                    f1:aa:c3:c5:95:03:03:a8:0c:a9:5e:72:66:b9:5e:
                    ac:df:47:98:8c:15:ed:88:b4:e7:b4:86:db:56:db:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6F:1B:01:A0:9C:61:CB:FB:D9:33:DB:4D:9A:C1:A9:A7:7E:E5:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d1778909-636a-34cd-9058-a31e640179df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ae:7a:b7:23:9a:78:46:ec:de:0d:95:b0:19:c0:45:f9:cb:
         03:09:27:84:d8:00:22:3f:0b:84:62:9c:d9:92:16:0a:25:c5:
         cf:2a:8f:09:88:a4:76:e9:ad:a5:11:b3:4c:f8:13:74:12:26:
         69:b4:30:21:c1:0e:3f:e1:8d:83:07:4d:16:70:b6:01:24:9f:
         6b:07:8f:be:0d:36:f1:f7:0c:5a:b0:7e:52:09:c3:b4:38:e4:
         cc:17:93:23:52:2e:9a:c6:5b:f9:fe:dc:c7:7d:cc:e6:d0:57:
         7e:31:58:3c:52:1b:91:f6:26:94:34:4b:d7:70:b6:29:7f:ab:
         b6:d8:12:2e:bd:d9:4b:57:c9:12:85:bb:cf:84:6b:b7:90:12:
         1c:93:25:59:07:3c:e9:19:17:c5:16:51:87:92:ad:b2:26:9b:
         e5:ef:60:65:cf:e3:1a:bb:41:a8:5c:a2:95:f3:b8:25:5c:a4:
         51:ba:dd:85:cd:55:bd:9c:9c:f4:96:f3:66:29:e3:c9:c7:34:
         02:69:b0:d5:db:d6:79:1f:6b:0f:3a:f7:af:79:7c:20:99:e2:
         57:f6:ef:ce:f8:14:d9:b2:5d:54:51:dc:e6:83:3c:f5:bf:af:
         e6:ac:78:c9:1e:05:36:49:84:27:53:a5:3c:9f:22:bd:64:61:
         46:45:e3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:18 2024 by rpki-client on console-ams.rpki-client.org