Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa
File:                     d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa (raw, json)
Hash identifier:          Ob3xKcOYjbit6qzx3Fybo6ma6s06hzaEkIeVYHrQPFI=
Subject key identifier:   92:F8:F2:6F:B5:63:0A:D5:23:AD:26:60:71:D9:D0:CE:3E:15:83:89
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475EA6260509D16215E9A05C80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     2914
IP address blocks:        129.250.63.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:26:05:09:d1:62:15:e9:a0:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=fe0b4fa5-df0b-4640-a235-9c3534a358dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:c0:f5:c8:04:74:3a:2c:d5:68:25:7b:e9:
                    d1:51:b4:6c:01:cc:7f:36:b8:1b:53:d0:9d:5b:73:
                    5b:4f:34:ac:a5:42:0f:97:d6:24:34:69:e1:4e:35:
                    d9:d6:9e:f8:9c:5d:31:8f:7c:c1:1f:af:70:23:dc:
                    9c:c1:ec:4f:30:11:35:99:3b:21:0c:b4:7d:65:4c:
                    b5:2b:05:dd:ec:9c:1b:e1:fd:48:f8:e1:81:17:c3:
                    60:6b:bb:d0:bc:9a:e3:19:b5:2a:ba:01:3f:af:69:
                    3f:95:e1:2c:24:15:0c:42:1c:b2:b1:a8:dc:f5:65:
                    58:66:79:4f:d4:62:5a:ce:3b:eb:be:5a:53:9d:d5:
                    3a:fd:f7:35:03:79:f3:d6:4d:12:92:c9:c5:44:97:
                    65:2d:2b:d4:72:5d:6d:ff:0c:6c:ce:36:a1:69:0a:
                    0c:62:ce:75:56:82:49:04:f5:d0:ce:ab:26:69:91:
                    c1:d6:47:d4:a5:5d:d7:a9:45:b2:5c:f3:d4:8c:95:
                    73:04:1c:9c:2a:91:cf:41:22:10:22:22:63:fd:90:
                    0f:ed:8a:47:f2:4b:ae:5e:a5:65:14:aa:73:b6:6f:
                    84:f3:9c:98:89:0f:3b:42:99:ac:a7:18:4b:c3:cf:
                    66:f9:ca:1c:32:63:85:9a:d7:dd:a8:fb:cf:f3:c0:
                    23:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:F2:6F:B5:63:0A:D5:23:AD:26:60:71:D9:D0:CE:3E:15:83:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:f8:8b:09:82:59:20:41:5a:46:41:78:44:1e:f4:38:f1:
         b2:bd:69:07:ed:93:d9:20:df:8a:7e:6b:fc:8f:60:ba:36:a2:
         74:c2:6b:c7:be:b5:05:09:19:86:d7:b9:45:cb:6e:c1:60:be:
         c8:fc:56:d1:44:4e:a9:01:d5:7b:0a:38:c1:29:1b:80:ee:e4:
         8a:2a:2d:5a:6c:c6:a0:a2:6a:3e:8f:ef:67:19:eb:e0:a0:3b:
         9b:0c:e1:db:ab:a2:a1:93:33:5b:85:19:7b:71:31:7c:63:f3:
         22:a8:03:24:a0:cc:c8:68:94:b7:7f:3f:35:92:18:43:6e:1a:
         e1:48:52:bf:d3:cd:24:85:9a:d5:f4:c4:95:5c:3b:92:a5:f2:
         39:26:1f:af:b3:38:e1:c7:f1:a2:1d:7e:33:2e:a9:67:d0:87:
         bd:78:a1:4e:10:d2:b4:0a:f7:df:a4:55:1c:ee:b8:7f:31:06:
         24:ea:cb:ac:af:7e:28:8f:8b:0d:0e:47:e9:70:e0:15:1e:40:
         74:a6:bd:98:cd:bc:e2:82:66:3d:04:5a:dd:8b:6f:53:1c:e2:
         5e:65:a3:b9:3f:a5:56:f5:f8:d3:bb:33:24:7a:dc:85:26:99:
         f7:08:91:31:17:7b:2d:77:63:58:ab:51:66:16:b4:1a:ae:81:
         3e:14:23:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepiYFCdFiFemgXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk
ZmUwYjRmYTUtZGYwYi00NjQwLWEyMzUtOWMzNTM0YTM1OGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXrA9cgEdDos1Wgle+nRUbRsAcx/NrgbU9Cd
W3NbTzSspUIPl9YkNGnhTjXZ1p74nF0xj3zBH69wI9ycwexPMBE1mTshDLR9ZUy1
KwXd7Jwb4f1I+OGBF8Nga7vQvJrjGbUqugE/r2k/leEsJBUMQhyysajc9WVYZnlP
1GJazjvrvlpTndU6/fc1A3nz1k0SksnFRJdlLSvUcl1t/wxszjahaQoMYs51VoJJ
BPXQzqsmaZHB1kfUpV3XqUWyXPPUjJVzBBycKpHPQSIQIiJj/ZAP7YpH8kuuXqVl
FKpztm+E85yYiQ87QpmspxhLw89m+cocMmOFmtfdqPvP88AjxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJL48m+1YwrVI60mYHHZ0M4+FYOJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDgwMGYzNzQtZGM4Zi0z
OWVmLWFlMzAtZmM4YzJiYWViMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfo/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8H+IsJglkgQVpGQXhEHvQ48bK9aQftk9kg34p+a/yPYLo2onTCa8e+
tQUJGYbXuUXLbsFgvsj8VtFETqkB1XsKOMEpG4Du5IoqLVpsxqCiaj6P72cZ6+Cg
O5sM4duroqGTM1uFGXtxMXxj8yKoAySgzMholLd/PzWSGENuGuFIUr/TzSSFmtX0
xJVcO5Kl8jkmH6+zOOHH8aIdfjMuqWfQh714oU4Q0rQK99+kVRzuuH8xBiTqy6yv
fiiPiw0OR+lw4BUeQHSmvZjNvOKCZj0EWt2Lb1Mc4l5lo7k/pVb1+NO7MyR63IUm
mfcIkTEXey13Y1irUWYWtBqugT4UIzs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:18 2024 by rpki-client on console-ams.rpki-client.org