Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa
File:                     fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa (raw, json)
Hash identifier:          6bP7L0+2HUapTEXmPHqzcTX2O/BMIJZiIkHfr8JErJE=
Subject key identifier:   AA:A6:77:94:5A:DE:E4:56:A7:70:33:52:4C:B6:EC:DF:1A:D2:BA:C5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FE0CC08769F33691403280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     1225
IP address blocks:        129.250.35.224/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:0c:c0:87:69:f3:36:91:40:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=8a535991-4405-4090-8187-dc520f331b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8f:d6:00:19:64:80:9d:93:3a:d9:74:cb:97:
                    21:c6:73:a1:8b:89:d2:13:f6:7a:4c:62:66:fc:41:
                    12:79:52:86:7d:8c:d0:8f:33:9f:29:57:44:bd:c2:
                    a0:2f:52:a4:52:4e:b8:0b:16:2a:ee:39:9c:bf:12:
                    4c:27:90:e7:fc:e9:20:23:74:a3:d6:32:07:f2:cb:
                    b7:92:d7:dc:eb:10:f6:82:a7:d4:32:93:ee:8e:3e:
                    77:2e:55:1b:7c:e6:f5:8a:86:7e:fb:db:a3:35:03:
                    dc:f3:cf:ca:19:5c:45:a2:27:a3:fe:89:9d:a2:12:
                    65:34:10:14:6d:c0:39:b7:6f:2a:c0:57:a7:50:19:
                    8e:8f:68:84:35:fb:33:89:a7:16:a0:a5:0e:9a:5c:
                    b1:2a:0e:f6:28:76:ce:db:56:9c:94:a3:9c:a3:fb:
                    9b:6a:65:af:b8:6c:4d:44:82:e3:c2:3e:78:70:94:
                    16:c0:bd:05:51:61:b3:6a:42:9f:4c:b6:6a:80:1a:
                    8d:ce:5e:71:f9:f9:39:4c:86:c4:5d:15:40:42:5b:
                    a1:d4:c7:61:d8:ff:bc:cc:70:7e:62:25:fb:3a:7f:
                    a7:f3:43:2b:84:b1:d0:98:22:83:64:a8:be:06:df:
                    19:54:a3:a1:47:48:b7:ac:85:c0:2e:ca:9a:34:c5:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:77:94:5A:DE:E4:56:A7:70:33:52:4C:B6:EC:DF:1A:D2:BA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.35.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:7a:79:d7:79:2f:ed:65:2c:03:4a:b7:7c:d2:16:65:9e:
         ac:c4:e0:a3:fd:b7:65:e6:0b:a0:bd:cf:df:78:ac:fc:72:d5:
         3c:bb:6b:76:0f:b5:9e:06:57:f1:fe:99:67:6c:f6:e4:38:5e:
         48:31:10:9c:d7:d0:4e:e5:84:4b:92:39:33:d9:f6:5c:50:c3:
         c0:69:ef:9e:6a:4a:7a:2c:2b:5f:a8:8f:08:44:9e:33:33:40:
         b8:50:e5:85:f9:e7:d6:71:a8:9f:01:db:b9:48:0e:f5:c1:c2:
         d2:82:8d:6b:18:f7:63:ef:b3:12:3b:b9:33:e2:ac:23:1e:3e:
         ef:18:fe:28:b4:6d:e1:93:e4:c6:06:28:44:72:1e:b2:a3:1b:
         58:c8:17:6a:28:8b:53:93:aa:70:38:02:c4:d0:25:4f:02:0a:
         c7:0a:59:e7:06:36:9d:2d:12:14:4e:64:41:44:14:9c:76:32:
         ab:3e:26:0a:eb:86:d8:e3:75:37:fb:1a:e5:7e:92:c5:72:b0:
         02:95:56:02:c3:71:2c:6f:7c:ee:9b:78:e0:cf:18:1e:27:bb:
         80:b6:e9:ab:0d:6b:19:d0:af:4a:9c:d8:ae:61:13:66:de:bb:
         18:a9:ff:8c:3b:17:66:1f:de:a0:05:eb:2e:cb:18:46:f2:a0:
         53:d1:df:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:59:31 2024 by rpki-client on console-fra.rpki-client.org