Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa
File:                     b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa (raw, json)
Hash identifier:          olx8SoOPZw0ji9A4MZYcYlx5GBSY22kVUaDmtKUXaZg=
Subject key identifier:   4F:34:8C:14:E9:4B:98:A2:89:72:E9:F8:19:7A:E2:DE:3E:D3:5F:64
Certificate issuer:       /CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1
Certificate serial:       010D0C9F43285847043FF59796646CFB5BFF3520
Authority key identifier: 5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa
Signing time:             Tue 27 Aug 2024 15:52:03 +0000
ROA not before:           Tue 27 Aug 2024 15:52:03 +0000
ROA not after:            Mon 25 Nov 2024 16:52:03 +0000
asID:                     30674
IP address blocks:        129.62.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:04:3f:f5:97:96:64:6c:fb:5b:ff:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1
        Validity
            Not Before: Aug 27 15:52:03 2024 GMT
            Not After : Nov 25 16:52:03 2024 GMT
        Subject: CN=2cf66ee0-fd3c-4e2b-8ece-862d0c525143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:b3:bb:26:3e:34:e5:c6:38:fd:b0:1a:93:
                    0b:d9:5f:36:3e:ee:6e:a2:74:83:f5:e7:de:c0:5d:
                    33:ff:83:96:28:4e:15:cd:30:c9:57:b3:47:a9:60:
                    9a:46:71:d3:c7:8a:1b:6b:3a:99:35:b9:bf:4d:fe:
                    51:d5:0d:fd:7a:a3:7f:14:77:76:39:84:c9:f3:2f:
                    9a:7f:54:3e:ba:8d:99:64:db:fa:73:2c:27:d2:42:
                    37:93:77:10:fa:99:27:52:b5:e3:db:0e:99:29:be:
                    eb:85:14:63:0c:34:3b:91:02:c2:88:a0:3a:57:81:
                    32:b3:d2:c2:54:3a:3c:b4:87:8e:30:1a:fe:1c:4a:
                    db:ed:2b:e3:37:10:c1:16:ce:84:06:ba:33:01:37:
                    60:5c:ec:fe:56:aa:fb:6b:c9:1a:a8:23:e0:a0:21:
                    c0:50:45:36:e3:88:6f:71:a2:2c:29:04:0b:ef:9a:
                    31:c2:0c:de:c6:13:88:0c:4f:3c:8b:eb:9a:1f:11:
                    89:eb:ec:90:39:0d:af:f5:c9:90:4e:c0:69:7a:47:
                    70:b8:42:1f:d3:59:49:28:09:88:93:85:8b:de:88:
                    43:31:a8:b0:bf:57:bb:9e:3b:60:d3:fb:10:f1:8d:
                    3e:b8:3e:4c:46:10:48:8d:2a:7d:54:37:7a:a4:32:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:34:8C:14:E9:4B:98:A2:89:72:E9:F8:19:7A:E2:DE:3E:D3:5F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:48:2b:b7:96:d8:86:13:eb:26:5a:43:f9:da:6d:c6:dd:7b:
         93:6c:76:ce:93:e3:f4:d2:bd:77:d8:fe:0e:6c:36:27:4a:a2:
         74:cd:a7:f9:52:7c:36:3c:58:66:bf:16:9d:0a:ce:3b:c3:43:
         26:df:ca:f1:c2:23:36:1d:d5:16:d9:66:f7:60:38:8b:3e:21:
         8b:63:7f:c7:3f:e0:ce:de:ec:15:ad:5a:e4:40:e0:9e:5a:a2:
         37:f0:17:8e:6a:89:f9:ad:a3:7d:8b:53:fc:df:f5:f1:3a:a9:
         58:fd:a7:53:5e:f1:61:48:09:62:49:ab:53:83:d2:cc:cf:48:
         85:a9:02:1c:a2:0e:dd:0f:cc:83:51:94:55:c3:6a:44:68:be:
         bc:58:32:6b:f8:e5:ed:42:6a:91:18:a6:8c:da:42:d0:67:e8:
         be:05:f5:e4:d5:e4:2c:1a:df:a2:0e:7f:1a:80:be:57:12:a2:
         65:27:1f:cf:bf:1c:34:e9:5d:14:30:99:dc:83:70:d0:53:e7:
         89:d3:bd:fd:12:db:cd:7a:5e:bc:c2:29:f2:27:3f:b5:6f:e2:
         31:2a:f8:bf:1b:42:0b:6b:bd:b1:e9:6d:f8:4c:da:36:0e:20:
         f2:a1:2e:61:0a:28:57:b6:a3:e3:57:26:ed:db:22:35:04:f4:
         fb:02:75:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org