Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/3085f03e-128d-39dd-8e5a-150849ab9548.roa
File:                     3085f03e-128d-39dd-8e5a-150849ab9548.roa (raw, json)
Hash identifier:          BnzTNedOhQzog5Rl2Z1W+RJhBOCCNzSg1ylPM5ECbxg=
Subject key identifier:   5F:F6:E9:2E:E7:59:28:0A:9E:1F:B9:D9:72:18:52:CF:42:19:52:E0
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584886B0815F86CEB647361FEC00
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/3085f03e-128d-39dd-8e5a-150849ab9548.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     22742
IP address blocks:        129.133.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:81:5f:86:ce:b6:47:36:1f:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=c6c078a3-cc2c-4d80-bc34-148f8c19a198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:86:16:c0:cd:d6:61:55:1b:3d:31:21:5c:
                    c1:18:b4:4f:72:ad:dc:21:50:54:f2:a0:c8:e0:a1:
                    26:a6:81:3a:60:59:0e:38:91:da:04:34:fa:c1:f0:
                    c8:97:d0:95:48:f9:9a:0c:61:a4:03:8b:82:fa:5b:
                    b4:ab:82:78:19:9b:7f:c1:68:03:25:ed:df:c7:29:
                    fd:55:c1:2e:57:ad:ef:bf:55:d2:63:f7:cb:4b:82:
                    82:0d:26:d8:87:ef:34:27:bd:92:6b:9e:91:c3:4e:
                    95:3c:80:3d:aa:18:b9:98:15:39:cd:8a:de:eb:d4:
                    57:b5:59:01:ff:57:bd:df:9b:38:12:74:2e:a6:f4:
                    db:31:4a:99:3a:3a:58:f9:e2:b6:d9:93:3e:e5:b9:
                    40:93:a8:70:14:54:ac:17:2b:f4:3a:6e:46:18:66:
                    dd:fa:f7:06:01:52:3e:28:c9:cd:fa:49:fd:10:62:
                    1a:de:ae:be:48:84:14:47:10:f2:2d:12:0e:9d:37:
                    09:2b:d6:7e:7d:45:57:83:62:95:87:4b:59:00:1e:
                    9d:ef:1d:a5:f3:78:8c:88:11:9b:16:49:d0:d8:53:
                    6c:0c:bb:f0:62:c5:c7:a4:b6:7d:cf:3d:60:d7:69:
                    fc:36:45:c6:33:0f:97:69:a0:97:49:94:e2:39:7e:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F6:E9:2E:E7:59:28:0A:9E:1F:B9:D9:72:18:52:CF:42:19:52:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/3085f03e-128d-39dd-8e5a-150849ab9548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.133.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:67:95:ec:45:01:1a:57:2f:91:bf:e6:67:20:e0:de:81:
         43:66:05:52:bd:8b:1e:90:a7:4b:33:0c:e6:13:d8:74:4b:8f:
         a1:2e:e5:7c:3a:55:af:d3:e6:20:f0:e2:a6:0a:a7:09:4d:ea:
         58:2e:dc:eb:e9:af:01:47:2d:85:c9:b5:42:96:52:37:55:14:
         95:90:36:12:5f:65:3d:9d:31:ec:97:b0:de:ba:d5:a0:12:21:
         7d:03:1d:d1:c6:60:ff:bf:e9:e9:ce:ea:35:db:ff:d2:bf:32:
         df:6d:fd:8d:9d:ca:02:45:30:85:56:ec:f3:9e:97:fa:53:db:
         3e:fc:db:e7:36:26:72:fc:b6:e0:dd:23:f0:43:24:b3:cf:06:
         e2:53:43:92:49:78:d3:d4:eb:a2:29:50:10:09:0b:67:04:3b:
         39:8a:a8:30:81:6a:f8:cf:d3:3c:7d:80:77:a7:09:c3:5f:c1:
         ab:b2:93:dd:a8:fa:ac:76:c5:15:0a:b0:3f:c1:74:b0:4d:73:
         ab:68:b5:25:24:12:88:32:01:71:00:df:91:23:6a:21:3c:d7:
         78:f0:dd:d2:87:f8:25:86:15:bf:25:49:31:1d:e9:6c:8d:1f:
         89:4f:ad:34:d6:9a:36:d6:03:f9:9d:34:81:ec:68:7e:10:c2:
         fd:54:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:41 2025 by rpki-client