Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa
File:                     4347f76d-c74a-3942-9dc0-3e3301512261.roa (raw, json)
Hash identifier:          cjclgWXGx3BWWv6LaFbAh6bGC23hwaDlR9U7phptkcI=
Subject key identifier:   26:03:1A:F4:FB:CD:02:85:4B:D8:50:9D:2E:58:79:ED:38:4B:F0:6F
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285845D933D497D4C99F9176B39FA0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        129.33.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:d4:97:d4:c9:9f:91:76:b3:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=79617598-2564-4083-a1cd-bb01d018efb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:08:39:94:27:bf:95:20:e6:65:d2:7d:5a:
                    e4:71:53:de:6d:20:8f:96:2a:d9:e5:a0:68:72:dc:
                    fb:ee:03:49:67:81:d6:ab:dd:9c:c7:c9:64:3b:53:
                    fc:f2:7c:a5:bb:95:32:58:58:35:05:7f:5c:86:58:
                    8c:e7:64:dd:00:9e:9f:80:cc:f2:02:67:60:05:fd:
                    b4:2b:50:54:44:be:30:84:29:39:57:12:c9:b9:5f:
                    6b:db:1b:f9:d6:ce:96:ea:db:b4:4c:60:16:b1:f1:
                    a0:69:63:5c:11:33:01:a8:c9:ec:70:ac:34:a0:a7:
                    cf:4d:b4:52:76:17:b8:77:26:97:ea:c5:d8:eb:45:
                    ee:96:34:f4:28:94:47:5c:0b:f4:b2:6c:1b:bf:cb:
                    e3:ff:47:d8:ba:e5:f3:e6:00:bd:a0:e2:ab:18:6b:
                    af:99:ad:32:0b:0e:51:f4:09:a4:3b:da:ad:e0:ad:
                    da:d7:5e:45:2b:29:0a:27:17:47:45:37:46:7e:23:
                    79:fb:2e:67:4d:d6:b5:d9:f8:79:ce:f1:6e:3f:d3:
                    15:62:38:ad:20:79:e1:f2:43:ff:3f:85:1d:b0:29:
                    46:e3:30:a2:3e:0b:b9:97:0a:98:59:20:5a:92:9a:
                    62:13:0e:f9:94:1a:a0:71:21:c8:9e:99:2b:a4:e9:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:1A:F4:FB:CD:02:85:4B:D8:50:9D:2E:58:79:ED:38:4B:F0:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.33.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:27:43:62:f0:3b:b3:5d:89:b7:e1:4c:fe:33:87:bc:30:a4:
         66:3f:26:6f:23:1d:ce:3a:45:35:10:98:d9:9a:cc:49:63:b7:
         05:f9:04:72:1f:e2:30:4d:57:77:7d:75:9e:b1:a9:dd:62:65:
         9f:0c:dd:95:ce:98:67:ce:58:e7:05:c3:2b:a5:7b:9c:fd:58:
         06:9e:e3:ca:4c:55:50:75:86:25:dd:4a:12:2d:d7:31:12:74:
         f0:9b:0d:8a:c4:34:2a:53:f3:8f:15:f6:8f:5a:d9:6a:35:e2:
         96:1b:80:f9:77:e1:4e:72:46:fc:3d:c1:84:29:67:6d:fd:bf:
         78:e9:de:85:a0:5d:0a:b8:3d:95:36:82:4f:ec:56:a0:ac:a2:
         69:45:ea:e0:43:9c:71:53:b9:39:87:c2:fa:bc:2d:5e:eb:49:
         1f:cf:10:17:7e:7d:c4:a1:bd:61:9d:1d:03:4a:11:50:0f:de:
         0c:e4:84:4a:0a:8e:f9:38:d6:95:bb:fa:3d:94:b1:76:b9:29:
         76:50:82:40:58:cb:70:44:d7:0d:8b:04:d0:8f:e8:a7:64:5d:
         92:dd:f5:fa:ab:b1:a3:6f:c3:14:bb:31:f3:ed:7b:3e:ef:e2:
         96:d0:a9:09:3a:73:26:9a:7e:fd:45:38:6a:1a:11:21:6d:e0:
         38:9d:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:16:43 2024 by rpki-client on console-ams.rpki-client.org