Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa
File:                     b972c047-2afd-30a4-a40b-2b850202cf41.roa (raw, json)
Hash identifier:          mztkBlatwWUvgxUIv4FL6WO63bPnE+y7kAmuKLlJiFU=
Subject key identifier:   02:C2:29:06:BC:0F:4A:74:01:65:94:F4:40:19:5F:8E:81:B3:74:C1
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F43285847E35F7236C6CC9EED32345100
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     14593
IP address blocks:        135.129.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:72:36:c6:cc:9e:ed:32:34:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=4151c2da-03de-49e4-bbe1-ab31fc9736b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:8f:7e:e8:93:0e:54:a4:af:70:d1:7d:90:
                    76:cb:da:5f:0d:e5:0a:dd:a4:24:84:6f:d8:b2:7d:
                    96:a5:ea:80:9b:8a:d6:af:a3:35:a0:d5:75:84:87:
                    59:7a:be:c4:01:c3:46:c5:5e:18:be:81:dd:c1:0e:
                    34:dd:d6:88:14:40:ab:ca:aa:0f:e6:ab:80:de:a8:
                    f7:10:54:dc:5d:48:78:20:5f:69:be:c1:ae:17:79:
                    1b:e8:f6:03:73:1e:b2:c0:72:84:a0:41:02:97:4f:
                    a6:4d:9a:3a:00:96:8a:de:03:c6:a6:62:08:1c:b3:
                    19:93:d1:a4:31:03:39:9e:0b:65:a5:64:ae:d8:0a:
                    b2:78:c9:b2:f9:f0:fd:d4:4c:5e:7f:e1:e7:4b:0a:
                    ee:e0:1e:a2:f3:ef:6a:86:1c:2a:d4:fe:36:e8:eb:
                    cc:41:6a:65:e5:d1:e6:61:c7:14:a7:96:30:57:ca:
                    89:17:bb:a0:ab:c3:5e:1d:7b:39:51:4d:df:8d:ac:
                    f5:33:ff:b1:de:e2:fb:89:d9:14:b6:4a:3c:a9:12:
                    b4:f3:5e:3f:38:7d:67:1c:39:d0:b9:ea:da:f9:88:
                    a1:1d:1f:1c:86:b9:44:e9:13:61:92:38:b9:ce:2c:
                    cd:60:b7:f3:a7:a5:28:c7:11:32:f6:ce:03:de:5b:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:29:06:BC:0F:4A:74:01:65:94:F4:40:19:5F:8E:81:B3:74:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:8d:f8:4d:25:13:72:a5:4e:1e:b9:5d:08:de:20:df:2e:80:
         52:ee:17:81:80:7d:14:39:a2:5a:a1:d6:5f:99:93:02:83:41:
         fa:4e:11:93:1e:ed:37:48:fc:f5:31:c2:b9:09:61:0e:b2:63:
         20:16:f0:68:de:99:3e:49:d9:2f:27:13:5d:8f:f4:47:03:0d:
         88:21:5e:99:1b:e0:7e:a4:b4:d8:ba:a8:c8:c5:94:7b:a1:a4:
         62:a3:8e:bd:e3:e3:a4:83:ec:2e:b1:cf:38:e3:64:1f:57:b4:
         f8:2d:e8:ad:50:90:8f:26:ec:b2:92:3b:75:ca:4b:03:ff:d8:
         29:51:31:25:a5:43:62:de:7d:83:93:2e:3b:55:d9:3f:9d:5a:
         98:e7:2e:5a:b6:75:4a:27:eb:85:37:19:e7:70:eb:6f:c7:98:
         fa:c7:dd:0a:56:e9:d5:5d:4d:2b:95:fa:d1:8f:c9:71:7f:e4:
         8d:fe:06:da:dc:41:f9:a7:8c:c8:61:f4:28:5e:0c:4d:23:cc:
         a6:92:e1:ee:e9:4c:74:84:c4:d7:67:49:d1:32:59:13:a9:86:
         2a:1b:4a:30:41:17:36:3d:15:17:59:d7:9d:ef:12:95:5f:b8:
         b7:2c:30:23:f1:a5:38:e6:6d:b1:13:43:9d:f5:e6:c7:8c:ef:
         d2:1a:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:47 2024 by rpki-client on console-ams.rpki-client.org