Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/109ccb9e-fb44-316e-a340-79fc628dfe21.roa
File:                     109ccb9e-fb44-316e-a340-79fc628dfe21.roa (raw, json)
Hash identifier:          hyYyeLeG/LwvBqM4y6XFeR1odgsvnAEOeuDfZZYeiAI=
Subject key identifier:   74:DA:24:03:A7:77:ED:BB:BA:C5:B2:47:58:D6:EB:D6:CA:CF:88:C5
Certificate issuer:       /CN=12e662f6-4810-4bf7-8722-8635fb0c7747
Certificate serial:       010D0C9F43285847600B900046F0AD98050F8F00
Authority key identifier: 60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/109ccb9e-fb44-316e-a340-79fc628dfe21.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     33403
IP address blocks:        128.254.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:90:00:46:f0:ad:98:05:0f:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e662f6-4810-4bf7-8722-8635fb0c7747
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=31282b7c-920e-48d5-8936-1d859f8b4d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:4e:73:1d:40:19:ac:a5:f6:a7:cd:36:00:
                    20:bf:ce:29:21:ac:7a:e6:86:e2:ad:0a:e2:d7:83:
                    20:95:7d:59:3f:22:c0:0b:ef:04:48:08:93:6e:48:
                    ca:a5:df:46:63:de:89:f6:fc:83:28:64:ee:a6:92:
                    9c:18:6f:fb:12:33:3c:69:2a:63:80:2f:cf:5c:13:
                    7f:0e:4e:45:e5:60:88:19:4b:e3:f0:63:14:97:27:
                    9b:d4:c5:a9:9b:91:f3:ee:fb:c6:36:eb:8f:4b:77:
                    07:af:55:e6:5a:a7:26:00:d0:c1:f7:9f:c7:45:fa:
                    37:9c:12:f2:4a:cb:40:27:98:27:6b:45:2b:67:79:
                    54:43:e0:37:10:fd:88:ea:c9:98:b1:3e:a9:ca:92:
                    2e:36:ec:00:15:b5:25:78:c6:94:57:60:7b:5b:c4:
                    d4:08:cf:bb:7e:2c:f8:83:bc:c5:14:c0:10:64:51:
                    4f:5e:d5:5e:8c:2c:b5:7d:e5:a5:2d:40:97:f4:13:
                    44:82:c5:0a:91:bf:7f:59:32:67:cb:a7:df:c0:dd:
                    f1:4c:4b:b6:b9:ec:44:b7:a7:f0:e8:35:4c:76:e1:
                    30:80:7d:34:14:b9:c9:32:b0:7d:ea:3c:7e:c3:f1:
                    10:79:b6:90:67:a8:7a:5c:a8:51:a6:7a:59:9b:03:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:24:03:A7:77:ED:BB:BA:C5:B2:47:58:D6:EB:D6:CA:CF:88:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/109ccb9e-fb44-316e-a340-79fc628dfe21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl

            X509v3 Authority Key Identifier:
                keyid:60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:99:08:f0:ae:04:a0:42:59:1d:0e:ce:05:3f:d0:b5:29:62:
         e2:96:db:31:84:a3:9e:01:6e:74:ba:08:50:e1:05:50:58:6a:
         c9:3f:81:bb:e4:24:47:74:3e:41:3d:8f:92:0a:ca:8f:5f:c2:
         0f:e7:1b:2b:9b:79:49:55:6a:1b:42:51:2e:94:71:6c:a9:b0:
         80:54:1f:85:eb:5f:70:f1:54:ea:e3:e1:2b:96:54:2c:e6:f6:
         d4:4d:d7:69:56:25:74:94:48:6e:2c:c4:29:76:e7:5e:8e:17:
         b6:57:f9:2d:89:c1:0e:dc:2f:31:54:6b:f4:f3:2e:45:3b:b8:
         31:8b:e1:e6:ae:61:e7:18:d2:33:d9:09:3a:64:de:66:46:aa:
         db:f3:54:ab:74:c9:06:76:71:8c:e5:fb:93:db:e7:79:24:88:
         77:52:df:d5:ac:63:a3:fe:41:20:e3:94:b6:8f:bf:21:db:59:
         3d:6e:de:55:f3:c0:1f:e8:ce:33:7e:45:2a:67:f0:e0:e2:dc:
         5b:2b:f2:d3:58:2e:e9:67:1e:1e:e8:01:77:b1:ae:3c:1c:9c:
         34:48:47:96:26:1d:a8:6b:ad:ef:3f:86:eb:34:96:63:92:d6:
         6b:d5:26:0e:f2:5b:cb:8c:91:f9:44:e7:ec:63:ce:7f:02:c7:
         98:76:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:47 2024 by rpki-client on console-fra.rpki-client.org