Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa
File:                     bd9188e8-ffee-390e-87df-a36c96325cad.roa (raw, json)
Hash identifier:          NSV5vgzQhS8/hLkeSnqLwT8vVadG3Rm5rVA7OSIZYF8=
Subject key identifier:   C4:95:97:0E:39:63:ED:C8:41:DC:75:58:FC:2A:F1:8A:9B:33:86:C0
Certificate issuer:       /CN=7b840891-ef20-464d-970d-ffec736f7949
Certificate serial:       010D0C9F43285847600B8BEE50C716E391A50E50
Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     398872
IP address blocks:        198.134.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:8b:ee:50:c7:16:e3:91:a5:0e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=7e2c0c55-24d1-4062-8d28-446e25d0f139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:60:56:17:a8:17:98:82:38:c0:fb:f3:d0:54:
                    59:9d:5c:c2:9c:8f:e4:a4:fa:e6:96:e6:db:11:3d:
                    f5:55:fb:e4:6d:96:2c:66:4e:a1:15:ae:aa:36:57:
                    6b:6b:34:ae:79:90:6b:8f:14:5f:e7:2e:97:6b:c0:
                    c3:4e:a3:c9:59:39:31:ce:31:4e:40:67:fd:29:1a:
                    df:41:26:16:69:e6:2c:58:c4:20:38:5c:6b:8e:c9:
                    cf:43:ba:ae:8b:96:d4:43:3d:c9:9f:d2:98:6d:7f:
                    bd:fd:43:dd:0c:0b:1b:92:07:b6:82:e0:2d:d0:d6:
                    7e:b8:48:f8:91:35:36:c6:d4:a3:7d:b0:27:db:e1:
                    e3:0c:65:55:a4:6e:fb:c4:16:83:05:0d:05:05:9a:
                    c3:fc:c8:16:b7:68:39:ba:e2:60:f8:67:a2:a6:87:
                    2c:18:51:23:75:75:91:d2:a5:d9:ca:e2:fb:8e:78:
                    ea:56:a6:e3:ef:81:b8:d8:66:25:53:25:5d:02:5e:
                    5d:52:c3:06:ed:a3:9a:4c:27:f3:ac:e1:bc:b3:4b:
                    7d:98:ed:c3:46:a3:0a:c0:84:87:36:b3:16:fb:3b:
                    e8:11:1d:54:ef:90:16:52:63:9e:2a:fc:8f:bb:6d:
                    50:a0:26:b3:45:88:ca:e8:96:14:d9:9a:78:e2:aa:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:95:97:0E:39:63:ED:C8:41:DC:75:58:FC:2A:F1:8A:9B:33:86:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl

            X509v3 Authority Key Identifier:
                keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:d5:ba:a1:3f:b1:de:fb:ef:f6:6d:19:44:ab:c1:65:91:
         66:04:ba:e5:0c:1b:43:07:8e:24:80:63:1c:24:54:39:ed:6e:
         2e:40:5a:08:12:9b:a7:42:b7:6d:b7:8e:0e:ac:83:05:cf:17:
         59:78:dd:3e:ed:70:c9:1b:85:2e:9b:f2:17:b5:c3:c3:3f:5d:
         60:1e:c2:a7:bc:c8:77:da:f0:14:a5:6a:47:4c:84:a8:85:ab:
         9c:80:c4:ed:05:5d:a6:14:eb:32:53:b1:71:19:ee:13:eb:db:
         24:76:68:62:d7:1d:d5:8e:b1:ec:4a:dc:83:bd:1c:81:64:9c:
         01:a7:ad:4e:57:5c:00:2b:62:be:cb:4d:52:c5:a6:0c:85:68:
         3d:8c:db:17:38:80:bf:23:a3:74:d3:f8:6e:b4:c1:07:30:bb:
         6e:c4:dd:8b:f0:5b:7e:b8:82:ba:da:e4:f3:ea:60:13:5f:02:
         51:7c:0e:ff:30:96:0b:c5:94:d2:8d:1e:48:be:c9:61:5e:42:
         3f:f1:b2:5a:cc:1a:c3:bf:0d:a5:e8:81:47:a8:18:fa:f0:42:
         ae:3d:41:f2:4b:8a:54:6f:9e:ce:ea:31:ae:45:80:8b:5d:63:
         f2:a0:ba:29:10:95:a3:a7:d8:21:2d:86:79:be:dd:2e:41:2a:
         bd:07:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:44 2024 by rpki-client on console-ams.rpki-client.org