Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa
File:                     0df303f2-b310-3346-ada4-7f81864f6c3f.roa (raw, json)
Hash identifier:          czhlIGlGL+ncsGRJ9Iv50Twpts43PjY7c6HRuvwQ8Xk=
Subject key identifier:   49:78:50:F3:79:8B:EE:EC:DD:0D:C3:2C:D7:3D:81:73:47:36:60:2F
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858477EC11576D4C169CB36B6CC80
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     396212
IP address blocks:        129.19.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:15:76:d4:c1:69:cb:36:b6:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=062cb40c-7305-47b9-8b24-5cd3d302c46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:95:2b:36:87:e8:dc:cb:fb:f8:88:d8:d5:ef:
                    61:2a:15:8d:33:44:11:ad:4e:9d:23:a7:61:fe:fa:
                    99:6f:bc:bd:a1:ba:47:55:b1:92:30:6d:d7:47:12:
                    1f:75:23:cb:83:90:8b:fe:b6:1c:fd:fa:c9:26:26:
                    5b:21:df:a7:0b:09:6f:be:04:12:27:34:08:61:26:
                    65:f7:fb:bf:9d:97:1c:f7:36:34:d6:81:ec:3f:66:
                    a4:56:c8:ef:17:d3:fd:d2:fb:e6:c6:e0:37:85:d1:
                    9d:45:f5:e6:b2:a6:65:cf:2d:57:d7:e4:ea:bb:40:
                    6c:ea:84:bc:de:46:68:38:91:f5:ad:a7:3e:6b:46:
                    08:0c:32:34:15:04:f2:f0:2f:64:c2:39:f4:e9:49:
                    7c:c8:36:80:ee:ed:4c:75:ff:21:d0:0f:bd:56:cc:
                    4f:85:a7:f7:b6:bd:ef:90:ce:f1:dd:f3:15:35:57:
                    bd:be:fd:28:0f:1d:2a:26:ae:88:02:9f:f9:a9:fa:
                    76:05:be:45:af:32:83:85:35:d2:1e:d7:68:b9:aa:
                    00:67:aa:d8:f1:42:b3:b5:f8:4e:d5:6d:b4:87:5a:
                    94:31:09:0c:89:d7:bf:89:a5:d4:d4:f5:cb:1f:cb:
                    9d:eb:14:3b:ef:1b:b8:4d:42:84:6d:13:2a:92:7c:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:78:50:F3:79:8B:EE:EC:DD:0D:C3:2C:D7:3D:81:73:47:36:60:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:dc:3c:1c:78:73:f8:51:e7:8e:a2:88:b2:a4:3d:43:db:ad:
         01:49:3d:49:aa:1d:63:86:7a:ae:37:57:17:fb:2f:89:6a:93:
         35:de:9b:86:94:ad:ef:0b:b3:cd:b4:5b:2c:aa:c2:03:c8:a2:
         59:33:95:29:a7:0d:d4:11:2f:05:cc:a1:86:b2:57:85:a0:9f:
         b5:7b:d1:fd:1f:51:07:94:56:41:69:4e:41:21:0a:ba:22:7f:
         eb:ed:d6:fe:7c:c7:d2:63:6c:18:a9:ca:e5:ac:67:b6:ee:ac:
         c7:f5:10:7e:ef:3b:f4:21:11:d5:2a:87:82:b0:c6:bd:a3:10:
         50:4e:41:44:e7:7d:30:ec:c1:a6:8a:ff:8d:77:da:46:d8:d1:
         4b:e2:22:fe:80:ec:fb:4a:96:b8:ce:ce:0e:69:f6:93:aa:fe:
         e8:b7:e6:e6:3f:e3:23:99:f2:ac:d9:d7:90:34:e1:63:96:f4:
         5f:a2:4e:09:29:86:06:18:52:2a:49:58:92:eb:be:87:cf:34:
         aa:a6:4d:45:1e:32:44:d6:4a:2a:83:16:e0:d5:89:83:f9:55:
         c8:78:6b:c4:68:46:cc:67:d2:80:bb:3d:9d:c7:4e:58:10:4a:
         e5:ce:b5:98:c7:87:b1:d8:de:40:e8:15:b2:e8:38:ee:35:b1:
         d9:8c:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:11:23 2024 by rpki-client on console-ams.rpki-client.org