Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/c58a5059-a306-36b1-a8f6-4a7c911810fe.roa
File:                     c58a5059-a306-36b1-a8f6-4a7c911810fe.roa (raw, json)
Hash identifier:          zJoU+SEY6plcuX984nKZYDhG6MIn4vrVIYWczCh5JHo=
Subject key identifier:   B6:C2:EF:64:2F:84:05:C9:17:C0:B5:F0:DE:BE:61:B6:2B:CB:EC:24
Certificate issuer:       /CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778
Certificate serial:       010D0C9F43285847ED24BCAE07545F7EF89C0600
Authority key identifier: E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/c58a5059-a306-36b1-a8f6-4a7c911810fe.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     20473
IP address blocks:        172.98.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:bc:ae:07:54:5f:7e:f8:9c:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=696cc2c5-1fa0-4d2d-90ab-2ef0dc129040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:cf:7d:8d:7b:f6:4e:a7:77:31:36:10:ec:
                    f7:93:87:dc:84:6d:b6:03:5a:6d:18:ed:d5:95:dd:
                    44:4d:8c:33:ff:6a:d6:68:5b:fb:b4:be:5b:28:a7:
                    2a:20:21:5e:d7:8d:87:db:d5:3f:38:07:3b:d1:7f:
                    7a:cc:90:f3:c5:62:ef:ba:3a:20:3d:0a:82:76:6c:
                    ae:20:9a:5b:2f:f4:0a:d1:6f:63:e6:19:e9:80:f0:
                    3a:f2:a0:d3:bc:43:79:46:b7:27:c0:91:7b:1d:a5:
                    76:a4:6e:60:05:5c:ea:58:9f:4c:cc:30:fc:c1:49:
                    b8:ba:6a:3a:be:67:63:5b:bf:52:29:8a:a4:53:8d:
                    c9:9e:f5:85:82:9d:9d:e2:87:c3:be:35:78:51:20:
                    2f:39:5e:72:1b:50:bb:b4:db:33:70:d0:a9:24:ea:
                    4e:e0:a2:21:e7:1e:3c:4e:62:00:1a:88:21:fe:71:
                    bd:6c:31:a8:a6:13:08:ad:b0:ef:4e:f7:b0:7f:1a:
                    e6:d0:79:45:aa:6f:0a:4a:0b:dd:13:13:95:20:a6:
                    38:76:68:11:22:30:bc:8a:b6:8e:6b:8d:4a:ac:e8:
                    ad:62:cc:7d:1b:8d:5e:63:c8:51:66:e7:74:30:21:
                    9f:f9:a0:d9:82:ed:a4:95:6c:52:65:9a:a8:f8:5a:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C2:EF:64:2F:84:05:C9:17:C0:B5:F0:DE:BE:61:B6:2B:CB:EC:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/c58a5059-a306-36b1-a8f6-4a7c911810fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:be:45:af:13:ea:68:a9:c0:a6:a3:4e:69:49:5a:50:d2:2f:
         61:4f:e2:6a:67:3b:52:f5:91:73:eb:29:33:f3:a5:37:1c:ba:
         2c:cf:a4:84:ef:8f:8a:c8:75:f6:4a:fc:99:7e:60:51:7d:bf:
         90:71:01:eb:1d:2c:bf:c0:4e:48:8a:0f:fe:5f:19:21:17:4e:
         11:c8:75:59:5b:77:c0:f7:15:51:1e:eb:d9:31:63:73:0f:09:
         a5:bb:5a:07:bf:ff:72:6a:17:4d:78:5a:64:7e:a8:98:76:fd:
         75:0c:46:04:ee:f9:d0:80:94:67:d2:79:c4:e5:77:8f:bb:aa:
         84:fc:2c:7d:11:8b:c7:20:82:35:8c:0a:e1:35:64:9a:5e:22:
         4c:e6:a9:20:25:87:17:d2:37:f2:05:84:ca:80:25:79:8e:13:
         e3:8a:bc:a8:61:43:91:ea:ed:33:d2:e2:c6:2a:33:00:20:6e:
         ed:81:a8:22:f9:e4:81:0d:97:77:9c:22:66:a1:b6:14:3a:15:
         1e:f3:72:0f:20:a2:d4:ec:b0:da:30:a4:ee:d5:ae:07:ee:65:
         cd:6f:04:37:1b:6a:40:e9:a2:3b:dd:1c:84:fe:99:f9:85:51:
         c2:7a:bf:71:49:cd:80:0b:94:c3:39:93:8d:b1:9a:d2:87:4d:
         8f:54:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:13 2024 by rpki-client on console-ams.rpki-client.org