Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa
File:                     a5a24476-a36b-3ebc-a070-85d57a2a0786.roa (raw, json)
Hash identifier:          f0bILR1/ZXD2YzEXY6JrRDKZJYuys0tGrBtHTTvg/I0=
Subject key identifier:   B7:0C:18:6B:71:09:32:6D:F1:A9:21:D0:40:0B:9F:AB:FE:4A:FC:FA
Certificate issuer:       /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial:       010D0C9F432858473A5B97123765831B7ACBB580
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     6206
IP address blocks:        172.98.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:97:12:37:65:83:1b:7a:cb:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=ee6617f0-58e8-453e-9b99-d099c1e2a51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:b9:25:1d:aa:da:e7:2f:2f:8d:16:b4:d6:
                    d8:ab:76:d5:e1:63:44:42:98:c9:d7:91:f1:e1:43:
                    fe:cd:3f:6c:77:57:9c:7e:f1:bf:9d:85:5b:82:16:
                    1f:0b:8e:37:14:e2:39:83:15:cc:5a:74:f6:64:57:
                    76:14:06:d7:83:b7:ea:e6:f7:67:de:1e:44:38:f0:
                    32:e4:36:75:28:d9:3d:7e:5b:37:e2:73:e1:1d:b9:
                    ad:e5:58:0a:72:65:36:d6:e9:b7:0c:fa:32:2c:68:
                    1b:2f:17:47:ce:1a:30:d7:50:44:5a:1d:d7:b6:f3:
                    0e:ab:48:ff:f4:3a:26:ad:ec:fd:71:9f:5a:c5:3a:
                    9f:24:48:96:82:5e:33:a9:3d:b8:bf:48:eb:4b:91:
                    72:ea:bf:d7:2c:a8:8b:4c:53:9a:8d:18:a3:41:05:
                    6c:95:38:33:fa:ea:5b:c2:f3:4a:b9:62:61:56:e6:
                    fe:35:0d:ce:eb:47:29:7d:e6:44:76:1f:31:ea:81:
                    32:f9:c2:68:1a:0c:f1:69:25:f5:9f:0b:e4:0f:dd:
                    15:35:a3:b4:13:88:fc:c6:ee:70:86:d7:84:0b:bb:
                    0d:4a:1f:dc:69:61:f5:a1:8f:e9:77:00:a1:5d:55:
                    89:e1:11:5f:1b:e5:18:d8:b2:1a:5e:9f:02:99:c1:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0C:18:6B:71:09:32:6D:F1:A9:21:D0:40:0B:9F:AB:FE:4A:FC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl

            X509v3 Authority Key Identifier:
                keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:02:7f:2c:05:7d:bb:0a:be:53:65:6a:5e:0f:b4:b1:36:ad:
         be:31:38:2f:d2:fc:db:1d:9b:c8:c7:b6:66:5e:92:0c:20:ed:
         eb:2e:76:5f:89:e0:f0:a3:2f:b6:3f:f0:94:84:fd:d2:10:2e:
         85:4d:cd:8a:5f:b6:0f:a8:fd:f2:74:c0:17:bd:2e:fe:0e:5b:
         b7:20:3e:90:bb:e9:24:e1:25:21:b0:63:05:6c:4b:35:aa:9d:
         15:06:cc:f9:af:2d:57:1b:e4:ad:20:7a:d3:a2:42:c1:85:1e:
         73:51:24:13:40:95:74:9c:16:f4:97:98:08:3d:b9:4c:8b:b2:
         3f:68:29:ba:97:58:56:ff:9d:8b:2d:1e:b6:1f:38:c8:9d:66:
         67:7b:2c:57:f5:52:45:64:38:bf:c8:55:16:da:49:74:eb:7f:
         4c:a5:49:99:38:70:54:cb:4d:2c:9a:fe:6c:61:7e:c1:fb:71:
         52:de:3a:c5:31:12:f6:0d:69:be:3d:1d:dd:25:b1:19:b5:73:
         4c:4b:03:a2:28:2c:19:a1:c5:bf:48:6b:1e:6b:15:f7:de:61:
         b3:67:c4:e8:ea:6a:21:60:92:b5:d7:53:6c:84:bb:9a:77:5e:
         ce:08:18:7c:4a:c0:a0:7d:e1:74:de:78:5f:f7:87:e2:3a:86:
         1b:b0:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:20:14 2024 by rpki-client on console-ams.rpki-client.org