Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa
File:                     30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa (raw, json)
Hash identifier:          ZLHxtrXOdv3/XoZaG185vI18UcRFYJbe1ZXMv+nhbhI=
Subject key identifier:   D3:5A:7D:2F:83:E8:A1:64:1E:17:BC:2C:17:3A:A3:F8:7D:0A:49:7A
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F43285847600B81C18A123BB2D24AE1C0
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        170.176.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:81:c1:8a:12:3b:b2:d2:4a:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=2746abb3-0eff-4e1f-a3fa-7050dcc58a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:e2:5f:4a:b9:3e:16:2a:7b:f1:37:5f:f9:
                    5c:e2:fd:11:76:eb:a6:ce:3b:08:0d:84:ff:db:50:
                    53:d8:b4:81:f6:0d:f1:b3:9e:5e:b0:e4:07:26:88:
                    2a:fa:46:2c:f6:d1:a5:ef:bd:24:c4:89:35:08:b1:
                    e9:94:01:b1:a6:51:66:9e:84:41:f7:f6:fd:3d:33:
                    da:b0:04:56:23:27:bd:14:1f:cf:5b:92:9d:dd:47:
                    0d:53:da:c0:aa:53:c9:6d:9d:02:06:a7:a8:4f:83:
                    2b:10:f6:57:d1:b6:da:80:82:5f:31:8a:a7:6d:70:
                    38:a3:de:b3:5c:b5:c2:a1:5f:86:24:46:9d:85:31:
                    5f:71:dd:a3:c8:47:57:da:65:56:b1:cc:5b:7e:f0:
                    63:49:2b:b5:4a:ff:4c:0a:40:f2:c7:cf:5d:6d:90:
                    99:c2:52:6c:06:04:45:e0:64:1c:a8:56:03:31:ff:
                    ed:7d:83:29:ec:b0:f5:c9:a8:3a:50:3f:3a:ca:c2:
                    d6:76:e9:9f:e7:04:8b:0e:ed:c5:66:2b:9b:78:79:
                    f0:e5:a0:16:68:d6:89:13:c8:ac:7a:f0:ba:25:ee:
                    f2:b5:9e:4d:3e:b2:54:03:f1:f9:47:f1:1b:31:f7:
                    c6:17:59:7f:d1:3d:48:25:9c:15:66:0a:fb:73:f3:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5A:7D:2F:83:E8:A1:64:1E:17:BC:2C:17:3A:A3:F8:7D:0A:49:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d7:40:7f:91:20:10:57:38:7f:37:86:9f:6b:78:7f:6a:d0:
         b7:fa:89:02:81:ad:c1:22:24:10:0a:93:87:cf:c6:a7:cb:f3:
         ff:4f:54:70:19:f5:e7:36:2f:7b:b5:ae:95:29:08:32:77:83:
         fd:63:cd:dd:fb:44:b9:3c:23:01:bc:23:1f:cc:40:2f:f3:bd:
         45:78:d1:8e:f8:13:9d:5f:71:57:35:39:09:7f:a4:d8:46:67:
         68:00:8c:d7:01:2a:d1:9d:45:34:8f:0a:9d:32:48:ee:96:c6:
         6d:5b:5c:74:d3:44:f5:ca:89:a1:71:6a:e9:15:13:a2:dd:c5:
         39:dd:41:e4:96:09:c3:d0:69:21:b3:1e:75:83:59:8c:d9:d0:
         fe:3d:3a:d8:93:7f:8a:9b:6e:a4:9d:03:71:ab:9a:ec:ce:dc:
         1b:88:d1:34:d1:fd:78:61:26:2c:ff:da:43:5d:73:9e:be:8f:
         6d:d9:e5:1d:05:08:56:84:06:0e:fa:a3:e3:f0:00:b9:81:43:
         bf:72:1a:31:72:90:a8:94:4a:9e:0b:83:c0:0f:25:26:d9:ed:
         f0:f7:4d:6e:b7:89:9b:43:97:8f:76:53:a1:a8:b9:63:c4:0d:
         88:ed:eb:a4:70:d0:2d:f3:2c:5d:f2:ac:b8:49:5f:42:7b:f3:
         cc:d0:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org