Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa
File:                     0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa (raw, json)
Hash identifier:          sYJvACNLtvYb6sjHd26Di5dItgrFYlVtTO5F7pg0ri4=
Subject key identifier:   59:8B:C9:CD:E5:79:59:C9:C9:E2:DA:4D:6E:0B:EF:CB:02:67:CE:AC
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858480BDA73F9E21381C0A8ADE680
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        129.41.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:73:f9:e2:13:81:c0:a8:ad:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=9e19c67b-2052-41da-83bf-7e5cf0043c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:00:fc:c6:4c:59:a4:43:65:9e:ba:38:c4:
                    c0:42:4a:75:c7:8e:20:f0:bb:72:84:fb:a3:07:9a:
                    18:49:8c:69:15:15:d5:39:38:f9:cb:66:82:91:8f:
                    46:a1:62:56:c3:7f:31:4f:fd:04:65:f3:ab:57:a9:
                    fa:bf:4a:87:38:02:41:fb:c2:d5:7d:ad:b7:1f:a4:
                    56:16:cd:d1:aa:46:1d:c5:b3:b6:14:0b:b6:fe:93:
                    25:bf:f0:f1:19:f6:e7:4c:dc:d6:1e:26:47:fc:46:
                    be:fe:9a:a2:be:5c:48:92:2e:96:de:88:88:c2:de:
                    aa:ff:c9:0d:94:01:62:43:96:66:24:26:ee:69:6a:
                    92:1f:b6:e9:42:14:48:64:05:ab:71:b6:c6:e9:58:
                    82:b5:22:77:de:7f:35:dd:94:4f:44:ec:a3:c9:97:
                    d6:36:db:1c:45:75:26:4e:bf:a6:bd:54:69:f8:1c:
                    39:cc:e8:cc:34:ed:ad:9a:46:0c:39:ea:e0:e5:24:
                    80:a0:0a:a8:d8:14:20:8c:1c:c6:f6:be:a9:12:91:
                    79:ee:e2:33:3e:80:a3:dc:fc:d1:5f:9d:45:02:b2:
                    4c:c7:04:3b:5a:2f:ae:68:71:f7:ad:97:b6:9d:ab:
                    45:af:7e:eb:0e:5c:85:d0:d4:2e:89:df:74:4c:47:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:C9:CD:E5:79:59:C9:C9:E2:DA:4D:6E:0B:EF:CB:02:67:CE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:36:86:3a:24:f2:f4:31:bc:06:95:16:5e:75:58:2f:39:6c:
         0e:ff:93:ca:a0:f0:b0:26:ac:6b:fc:8c:cf:50:b9:91:ae:7c:
         0e:a9:88:a5:9c:66:b4:be:af:f1:26:0d:34:2e:c4:9b:21:3c:
         c0:e2:b5:51:a2:d7:4b:b8:e0:28:a5:78:8d:95:ca:6a:7d:41:
         eb:9d:98:ae:80:08:d0:1a:04:ab:94:e4:89:3d:f2:d0:bb:e0:
         9a:f4:9f:64:80:40:10:61:04:ab:dd:b9:89:01:9d:eb:28:ec:
         d4:7c:1c:45:bd:38:aa:76:80:fa:ce:04:c4:57:62:db:71:63:
         ef:51:87:77:88:0a:be:4f:18:7a:ab:62:48:5f:66:2b:03:65:
         35:a8:d1:c4:83:67:28:d6:71:96:5c:72:e6:e4:bd:0d:12:e0:
         5a:12:a2:94:a8:94:c7:a9:6d:40:24:cb:33:f4:8f:ce:c3:f8:
         4e:5e:c4:79:23:0d:40:d8:f3:a6:48:27:c5:c2:27:58:ce:90:
         a7:87:63:50:05:ba:28:43:93:55:69:96:65:02:6d:76:4b:51:
         c7:38:fc:26:6f:96:03:d2:9a:cf:e6:e9:ae:fd:d9:e8:e3:24:
         e1:5c:05:ba:7d:73:69:e5:03:6e:88:6b:47:20:3e:00:f1:ae:
         65:b9:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:10 2025 by rpki-client