Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1bb70b65-5f1d-3615-810a-87635980935f.roa
File:                     1bb70b65-5f1d-3615-810a-87635980935f.roa (raw, json)
Hash identifier:          Bm9AKHlYfpl1q10X9vdN288hrF7Myna+l58KZIqGBHc=
Subject key identifier:   60:A9:DB:54:18:E3:FD:DC:C6:9C:D3:5A:BD:EB:92:0D:3E:5B:56:9F
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285845052577B3B1C35AD4762C5840
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1bb70b65-5f1d-3615-810a-87635980935f.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        199.255.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:77:b3:b1:c3:5a:d4:76:2c:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=59a333bb-da49-455e-961a-b235b94f64c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:27:61:36:6a:c1:74:f1:4e:be:98:2c:8f:
                    d4:b6:77:8c:f3:9c:ea:07:f9:86:68:d8:e2:74:b1:
                    07:39:85:cb:c7:6a:25:09:fe:1e:6d:cf:13:78:91:
                    f4:92:42:97:04:58:59:67:b5:0f:bf:a4:06:2b:ca:
                    f9:8d:b1:98:b4:31:4b:cf:db:ae:b3:3a:11:eb:2d:
                    fb:53:b2:26:5e:98:61:22:e1:14:e7:64:ca:bc:95:
                    fd:38:c6:1c:32:c1:bb:bc:01:76:2a:73:82:05:60:
                    ef:ae:a2:12:15:4b:b4:ad:8c:c1:0d:d7:78:5e:44:
                    68:b2:f0:97:0f:71:23:52:ab:7b:d5:89:43:67:e6:
                    f2:bf:1c:c6:aa:86:f3:fb:d6:05:02:95:66:46:0e:
                    a1:16:23:ee:9d:bd:74:7a:ed:db:97:3d:1c:4b:6c:
                    d2:7c:8f:7b:f3:43:f4:05:a6:df:13:ff:eb:07:69:
                    f5:68:52:61:33:26:7d:bd:7f:69:46:f6:a0:8f:43:
                    48:c6:dd:77:8b:b6:04:37:a1:bd:a5:a2:16:12:e6:
                    ae:bf:c7:05:10:50:5a:63:82:01:4b:5f:ec:65:15:
                    5e:f9:94:dc:ad:d4:c3:e6:ea:64:0a:81:03:16:ed:
                    19:17:b9:ea:9a:0d:51:62:c9:bc:34:fa:af:d6:8f:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A9:DB:54:18:E3:FD:DC:C6:9C:D3:5A:BD:EB:92:0D:3E:5B:56:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1bb70b65-5f1d-3615-810a-87635980935f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0e:61:a2:5a:32:50:20:14:fb:ab:2e:69:51:a6:34:0c:4e:
         3f:8e:b6:07:fb:df:af:ef:05:47:5f:4a:03:a6:80:96:9a:95:
         b2:41:92:4e:c4:2a:10:f6:16:9b:b3:5a:ae:0a:f6:76:97:e6:
         09:44:48:f4:f0:ec:06:33:70:65:d6:dc:a4:2b:7c:26:17:01:
         81:93:16:99:cb:8d:f7:22:9e:00:56:5d:71:6a:75:14:7a:ca:
         7e:4f:e2:6e:ba:38:94:1c:bc:2e:06:79:e9:37:b2:81:39:6c:
         63:55:a5:d3:d3:56:18:f9:19:10:fc:be:ba:bc:fb:18:02:d6:
         e8:20:e8:de:af:6c:d3:b5:fa:ed:f5:77:85:ae:80:76:45:17:
         c9:2c:f4:f0:70:ac:47:b8:8c:65:9e:cf:c0:13:4b:7f:e0:5a:
         00:bd:49:e8:d9:5c:b5:26:99:05:90:00:46:08:7d:3c:44:47:
         5f:a9:b8:31:bf:2e:d2:69:de:ce:3a:34:90:1f:93:5a:e8:5c:
         cf:be:00:f9:99:54:7c:a1:57:ee:b1:af:9f:66:91:38:1c:5e:
         1d:85:01:2f:3d:bb:bb:a9:43:8d:c8:8e:90:03:0f:06:23:de:
         ca:fc:13:a5:ab:26:d9:ed:f1:c4:98:e5:3d:eb:9a:cd:41:0b:
         47:3b:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:10 2024 by rpki-client on console-ams.rpki-client.org