Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa
File:                     34cf4545-7377-3604-bfb9-15fe8de88b2e.roa (raw, json)
Hash identifier:          dFmV4UzCoIKJ8/MbagU3HfAmhPwMQiRU5DkAbjKwspk=
Subject key identifier:   1D:90:A6:DE:C0:4D:71:1A:A6:8F:2A:2E:C9:BE:88:74:E8:2D:D4:39
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858472C65D1617501CCD5E2A87E40
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        129.41.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d1:61:75:01:cc:d5:e2:a8:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=cee648c6-c864-41d5-a2ce-d07756869b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:c1:d1:e6:1a:5d:4d:ba:8a:69:90:28:5f:
                    73:a6:62:35:10:3b:cf:06:4b:03:b1:99:12:9b:a6:
                    14:7c:ed:ce:5c:ad:0c:f6:02:5e:e9:4b:68:39:43:
                    64:8d:0f:2a:af:0d:6b:c4:fc:b6:2c:bd:29:f4:f3:
                    cb:98:28:24:bc:2a:e9:b8:f4:cb:dd:24:f7:80:19:
                    0c:47:0d:4c:6b:ae:9f:8e:54:f1:b1:1d:61:17:a4:
                    12:0f:e1:81:70:76:d9:6a:83:bb:85:98:5e:50:1c:
                    e0:a7:2c:f5:02:c8:e7:a7:b8:23:61:2e:db:9a:f9:
                    b5:46:a4:be:01:76:27:9b:de:72:3d:c2:b5:90:98:
                    85:63:d1:8a:46:1e:cf:8f:a5:08:54:40:7e:41:f1:
                    97:51:80:de:fd:3b:b5:c0:e5:92:4e:9e:64:ff:be:
                    a7:a9:e5:bb:6d:50:9c:ce:b6:d1:a2:f4:15:c0:71:
                    41:d5:81:2e:f9:25:4d:8e:26:4e:2f:68:05:a5:c3:
                    8a:c9:d0:0d:8d:f7:8e:4f:fa:ba:1d:0b:12:75:f5:
                    3b:d2:b9:02:93:20:4c:f8:75:b5:f7:51:9a:09:3a:
                    1b:25:3f:d4:c4:14:f2:fe:b7:0a:c7:a3:7a:ea:9f:
                    79:41:18:b8:ad:64:f7:38:74:8f:e6:3b:56:6b:ca:
                    2c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:90:A6:DE:C0:4D:71:1A:A6:8F:2A:2E:C9:BE:88:74:E8:2D:D4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e7:02:fb:05:59:39:24:1a:8f:0c:00:b6:d8:ca:d6:b8:bb:
         ab:94:7e:d7:64:c1:e0:08:35:d9:74:23:de:f5:ab:87:52:c9:
         a4:13:b0:43:dc:ba:f3:87:3f:d9:19:83:44:d3:66:13:6b:7f:
         b8:c1:cb:d8:60:10:6a:e0:93:73:cf:e1:72:21:a4:62:04:54:
         af:4f:93:4f:7e:61:fd:3f:69:1d:28:f1:f2:7a:3b:9a:57:41:
         dc:c8:67:fe:76:1c:43:c1:43:ae:25:5b:8b:84:2c:25:17:20:
         f8:4b:55:b8:01:f3:71:5c:55:35:0d:c7:26:03:4e:62:90:77:
         cb:05:d7:25:bd:96:d7:1e:63:aa:b9:6f:a4:16:35:d5:60:0a:
         31:3c:8d:84:b6:df:bf:d0:51:1b:ea:0d:2c:f9:6d:2c:f7:a8:
         ee:65:0b:5c:d4:cc:f5:60:c1:24:f9:12:48:00:85:22:fc:84:
         6a:d6:ac:b7:2e:45:e6:66:fb:10:cc:eb:e3:b2:30:74:3b:39:
         fb:c1:1a:34:57:1b:88:78:0e:30:de:ec:41:ec:9e:9b:b5:66:
         3a:f6:92:b4:24:83:4d:71:ae:54:e9:14:e8:de:c8:91:49:9f:
         be:90:7f:69:c3:4d:4c:d5:c3:60:5b:ed:fd:fa:ff:88:07:ec:
         1f:e0:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:52 2024 by rpki-client on console-fra.rpki-client.org