Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa
File:                     9a04c360-2582-30c3-8634-70c1a0fd710d.roa (raw, json)
Hash identifier:          OZyXamkF9FR7trptGbI9yxz+EVJskAtXVQhlXyoSRpk=
Subject key identifier:   57:19:4A:98:9C:87:EC:CB:A5:04:3B:4F:C3:F3:F5:D5:0C:7E:CB:B2
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858472C65D11503C42AF25E58AF40
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        129.41.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d1:15:03:c4:2a:f2:5e:58:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=1a2dcfa6-524f-4045-9189-d7654130fe18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:98:70:5d:c0:d1:29:d1:74:d3:dc:27:a4:78:
                    0f:44:a4:d3:01:30:ba:d1:f3:6e:89:7d:69:84:a1:
                    0e:70:fe:4e:9b:b7:6e:ec:4b:5b:91:4d:f5:81:29:
                    27:3e:c9:c9:c6:fb:62:fa:25:91:8e:12:0d:5d:bf:
                    4a:26:8f:c3:34:21:d4:e2:27:fe:2c:31:51:44:f3:
                    f6:a4:43:1d:0f:c9:5f:02:42:da:f7:21:c6:4e:51:
                    6a:bd:32:ff:ac:a0:76:73:2d:ca:21:c8:6c:a6:06:
                    19:68:d4:f8:65:1e:5d:da:e6:2c:e6:59:08:81:5f:
                    fd:7f:71:1c:1d:ad:37:1f:42:4a:c2:7f:c6:52:40:
                    64:ba:9e:27:9b:a7:82:17:fc:85:28:82:27:5e:ae:
                    ac:8f:ed:f6:16:e1:ef:80:0b:88:36:51:b1:d1:20:
                    0e:ee:06:3d:2d:9f:ed:15:30:80:b3:10:1c:35:4d:
                    18:e7:32:16:d0:0a:2a:f4:50:1d:a6:31:90:04:a2:
                    80:78:07:0e:1f:7b:25:61:f5:46:a1:72:5b:29:74:
                    0e:be:65:be:9c:32:c4:01:e7:a0:99:5d:81:25:41:
                    6d:09:5f:f5:81:b6:a8:0d:bc:4a:f1:9f:e5:a3:f6:
                    b8:af:89:cb:1b:e7:6e:1c:f4:5f:b6:60:17:7a:3f:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:19:4A:98:9C:87:EC:CB:A5:04:3B:4F:C3:F3:F5:D5:0C:7E:CB:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:2c:08:e9:72:04:3a:50:ef:09:91:da:4e:c3:43:fc:3b:
         c6:6a:e6:3f:4b:e4:79:3f:cf:8e:e0:d7:7b:6b:a5:15:34:21:
         b0:71:74:20:61:ec:0b:f1:a0:85:67:79:38:ed:44:3b:20:69:
         c4:d4:19:85:76:bb:d9:05:85:54:63:4c:6e:1a:5c:35:ae:c4:
         30:c0:92:a5:c8:6f:4e:3f:71:0e:f9:32:de:cc:88:0b:b9:d2:
         11:ae:6e:bb:9d:4e:4a:52:85:3b:15:77:dc:15:0c:4c:e2:25:
         4f:8c:fc:59:53:a4:1f:41:30:9e:99:e5:11:b6:92:56:eb:3e:
         eb:42:db:11:9a:3e:34:70:ba:87:09:f1:f6:7b:cb:89:79:9b:
         59:7c:71:20:af:00:67:79:2e:e2:d9:dc:2c:78:ac:e3:d5:51:
         82:b8:c8:1c:c5:33:9c:88:d7:71:f6:63:a5:52:7a:84:90:19:
         31:49:ae:a7:b8:1c:7c:3d:f9:cf:a7:0b:da:cd:50:75:9d:ce:
         18:b2:29:58:47:16:c8:6d:56:d9:18:f6:0c:55:a1:fe:92:5a:
         40:4d:f1:d8:aa:30:d1:15:b3:b8:d0:a5:cd:e7:32:09:01:5a:
         c3:b6:1c:68:0d:20:6d:6b:9f:cd:61:ef:6d:0e:d0:2c:86:3c:
         b1:b0:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:27 2024 by rpki-client on console-ams.rpki-client.org