Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa
File:                     aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa (raw, json)
Hash identifier:          PtECYOYYMJFuoMNcMFLeedoB2se+dhh7IHSkwaG4ABI=
Subject key identifier:   4E:E9:0F:F6:C0:EE:CC:38:EE:99:BD:B7:D4:BE:D8:35:75:6C:90:BC
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858456C53147F5E54E7994D67FAC0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        129.41.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:14:7f:5e:54:e7:99:4d:67:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=756b17fd-69af-46ab-b63a-887c8a9528d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:dd:c6:ab:15:7b:86:82:d1:04:23:61:51:
                    22:fd:55:24:54:39:b4:9d:40:db:9a:4c:a0:84:10:
                    c4:a6:40:ba:73:75:6c:48:96:54:33:35:df:71:78:
                    2b:0e:04:53:3d:b2:4f:5a:3b:0b:f2:7f:7b:8c:d5:
                    3c:e8:4f:ba:e6:6a:38:90:74:6e:aa:50:3d:cd:73:
                    e4:43:07:b3:34:4f:e9:96:e2:5f:92:e5:c9:44:d2:
                    1b:9a:60:af:07:0e:9f:bb:53:e8:67:2d:97:01:14:
                    39:3e:05:e9:bb:7d:ef:c6:f4:83:93:09:7d:66:f0:
                    62:34:d2:98:6a:c5:88:78:20:88:9c:d7:18:e0:3f:
                    1e:7d:8e:5d:61:29:4b:68:b2:c6:69:19:5e:f3:05:
                    d9:34:86:a9:e7:7e:0c:d3:7a:57:b9:54:d7:6a:e2:
                    6e:b3:21:85:0a:ff:a4:18:4a:24:6a:29:f4:a5:9b:
                    8f:c7:f2:2b:2e:c5:a1:19:cf:bd:78:f0:e2:03:4e:
                    be:1f:0d:47:f1:50:64:57:d9:11:d1:5f:55:5f:3d:
                    89:bf:6d:35:01:c1:71:20:88:bc:ae:06:59:b4:37:
                    48:0d:37:3c:4d:68:d8:5d:1b:c2:2e:b5:4c:a3:53:
                    db:2a:0a:e6:41:de:e5:79:f5:f2:b0:fd:e2:34:a9:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E9:0F:F6:C0:EE:CC:38:EE:99:BD:B7:D4:BE:D8:35:75:6C:90:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:5c:7f:46:6d:89:9b:e8:63:09:66:a0:78:4e:de:00:22:
         39:b6:5f:2a:8a:f9:17:0e:d3:e1:f6:0e:bc:b5:3c:77:20:bd:
         86:a7:74:7c:6a:ab:7c:ba:a9:38:9f:88:4c:6b:eb:d8:2c:91:
         58:01:81:9d:36:48:d0:0b:49:a9:fa:42:c7:76:dd:17:b7:93:
         66:c7:b5:ff:b3:5c:50:2f:c2:ab:7d:4f:b6:6c:fe:a4:5b:79:
         8a:4b:0c:7a:be:a0:bc:1b:a6:31:54:43:28:f5:1d:7f:99:45:
         ca:2b:93:5c:c1:b1:56:0c:92:61:08:5d:4b:18:35:e7:14:92:
         78:a1:f9:da:2b:8f:2d:10:21:5e:31:1b:f9:19:72:ba:ca:7c:
         e0:91:8b:65:77:04:72:57:0f:82:41:22:eb:7e:b3:92:eb:97:
         0c:22:fa:0d:03:c4:c3:f4:df:c3:2e:08:44:86:c5:5b:de:32:
         05:2a:0c:99:57:64:13:74:eb:29:85:df:0a:38:7d:8b:6d:44:
         1c:e4:f9:e7:fa:79:93:e5:f8:2b:c9:6f:68:83:32:e1:f5:1e:
         07:5a:f5:6c:2b:7b:94:4a:e8:b9:aa:13:56:6f:ba:2c:0f:a9:
         0f:ab:6b:d4:3e:3f:5d:e8:7d:df:f7:7b:06:3c:10:4b:eb:b7:
         e5:95:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:11 2024 by rpki-client on console-fra.rpki-client.org