Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa
File:                     b336070a-6543-35fe-95ed-f03fdfb0f671.roa (raw, json)
Hash identifier:          LbnCtgis/FXbGBZ8vWm+Qx0X6s/ps6zpPCLdIBsnPHQ=
Subject key identifier:   E5:EC:4C:2C:22:BD:A3:12:38:1E:73:01:07:D1:E7:77:95:64:B4:7C
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858472C65D19AF2F22F5C8F28B180
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        129.33.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d1:9a:f2:f2:2f:5c:8f:28:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=1f11e79e-5279-4571-8bf9-6d948fe94c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5e:6e:02:67:e5:4b:af:f9:51:bc:b3:cb:4a:
                    f8:a1:c9:a5:14:d3:58:df:32:79:9f:b3:8b:7c:14:
                    5c:92:11:c7:42:c6:08:10:cb:11:3f:8c:3b:93:86:
                    07:56:31:a3:aa:64:9e:8e:5f:5c:26:67:cc:05:8b:
                    2c:e8:69:b5:88:c7:80:b0:4c:eb:78:8f:21:e7:87:
                    8d:25:e3:e8:61:49:60:6e:74:e8:46:c2:aa:d4:87:
                    27:e6:05:cd:09:53:19:16:ae:d6:b6:37:cf:e9:2e:
                    62:fd:b2:41:a9:40:8f:cb:ba:cd:2e:59:41:f8:d7:
                    c3:49:de:8d:ea:23:8b:f1:2d:33:4b:06:f6:4d:a2:
                    c7:74:02:89:7f:94:61:10:be:8b:16:a6:ea:48:0b:
                    08:cb:64:55:9c:87:33:d9:3f:e3:b6:37:22:0b:3b:
                    99:3f:b8:02:a4:5d:02:02:57:e0:5f:71:76:49:9f:
                    a0:36:f4:d1:38:61:df:80:e9:a6:79:ff:9d:02:53:
                    ca:13:79:a0:2c:b3:7e:69:6f:68:f5:0e:20:59:ea:
                    cb:eb:dc:ac:b5:88:31:35:11:ee:3a:5a:a5:36:bb:
                    ce:87:c5:82:92:b0:fc:8b:b2:b2:7c:4a:57:40:5b:
                    7d:d8:84:b9:15:8f:99:8d:5d:2f:ba:de:ff:17:df:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:4C:2C:22:BD:A3:12:38:1E:73:01:07:D1:E7:77:95:64:B4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.33.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c8:e7:e5:4f:b9:40:c3:b2:da:68:ba:98:e2:2b:8f:5e:71:
         dc:60:bc:94:b0:99:0d:d7:77:ae:aa:60:d6:6e:d0:2c:6e:a9:
         e1:d0:17:18:62:74:46:5f:91:5a:7f:38:f0:ba:ff:24:00:7f:
         6b:d2:82:9d:b9:f2:4c:9d:44:81:f4:16:66:0b:d0:f0:01:f5:
         d4:02:b1:85:6e:97:90:9f:2e:51:56:42:de:e1:8a:f4:2c:81:
         94:f6:47:59:87:72:71:be:07:a7:4c:c2:1a:9e:8c:f6:35:3d:
         de:c5:1f:78:35:98:c0:0e:ea:a4:1f:dd:03:2d:4a:7a:4a:c0:
         5e:9c:6b:dd:71:cf:d2:6f:29:4c:a2:cb:17:d9:b8:b2:fe:70:
         31:c7:ad:a5:39:cb:c8:2c:ac:6e:c8:1e:0b:79:e5:dd:a5:7d:
         a5:b0:2f:9a:20:4d:04:08:1a:7d:b3:4a:4d:33:e2:49:0c:43:
         3b:d6:d7:bd:71:78:fc:a8:50:5b:7d:ed:b7:5b:be:05:5a:4e:
         bc:8d:0e:fb:4a:7f:1d:62:fe:c8:b0:fe:5c:3c:3f:3e:aa:df:
         70:56:b3:6a:b0:a1:95:86:e3:a7:53:d0:b1:28:41:45:70:b3:
         8f:ca:ff:01:0f:a1:a4:75:ad:9d:40:3e:f6:1e:21:54:6b:76:
         93:83:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:56 2024 by rpki-client on console-ams.rpki-client.org