Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa
File:                     b336070a-6543-35fe-95ed-f03fdfb0f671.roa (raw, json)
Hash identifier:          LnQObwfBF+jl5jvLDL/OqI1X5ScMpILWlHHghRRwkHo=
Subject key identifier:   09:49:E9:BA:8F:BC:44:D2:A6:FC:8E:87:BA:65:17:DD:64:11:29:95
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858456C5314F02655271DBE3FD500
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        129.33.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:14:f0:26:55:27:1d:be:3f:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=94088f79-8fb0-43e6-841a-ad60dec1f17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:5a:f2:e0:8f:fe:8d:7b:5c:2a:f7:49:f4:
                    01:a0:9b:4b:0a:20:01:99:10:59:70:b0:de:06:ee:
                    f4:28:07:ad:c0:f2:f3:ad:27:26:28:f8:21:68:dc:
                    1a:72:44:9f:18:31:7d:ca:38:1a:85:ca:f4:60:d2:
                    76:2e:e1:be:a5:fd:4b:e0:71:d1:43:28:e4:38:5e:
                    53:87:c6:68:7c:88:5f:b7:74:6b:0a:56:33:7c:9d:
                    0e:1d:8d:5b:64:c0:5c:98:dc:a7:23:15:bc:3f:d0:
                    8f:2e:13:39:8d:6f:7f:e1:c8:eb:7b:22:12:f2:87:
                    fc:62:a4:4b:5f:10:15:31:09:06:77:ce:f0:e6:84:
                    2e:96:d0:c9:26:dd:47:93:c7:27:34:d3:43:9f:03:
                    a8:5d:36:53:13:99:bd:a8:cf:36:c3:94:b3:a7:45:
                    d6:b3:e3:4d:2c:65:b3:86:0c:5c:63:1f:4f:81:19:
                    ed:bc:30:f7:78:ee:04:89:a3:e2:2f:8b:68:b9:7b:
                    f0:52:e5:9f:ec:cc:a6:77:78:68:2a:d3:58:0a:a5:
                    8f:b8:ce:7a:b6:81:d0:8d:c7:20:2b:84:ea:75:76:
                    b2:95:81:57:06:1c:54:19:83:7f:3b:fb:9e:a6:ca:
                    33:96:38:a1:0e:31:a1:0b:1e:b6:8a:62:ba:39:ab:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:49:E9:BA:8F:BC:44:D2:A6:FC:8E:87:BA:65:17:DD:64:11:29:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.33.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:4d:82:78:84:cb:9b:37:42:b1:56:99:6a:d3:4f:fb:87:
         52:e4:ed:37:a4:1d:e4:d6:77:6f:8c:a6:8d:2d:aa:44:e3:ce:
         9b:4f:95:91:9d:0c:22:09:f7:da:5a:e5:49:3e:e3:6c:16:b1:
         f5:08:c5:3c:2a:39:2f:f6:1c:93:79:39:dd:ff:7d:b1:10:5c:
         55:ad:bd:1b:0c:18:8f:c5:ae:c5:95:1d:5d:e1:af:fc:4a:c3:
         81:69:bb:4e:9c:8e:f6:e3:4e:b7:b9:e5:ce:15:ea:5b:72:23:
         9b:52:b7:95:13:bf:96:b8:76:cf:79:09:f5:6f:f9:e7:1e:f8:
         59:e8:19:1d:ea:67:46:ec:55:8d:86:b3:88:b1:e6:64:b3:2b:
         c3:44:0a:58:ac:33:1b:2b:35:1c:86:e9:6a:f8:d3:53:ff:59:
         be:9f:7a:1a:20:02:90:06:88:92:7c:bc:de:88:ea:87:98:f0:
         4e:2b:85:e9:67:56:46:30:84:de:1b:f4:da:93:8a:3c:81:60:
         ab:b5:f9:1c:55:0b:51:c0:74:65:8a:ae:82:89:a1:a2:fa:c7:
         81:6d:20:36:89:70:30:3c:5f:99:0a:80:aa:c7:dc:19:dd:1e:
         d8:34:3a:50:ad:3c:5a:05:a9:3d:72:19:ea:d5:b1:f4:1c:f7:
         29:de:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:01:38 2024 by rpki-client on console-ams.rpki-client.org