Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa
File:                     c9dd7a45-36e9-37a5-9068-6420d65d9719.roa (raw, json)
Hash identifier:          vVVDg7v3olr3/kiH0mvjs2z2MKIubFBmvj338Es5tbs=
Subject key identifier:   ED:E2:EF:32:C8:CD:32:D8:59:A4:42:A4:C3:46:2C:2E:FD:E0:2E:CB
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285848EC968E0C8CDC416DCE149980
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        129.33.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:8e:0c:8c:dc:41:6d:ce:14:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=4ecef5ad-7f8b-4db7-bc79-43ad9fddb3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:06:7c:65:ac:42:75:86:1b:f7:d2:10:56:
                    59:f9:71:ac:8b:e8:38:69:f8:a7:9f:e2:a7:b6:a2:
                    9b:1d:8e:04:36:96:c3:ab:cb:c6:44:ac:08:40:79:
                    4c:8b:68:b4:a0:49:c5:63:28:64:29:df:45:fa:30:
                    34:5a:9a:3d:75:ec:0e:2f:5c:11:8b:0e:eb:e9:d2:
                    fb:07:76:9d:28:dc:b8:9f:35:48:e9:58:ef:da:87:
                    8e:55:45:a8:7e:a4:c0:a1:58:34:12:a1:35:5e:8a:
                    74:f0:97:ba:88:51:62:88:79:70:15:f5:6b:7b:c3:
                    96:df:3f:4c:58:ee:69:1b:b7:66:3d:b4:62:a0:cd:
                    f9:c8:74:87:6b:f8:0d:fc:29:c0:b4:44:0f:63:78:
                    47:41:7c:03:2d:35:28:bf:68:0d:ff:dd:6e:8c:b0:
                    19:47:b4:aa:da:fb:b8:10:d5:98:e3:69:8f:04:8e:
                    1f:65:6e:b5:df:8c:fd:e1:a4:01:ba:a8:89:cf:77:
                    ad:a9:bc:79:01:8c:94:1e:9a:80:52:4b:23:69:09:
                    19:dd:52:f7:04:fb:74:c9:20:3a:af:48:03:7c:18:
                    09:ef:dd:50:9f:88:3e:0d:ee:96:49:43:3d:de:3f:
                    52:55:54:f6:73:a6:52:fe:10:a6:4a:c9:0e:04:b8:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E2:EF:32:C8:CD:32:D8:59:A4:42:A4:C3:46:2C:2E:FD:E0:2E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.33.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:13:e2:25:1d:b3:b0:3e:0b:18:c1:98:d2:9c:d1:e1:eb:
         7c:8e:c3:8a:69:37:0d:32:f6:6c:14:06:a1:88:82:aa:65:c4:
         32:fc:c7:67:0d:ca:63:e4:3b:25:7d:53:57:fc:89:dc:9e:e2:
         4d:ac:a6:c1:67:29:1f:08:0b:86:bd:99:5c:cc:fa:dd:b5:72:
         32:55:28:46:ac:79:ed:16:9e:97:31:76:b9:5b:c8:9a:c7:6a:
         2c:fd:16:3b:b5:d3:fd:c2:3c:17:03:55:2c:cd:cd:b2:9f:2c:
         6f:08:24:af:a9:37:9e:bb:9b:f2:ce:d7:3d:39:d1:89:df:ad:
         4a:0a:58:73:09:93:33:a3:d4:72:00:2e:a0:76:df:39:e6:39:
         49:56:7c:83:a7:9b:7d:80:b7:b4:2d:aa:39:76:6b:da:35:8f:
         29:22:80:77:62:71:96:ed:47:fb:2e:18:82:33:c8:87:55:48:
         8a:e9:93:ea:50:47:a1:2d:d5:74:b3:04:3e:6d:8a:83:58:1f:
         51:43:cb:79:c2:59:3b:66:27:52:8f:37:5f:a3:5f:24:58:cf:
         89:d5:76:d5:b8:ff:9f:75:e3:c9:5a:ca:4f:52:d2:7d:93:0d:
         92:15:9a:52:1b:65:b7:51:30:b3:fe:10:cf:a6:af:58:13:7a:
         59:be:78:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:33:48 2025 by rpki-client