Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/19ffba9f-9e66-3e1c-ae00-48f3040ae0b8.roa
File:                     19ffba9f-9e66-3e1c-ae00-48f3040ae0b8.roa (raw, json)
Hash identifier:          ZxHtYAYGXVkBwr87kqWnLbnyUoiReZhiB+ON6uJNDrc=
Subject key identifier:   DD:F0:1E:57:54:7D:63:43:CD:F0:D0:2D:D8:1B:55:3E:F7:F0:D4:2C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F036E17DB088EF5D3C17E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/19ffba9f-9e66-3e1c-ae00-48f3040ae0b8.roa
Signing time:             Fri 29 Mar 2024 18:34:47 +0000
ROA not before:           Fri 29 Mar 2024 18:34:47 +0000
ROA not after:            Thu 27 Jun 2024 18:34:47 +0000
asID:                     15169
IP address blocks:        142.251.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:03:6e:17:db:08:8e:f5:d3:c1:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:34:47 2024 GMT
            Not After : Jun 27 18:34:47 2024 GMT
        Subject: CN=6d0ff4a0-9ea2-4ea3-86cc-0ede82b5945e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:54:be:83:c2:41:09:b7:87:a6:71:34:50:
                    21:e7:83:a6:93:bc:8e:07:c4:2e:b3:b6:77:ec:8d:
                    62:f2:75:03:4a:26:d3:a3:76:06:36:27:4d:9f:18:
                    79:77:c6:eb:c0:06:98:cb:88:ae:9f:53:92:b5:f5:
                    42:20:38:f9:70:31:c3:7d:bb:ca:27:b9:0f:98:59:
                    05:5c:85:bb:bc:90:66:6a:83:b1:7b:14:82:22:71:
                    b4:51:69:58:55:40:74:26:20:d4:16:0e:63:7e:f5:
                    3a:d5:a8:20:be:34:68:a8:fc:cc:ff:22:9f:8d:76:
                    9c:3c:3e:f4:b7:95:b2:4c:b5:a1:b7:9c:3c:49:5b:
                    0c:ab:6b:3b:a6:15:bd:db:19:8d:54:23:04:fd:97:
                    bb:93:db:29:80:a0:a0:bf:1c:86:e6:3d:1f:ec:62:
                    9f:79:c7:4e:8c:55:be:66:7b:b5:b1:23:39:58:1a:
                    12:f0:c1:11:ed:60:18:83:0b:b9:90:f8:58:b3:b7:
                    11:e2:11:3d:b3:c4:e3:ef:09:9b:8f:5a:48:f2:05:
                    3a:69:6f:d1:49:89:d9:c9:34:b2:a3:74:35:65:4f:
                    7c:18:be:a5:51:ff:94:54:df:48:38:d2:50:7a:4e:
                    2b:b6:27:2d:4a:01:a1:58:2a:dd:ad:3f:26:da:f4:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F0:1E:57:54:7D:63:43:CD:F0:D0:2D:D8:1B:55:3E:F7:F0:D4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/19ffba9f-9e66-3e1c-ae00-48f3040ae0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c8:76:b0:76:ff:af:82:ff:d6:38:cb:fa:c4:d1:91:e3:8e:
         67:61:d9:90:85:e3:e7:0a:53:72:87:c2:29:92:ca:f1:ce:35:
         93:7f:52:a5:9a:51:b7:de:a0:6d:bf:0f:ba:11:7b:63:e4:2f:
         52:15:b2:79:be:a7:ec:7c:2d:78:eb:48:d2:a7:06:fe:5e:7f:
         3e:b9:66:b6:a6:b4:01:e4:09:0f:31:e2:ea:30:e2:c7:f1:8c:
         6a:14:fc:c7:ff:1c:3d:c4:15:65:38:3a:3c:c7:2a:a3:b0:b4:
         eb:10:75:7a:ff:9d:cd:11:88:66:60:54:ca:20:91:91:ef:1b:
         83:b4:83:4d:cc:17:49:91:3d:27:78:c4:68:b5:69:2b:5f:12:
         5f:0b:da:f4:29:fa:88:df:e9:9f:33:d8:58:a8:f1:99:ad:5d:
         2d:86:e7:c2:bd:cf:68:56:a9:cb:4a:ec:0a:f4:fc:9b:09:e8:
         08:5e:3c:bd:15:ea:18:64:9a:78:42:29:2e:e4:e7:54:1e:29:
         53:73:52:06:3a:a4:6b:10:af:fb:59:3d:3b:60:9a:11:52:d1:
         a0:b0:93:4d:4f:77:30:b3:a0:15:f6:77:4f:88:cc:ce:30:cf:
         65:09:79:d2:7a:7d:2d:77:42:36:4f:48:9c:87:6d:11:57:de:
         dc:73:b6:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfA24X2wiO9dPBfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMyOTE4MzQ0N1oXDTI0MDYyNzE4MzQ0N1owLzEtMCsGA1UEAxMk
NmQwZmY0YTAtOWVhMi00ZWEzLTg2Y2MtMGVkZTgyYjU5NDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0BUvoPCQQm3h6ZxNFAh54Omk7yOB8Qus7Z3
7I1i8nUDSibTo3YGNidNnxh5d8brwAaYy4iun1OStfVCIDj5cDHDfbvKJ7kPmFkF
XIW7vJBmaoOxexSCInG0UWlYVUB0JiDUFg5jfvU61aggvjRoqPzM/yKfjXacPD70
t5WyTLWht5w8SVsMq2s7phW92xmNVCME/Ze7k9spgKCgvxyG5j0f7GKfecdOjFW+
Znu1sSM5WBoS8MER7WAYgwu5kPhYs7cR4hE9s8Tj7wmbj1pI8gU6aW/RSYnZyTSy
o3Q1ZU98GL6lUf+UVN9IONJQek4rtictSgGhWCrdrT8m2vSbxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3wHldUfWNDzfDQLdgbVT738NQsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTlmZmJhOWYtOWU2Ni0z
ZTFjLWFlMDAtNDhmMzA0MGFlMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACfIdrB2/6+C/9Y4y/rE0ZHjjmdh2ZCF4+cKU3KHwimSyvHONZN/UqWa
UbfeoG2/D7oRe2PkL1IVsnm+p+x8LXjrSNKnBv5efz65ZramtAHkCQ8x4uow4sfx
jGoU/Mf/HD3EFWU4OjzHKqOwtOsQdXr/nc0RiGZgVMogkZHvG4O0g03MF0mRPSd4
xGi1aStfEl8L2vQp+ojf6Z8z2Fio8ZmtXS2G58K9z2hWqctK7Ar0/JsJ6AhePL0V
6hhkmnhCKS7k51QeKVNzUgY6pGsQr/tZPTtgmhFS0aCwk01PdzCzoBX2d0+IzM4w
z2UJedJ6fS13QjZPSJyHbRFX3txztuQ=
-----END CERTIFICATE-----
Generated at Fri May 17 22:52:18 2024 by rpki-client on console-ams.rpki-client.org