Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa
File:                     237250b7-86de-3771-94f1-0e5037bc3109.roa (raw, json)
Hash identifier:          RNuObRZUHKw5FdNfShAjHJnQlH8dUmiffPXh3JTv+88=
Subject key identifier:   4F:E8:73:16:2E:CE:43:66:E7:12:E9:DE:92:9E:58:02:FC:B9:BA:34
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454623B8D31FF45A93E4D90700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa
Signing time:             Wed 20 Mar 2024 20:44:38 +0000
ROA not before:           Wed 20 Mar 2024 20:44:38 +0000
ROA not after:            Tue 18 Jun 2024 20:44:38 +0000
asID:                     15169
IP address blocks:        142.250.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:b8:d3:1f:f4:5a:93:e4:d9:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:44:38 2024 GMT
            Not After : Jun 18 20:44:38 2024 GMT
        Subject: CN=0025ac8e-8e52-482c-8313-0476dfb98a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:f8:98:c7:2d:65:3d:10:d2:80:08:55:06:
                    2c:1e:1b:1a:1c:17:4c:72:80:a2:99:08:59:71:7a:
                    c2:e2:c3:79:54:db:76:bf:e7:82:8f:2d:7f:65:20:
                    bf:bd:f9:c6:ea:df:a6:43:de:91:87:ec:4a:01:ba:
                    b4:96:73:a3:1a:3c:01:a1:15:e5:df:64:d1:13:f4:
                    06:c7:6d:ac:a4:18:f6:10:84:e2:57:c2:9c:90:96:
                    c5:db:00:86:06:aa:28:75:7c:e1:68:50:7e:68:99:
                    29:8c:75:06:1e:24:b8:cf:b3:b7:2c:3a:fc:9d:eb:
                    a3:8e:b9:64:6c:fd:9a:e4:a5:01:db:99:88:42:06:
                    c9:bc:c6:cc:2f:14:03:cf:8a:85:99:14:76:67:c0:
                    6f:4a:5c:e9:c8:19:36:62:c5:e4:bf:53:40:23:24:
                    74:30:c5:d5:3c:e8:63:cc:ce:2f:55:07:7b:71:5c:
                    f0:13:e1:be:82:77:09:d3:0b:f3:22:a4:8f:48:5d:
                    d9:5c:6c:27:f1:c7:92:a0:a1:c8:81:c4:56:0c:31:
                    a1:29:50:3a:8a:e8:d7:08:07:81:53:42:50:e2:9b:
                    3b:74:ba:f5:a3:69:f3:b5:21:36:41:2c:40:65:d7:
                    38:b3:bc:e0:9b:93:3f:b4:8a:d8:65:7c:5e:cf:05:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E8:73:16:2E:CE:43:66:E7:12:E9:DE:92:9E:58:02:FC:B9:BA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:f7:ec:e4:b1:ab:03:eb:4c:8f:ba:e0:db:fa:c3:97:da:
         90:25:34:b9:68:0f:0d:38:b6:17:5b:c2:7d:58:49:e8:89:04:
         5e:9a:c2:b3:df:6f:9f:70:c5:ec:75:2c:f8:63:87:38:74:19:
         74:c6:6d:25:85:95:23:49:ea:7b:84:5a:0c:17:11:c0:28:7e:
         8d:2c:b2:0d:88:11:97:c4:4a:9c:29:64:79:fb:db:c9:dd:86:
         5e:3d:e0:80:c2:0c:90:59:1f:a8:80:17:49:02:7e:6f:2e:b6:
         37:58:a6:81:52:9f:69:9c:ee:38:a0:f2:4a:43:cd:84:ab:13:
         44:0a:24:b9:a7:44:79:4b:24:e5:3d:31:3f:d3:b5:d6:ce:4f:
         6e:ac:65:ed:79:ae:bf:75:e8:44:f7:a5:6b:c9:89:f2:52:93:
         f4:98:14:c1:2b:1d:f2:da:1b:0c:db:61:7f:99:8c:e1:94:1d:
         cb:b6:62:c1:12:b3:05:cc:dc:db:0e:18:0f:e0:5a:97:b8:29:
         d2:03:32:74:e0:fc:a7:dd:af:a3:9d:34:3c:2f:06:6b:27:c5:
         8f:5e:e0:51:f0:03:27:2d:89:0e:8e:33:8f:b5:11:5f:76:0f:
         54:4f:dc:a8:85:56:05:15:83:d2:5e:b5:35:1a:d9:45:8e:e6:
         2f:4a:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:38 2024 by rpki-client on console-fra.rpki-client.org