Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25483ce1-289a-3987-973e-237a84ba075f.roa
File:                     25483ce1-289a-3987-973e-237a84ba075f.roa (raw, json)
Hash identifier:          OsOIkWRc1Z6EpnBfoZNSHXhdFWv6I5NCT6n8ajZ/OXU=
Subject key identifier:   F9:31:4F:84:F7:A2:24:CE:92:9B:CD:20:52:01:ED:CE:20:AB:20:29
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462678A0E562FD9F0FAC3620
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25483ce1-289a-3987-973e-237a84ba075f.roa
Signing time:             Wed 20 Mar 2024 20:50:10 +0000
ROA not before:           Wed 20 Mar 2024 20:50:10 +0000
ROA not after:            Tue 18 Jun 2024 20:50:10 +0000
asID:                     15169
IP address blocks:        142.250.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:78:a0:e5:62:fd:9f:0f:ac:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:50:10 2024 GMT
            Not After : Jun 18 20:50:10 2024 GMT
        Subject: CN=4839554d-588b-4987-ac23-7494640576da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:cd:89:66:12:fa:a8:b3:84:f4:a2:71:28:
                    37:53:4f:6e:de:0e:a4:5a:bf:76:93:42:37:4d:21:
                    63:bc:e7:8f:68:a4:42:ae:64:1c:d6:e3:02:ed:37:
                    d8:a7:17:3d:2b:72:d4:b8:b6:c2:16:4d:81:f2:70:
                    53:b1:44:7d:06:40:32:88:9c:46:6b:74:c2:c2:c9:
                    4a:50:85:e6:a3:df:bb:45:f0:99:12:ac:e0:40:33:
                    46:e8:2c:51:ce:7d:62:ab:48:54:46:08:78:84:ff:
                    6e:02:c9:f3:9a:ab:6d:e6:76:4b:15:21:36:67:a4:
                    d4:97:e2:73:95:07:c5:f5:71:d2:0b:91:3a:f0:c8:
                    35:ff:d6:35:85:e2:1c:58:79:e5:45:ae:6d:2a:80:
                    68:6a:4c:3c:6e:f2:88:53:23:25:2b:6d:24:00:d9:
                    fb:9a:2f:be:c6:df:be:68:be:88:e5:16:6c:30:15:
                    6b:00:da:39:cb:4c:b8:1b:2d:88:04:45:f2:12:27:
                    65:f2:34:57:fd:e8:d8:04:78:36:92:13:3b:4e:76:
                    94:a3:7b:ff:d4:68:7b:56:19:e0:1c:6f:cf:61:7a:
                    9e:e4:c9:0d:56:a0:03:c3:48:d0:62:3c:56:d2:68:
                    db:51:52:80:19:f6:c5:e8:c4:b6:33:31:2c:77:a1:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:31:4F:84:F7:A2:24:CE:92:9B:CD:20:52:01:ED:CE:20:AB:20:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25483ce1-289a-3987-973e-237a84ba075f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:47:0d:1d:09:66:04:88:6c:d5:25:41:d7:28:2e:e4:13:
         ec:46:33:05:8a:6d:05:58:58:ca:a1:b1:e9:be:d7:5e:4a:97:
         75:d5:2e:8b:23:a9:8d:f7:ef:39:29:ba:13:5c:52:d7:ae:a9:
         a2:eb:cf:9f:13:61:7f:2d:ba:52:db:90:f9:e9:7d:23:cc:1f:
         55:5e:26:ba:2f:88:af:15:9d:7d:84:33:2f:a5:16:3d:4c:a8:
         ab:0d:80:04:0a:72:5f:cd:3c:ec:8a:d9:c2:c3:1c:cc:11:c4:
         eb:37:6b:2c:4a:6c:cb:11:cf:03:12:1d:10:c9:9e:5c:ca:e4:
         e6:99:c4:d4:44:da:77:cf:ae:32:8b:57:b8:5a:35:64:85:7f:
         83:66:bc:30:53:38:25:14:9a:2a:d8:78:54:d0:a0:8f:e8:7c:
         db:bb:73:65:3f:30:53:59:ef:f8:34:cc:b0:0a:15:96:0d:2b:
         2a:64:5b:f9:05:14:66:d6:7d:a7:71:4a:eb:ba:a6:3c:fa:96:
         a8:b9:dc:d4:74:62:82:e6:1d:a3:71:b9:11:32:fa:11:24:c9:
         93:9c:14:40:35:e5:5b:88:8e:13:6f:cf:fc:1a:72:f6:61:18:
         26:37:6b:5a:40:80:4d:9c:2c:4e:a9:cc:2e:f1:aa:61:ae:65:
         48:f0:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:52:18 2024 by rpki-client on console-ams.rpki-client.org