Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa
File:                     2c82a951-058b-3b7b-89b6-010786c16010.roa (raw, json)
Hash identifier:          FjwCUkYVZySyOesoiZD+fK0rsKmSV/FJDuQGoGo8KSo=
Subject key identifier:   31:86:8D:98:91:D2:D2:FC:90:DA:3A:21:1E:BF:9B:54:AE:63:79:58
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462665A352900ECB90CC3D88
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa
Signing time:             Wed 20 Mar 2024 20:50:01 +0000
ROA not before:           Wed 20 Mar 2024 20:50:01 +0000
ROA not after:            Tue 18 Jun 2024 20:50:01 +0000
asID:                     15169
IP address blocks:        172.253.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:65:a3:52:90:0e:cb:90:cc:3d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:50:01 2024 GMT
            Not After : Jun 18 20:50:01 2024 GMT
        Subject: CN=e1d69b48-1c87-4e7b-8fe0-00b3022e32ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:f1:f1:d9:d4:6b:19:2f:9c:c0:5a:27:25:
                    02:2a:06:eb:bd:6d:52:b3:dc:19:b5:cb:a3:94:57:
                    f1:dc:14:f5:b6:7e:3a:dd:99:be:9a:d4:9b:42:b7:
                    ed:9b:34:50:3d:e8:d1:d2:31:3e:f2:9b:c7:32:2f:
                    0c:cb:11:68:6f:e5:31:91:c8:0f:50:cc:eb:f5:87:
                    3e:15:03:5e:db:16:c7:09:84:29:15:13:00:0d:df:
                    05:fc:67:82:ed:dd:3e:3c:44:95:7e:fd:40:d8:ce:
                    30:9b:2e:a4:ef:f4:fa:da:62:b6:3a:71:a2:13:fc:
                    97:d9:88:d8:81:25:0a:a0:40:13:ed:94:f5:4c:0d:
                    b9:cd:b7:63:c1:95:47:53:91:37:c6:d2:7e:7f:54:
                    89:7d:5e:3e:9c:16:ea:5d:3c:38:97:41:b3:e8:8b:
                    95:ce:5a:34:45:e4:5e:03:7e:23:96:54:0b:e8:c7:
                    be:86:c0:31:06:ff:63:f8:1d:4e:99:17:91:ea:f4:
                    bb:cf:5c:fb:9a:04:10:1f:bf:4f:da:32:52:c1:d6:
                    6c:4d:00:17:6f:26:1a:12:b7:cd:68:49:fc:92:01:
                    c6:aa:25:22:4f:72:73:91:13:df:ab:4d:57:9c:56:
                    49:12:d6:a9:31:0f:80:dd:54:35:a8:8e:e2:ec:ce:
                    ad:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:8D:98:91:D2:D2:FC:90:DA:3A:21:1E:BF:9B:54:AE:63:79:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1f:64:3c:18:22:ed:cf:07:8a:56:11:29:83:df:f3:ab:06:
         94:52:35:54:6d:05:2b:e9:2b:d7:bc:b2:e1:42:e8:1f:88:75:
         42:f8:91:69:37:4b:f8:b3:af:46:6e:dc:6c:1f:44:31:3d:02:
         e1:83:9f:0c:b8:8d:77:ee:ae:c3:f5:3c:47:21:8b:b0:34:29:
         22:52:69:55:a1:d9:74:1f:86:be:0e:13:9a:07:74:1c:07:40:
         57:db:96:e0:e7:c2:ca:d5:f7:49:53:e2:14:2c:c6:b0:4c:b3:
         7c:ac:cb:54:a7:d0:fc:4c:77:9b:63:27:78:8c:4d:db:8a:6b:
         bd:4f:81:b3:92:cb:44:3d:19:19:ad:2e:c4:0b:e4:bc:0b:d2:
         c4:06:ac:76:e1:eb:81:ee:23:db:f1:96:58:fe:6a:b5:fb:88:
         3b:8d:dc:dc:3a:87:1f:c1:65:d6:e2:74:f0:f8:15:30:64:05:
         0e:1c:de:db:7b:8e:ed:92:4b:15:cb:2c:20:ee:48:a4:47:c0:
         37:47:7a:23:61:42:75:ea:50:12:a2:10:21:47:16:3e:29:c6:
         28:a8:ea:ac:b1:d3:bf:fb:3f:d9:74:d9:8c:53:08:ed:41:87:
         cc:41:c0:37:30:e6:d4:fd:3e:71:20:a8:ff:e3:15:96:cc:45:
         0e:e5:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:47 2024 by rpki-client on console-ams.rpki-client.org