Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/54a44c7e-b500-3620-b0c5-26debd70e0b0.roa
File:                     54a44c7e-b500-3620-b0c5-26debd70e0b0.roa (raw, json)
Hash identifier:          R+buiMzaYuar+5abOAtCyKPSCTh9OhBO8els2xZlbPg=
Subject key identifier:   D6:5C:03:A2:80:7C:C6:EF:62:8E:3C:AC:B0:F9:3E:C1:F4:00:6D:15
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462CC4E4F115041822D62C40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/54a44c7e-b500-3620-b0c5-26debd70e0b0.roa
Signing time:             Wed 20 Mar 2024 21:02:52 +0000
ROA not before:           Wed 20 Mar 2024 21:02:52 +0000
ROA not after:            Tue 18 Jun 2024 21:02:52 +0000
asID:                     15169
IP address blocks:        142.250.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2c:c4:e4:f1:15:04:18:22:d6:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:02:52 2024 GMT
            Not After : Jun 18 21:02:52 2024 GMT
        Subject: CN=a75d6dfa-c278-4f27-9dc1-6a4bd0a41f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:eb:73:7a:33:53:60:be:15:51:a3:2a:7e:
                    63:70:ac:81:62:26:e1:1e:00:a2:da:f6:cf:7b:1a:
                    73:ac:e6:59:1f:16:a5:36:58:ca:1e:29:94:9d:da:
                    6d:c8:5c:6b:46:5e:86:89:10:2b:f2:07:dd:16:6d:
                    49:d3:77:c7:a8:75:bf:b4:fa:9a:b4:1f:5a:99:92:
                    2e:5d:73:96:e3:a7:c4:61:b2:5c:37:af:cb:a1:bb:
                    48:7e:89:bd:6a:20:39:05:ff:5a:06:f3:60:35:90:
                    96:0c:80:b8:5e:97:1a:09:a1:bc:bc:4e:5f:a4:cb:
                    a9:cc:0c:57:8c:61:ba:e3:1d:6b:22:7d:fa:8d:96:
                    94:3e:8c:44:99:9c:11:ad:e5:ae:73:5d:39:ab:dd:
                    d9:b9:dc:38:e5:57:91:a1:0c:32:e4:44:07:0e:b6:
                    5d:d5:63:d1:c0:ee:3a:70:0f:b8:95:58:83:ec:65:
                    a6:5b:77:26:68:f0:fa:a2:8b:51:cc:b5:a2:d7:6a:
                    29:30:58:01:b0:9b:86:a2:fc:49:9a:95:0a:c1:e4:
                    ff:f8:0c:88:a9:e3:8c:56:87:67:95:8b:28:5d:44:
                    85:6f:cc:c0:32:ce:a1:77:0c:9e:b6:c2:cb:6b:20:
                    6c:62:16:aa:7a:28:e1:fd:2d:53:06:48:69:bd:45:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5C:03:A2:80:7C:C6:EF:62:8E:3C:AC:B0:F9:3E:C1:F4:00:6D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/54a44c7e-b500-3620-b0c5-26debd70e0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:f7:8f:98:c4:d4:53:7d:3f:a1:16:df:6f:fd:b4:24:74:
         42:93:af:cf:e2:18:b3:9b:84:29:4f:14:c8:69:05:ec:33:a5:
         4d:02:7b:e4:72:e9:5a:23:c6:4b:70:d8:d9:4a:b6:bf:94:38:
         b3:0f:07:26:b8:57:d2:b0:6d:44:aa:71:3a:46:fa:7e:9c:52:
         07:b3:86:77:36:ec:f4:65:11:f0:55:bd:32:d2:ed:36:f5:55:
         bf:96:69:91:ab:6b:5a:ca:08:3f:49:80:5d:ba:66:a3:d3:3e:
         3d:00:c7:89:1c:a5:94:bd:a6:75:cb:4d:78:c1:46:30:c5:57:
         43:b6:19:a5:7c:65:7e:af:4f:3d:5e:fb:d3:07:9d:c1:72:e2:
         cf:48:1c:62:93:58:b2:b3:73:a9:09:94:3b:d2:2b:b7:2d:ce:
         e8:e1:13:ae:9b:90:f0:a1:35:4f:2d:dd:70:a8:4f:52:fa:95:
         e1:6c:da:87:77:26:ec:24:f5:ef:9d:b1:36:46:7f:fe:71:04:
         0d:6c:a5:0a:2e:8b:ae:3d:db:89:6b:6e:34:43:90:27:d8:f9:
         84:11:8e:62:6e:d2:45:10:7a:9c:e1:80:b8:49:f1:00:9a:6a:
         0b:13:bb:29:34:0e:3d:3b:d0:c5:a4:eb:0c:76:e8:1f:9c:d6:
         e3:29:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:39 2024 by rpki-client on console-fra.rpki-client.org