Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa
File:                     8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa (raw, json)
Hash identifier:          i2P836P3zxPyDMZJUmJkOKX1zxie8Zr2pYn6ErHYSWA=
Subject key identifier:   7C:E6:F4:A9:E5:9A:CF:DD:8D:7E:5F:06:D0:A2:C5:7A:B5:26:C8:B4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454628A2B1A38B4F3ECF12D000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa
Signing time:             Wed 20 Mar 2024 20:54:32 +0000
ROA not before:           Wed 20 Mar 2024 20:54:32 +0000
ROA not after:            Tue 18 Jun 2024 20:54:32 +0000
asID:                     15169
IP address blocks:        142.250.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:a2:b1:a3:8b:4f:3e:cf:12:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:54:32 2024 GMT
            Not After : Jun 18 20:54:32 2024 GMT
        Subject: CN=036d0aef-242b-4673-8cea-7beefc6b1e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bd:92:18:c1:d5:40:3b:0b:1e:ea:b8:34:6c:
                    67:96:a8:7f:71:25:8c:b8:77:30:e3:31:0b:6b:c9:
                    fd:07:f3:08:74:bb:ed:84:43:63:fa:14:02:2b:79:
                    e1:2c:d7:2c:fd:7c:6f:f6:3c:77:d1:71:ef:5f:3c:
                    8f:7b:78:ec:93:44:7f:99:f1:b5:57:21:76:ba:a6:
                    17:e6:22:f6:d4:99:9b:2b:00:4c:a5:97:b9:43:51:
                    8d:54:4a:d7:e8:c6:b5:96:7a:5b:9d:a8:27:b5:aa:
                    1d:c4:11:1c:8f:4e:cc:2d:7f:ee:c6:f7:5c:37:ec:
                    a5:84:54:97:62:e6:b4:08:7b:2f:02:fe:01:7d:bd:
                    c5:de:55:be:14:f3:15:70:0a:3f:b6:6e:6b:de:2c:
                    e1:dc:b7:2e:38:2a:dd:77:05:67:8b:bf:f1:e1:59:
                    9d:ef:5e:0c:a6:f2:a8:b5:a6:f6:70:e3:df:c6:f6:
                    12:a5:d3:33:85:5b:6c:d8:a1:76:5b:97:55:b5:3a:
                    64:13:34:5e:55:85:9d:55:71:d7:79:f7:8f:d9:d8:
                    e4:16:c9:db:c2:6f:37:50:86:6a:1a:0f:40:db:10:
                    3d:59:a6:a9:1b:07:37:39:34:b1:42:ed:ed:9e:2a:
                    73:5a:c2:8f:e7:95:e9:d5:19:1e:1e:8b:5c:16:34:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E6:F4:A9:E5:9A:CF:DD:8D:7E:5F:06:D0:A2:C5:7A:B5:26:C8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:70:54:58:cb:d0:e5:2f:1f:45:48:e6:8f:23:ec:85:1b:e6:
         6d:20:05:6a:34:e4:c3:59:86:dc:55:b7:df:a7:0a:f2:ee:22:
         1b:61:07:57:fb:3d:85:f4:45:b2:fa:d2:b6:f8:21:9f:19:69:
         8a:55:ae:da:58:d1:ec:c8:0e:48:22:4b:f8:36:ae:4f:f9:d2:
         50:20:f3:1d:91:72:af:0f:e1:d9:7f:14:32:a8:07:d7:fd:81:
         e1:cf:28:d3:f8:3a:7b:1e:37:ba:e2:cf:bd:ef:cf:a5:19:69:
         8d:6e:be:8d:2e:1f:51:ca:8d:ee:d8:82:19:86:bf:9a:75:f3:
         80:a2:cc:62:0d:38:35:db:8e:6e:be:91:a1:b9:de:b8:9c:e2:
         fa:8d:ef:c1:d7:21:9f:d5:12:b3:ce:c9:d4:e7:7c:01:ea:ce:
         be:5e:02:51:9c:a8:f0:eb:f2:5a:06:d5:53:8c:fc:85:46:64:
         2a:0b:42:d7:a9:e6:e1:c7:dc:7e:97:1f:71:97:fc:9e:26:a6:
         a7:3c:4d:d4:5d:de:db:5f:b8:41:2a:8e:c6:b4:76:f2:6d:69:
         60:95:95:f8:80:9f:c8:03:c9:11:3a:ff:11:37:dd:dc:b9:3a:
         c5:4f:b0:bf:d1:a9:38:cc:11:75:91:01:4f:73:3b:47:be:1a:
         66:66:da:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:51 2024 by rpki-client on console-ams.rpki-client.org