Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa
File:                     98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa (raw, json)
Hash identifier:          yq+Lyd0dj1rHfBIZPMJga98q4bvrdXiGcoELcslSSvY=
Subject key identifier:   98:07:E1:77:F8:F4:77:2E:BC:8D:7C:01:4E:4C:B7:00:1D:79:BA:EF
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462ABC813C3E102660D54700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa
Signing time:             Wed 20 Mar 2024 20:58:46 +0000
ROA not before:           Wed 20 Mar 2024 20:58:46 +0000
ROA not after:            Tue 18 Jun 2024 20:58:46 +0000
asID:                     15169
IP address blocks:        142.251.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2a:bc:81:3c:3e:10:26:60:d5:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:58:46 2024 GMT
            Not After : Jun 18 20:58:46 2024 GMT
        Subject: CN=9e3c504c-7da0-4bc7-9816-c48c931402cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:cb:f6:c0:e0:c1:ff:49:e2:3c:73:ee:e1:
                    68:c2:3d:c4:a3:52:56:b4:97:ca:fc:11:b3:18:cc:
                    80:36:94:c3:8c:39:ee:12:f1:2b:a7:13:b2:cf:a9:
                    2c:3f:f2:ba:56:c5:df:fe:03:08:f7:cf:2c:00:8a:
                    b9:89:c0:43:3b:73:70:7c:54:37:15:04:15:ea:36:
                    68:7e:b3:eb:79:8d:50:b9:cc:78:7c:dc:fe:79:0a:
                    07:e3:c8:34:98:a6:44:34:93:79:4c:a4:cc:45:a8:
                    ec:db:ef:1b:d2:7b:64:04:1d:e7:7f:1d:7e:13:c4:
                    cb:0c:78:5a:9d:5a:d9:7a:9b:68:32:d2:0a:6f:67:
                    97:d4:b5:80:76:a4:8d:8c:b3:4d:3c:09:7a:4d:a4:
                    66:28:37:80:e0:fc:3f:dc:18:ab:06:d5:79:b3:5c:
                    50:e7:60:ec:af:78:e8:f5:61:6c:22:a2:6c:e2:07:
                    df:d6:15:6a:60:09:bc:5b:2e:ba:ad:f6:0c:de:3f:
                    06:e5:06:c0:d8:ce:51:ba:f4:93:47:e3:72:a3:f8:
                    2b:e7:bd:53:41:41:e4:df:91:72:16:f6:6e:44:e1:
                    01:cf:ab:01:13:73:84:e9:bf:eb:33:88:1a:13:dd:
                    e2:ff:f1:d6:4d:36:11:2c:fc:0e:86:7b:99:62:79:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:07:E1:77:F8:F4:77:2E:BC:8D:7C:01:4E:4C:B7:00:1D:79:BA:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2d:c5:3e:37:30:82:e6:8b:44:5c:3c:50:da:88:e7:1e:1d:
         50:18:5a:b5:d8:d1:3f:fd:ad:73:54:70:df:d7:72:97:8f:65:
         17:7d:6b:4c:30:99:85:40:08:c4:33:a2:f1:b4:af:25:16:09:
         01:87:6c:88:c6:99:62:b3:4d:47:13:01:58:f6:34:93:29:50:
         29:a7:db:42:d2:2c:a7:31:43:2f:0e:33:ef:31:cd:81:d4:37:
         49:47:31:a6:00:46:70:89:3d:6f:b0:0f:c2:4e:b9:18:9f:3d:
         b2:f4:d3:fd:65:6f:87:55:bd:3d:5a:41:e6:26:e5:9f:f4:05:
         f7:f6:66:f8:75:9f:3f:4c:eb:3a:07:18:eb:75:b4:80:94:5f:
         86:53:9c:92:b9:23:e2:f9:aa:40:d8:94:49:b1:e7:4c:a0:4c:
         ad:b2:b9:cd:63:b5:73:79:c9:82:18:d2:c4:5e:c5:20:ff:c9:
         82:f3:a7:34:34:05:98:2b:4e:3c:f3:89:4f:99:3b:c6:bf:b8:
         6d:62:bd:90:ed:68:39:c3:d5:ea:3c:49:27:17:e2:9d:dd:3f:
         92:63:0c:27:01:b1:a6:ea:f4:f1:cc:81:17:55:46:40:30:12:
         a6:44:f0:9f:90:73:a9:4d:d2:33:fb:31:b0:a9:90:66:2e:50:
         6b:dc:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:26 2024 by rpki-client on console-ams.rpki-client.org