Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d219acb-e305-340d-adcb-3b5e8355e4fb.roa
File:                     9d219acb-e305-340d-adcb-3b5e8355e4fb.roa (raw, json)
Hash identifier:          5NgqECssOf3/OOUrfpVxMD+zfvHF3RtftND7Gnkv/jA=
Subject key identifier:   04:1E:A0:2A:09:BB:39:F1:49:16:5B:57:E2:A0:41:6F:FC:88:C7:77
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F0528B3A35E526636E33620
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d219acb-e305-340d-adcb-3b5e8355e4fb.roa
Signing time:             Fri 29 Mar 2024 18:38:16 +0000
ROA not before:           Fri 29 Mar 2024 18:38:16 +0000
ROA not after:            Thu 27 Jun 2024 18:38:16 +0000
asID:                     15169
IP address blocks:        142.251.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:05:28:b3:a3:5e:52:66:36:e3:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:38:16 2024 GMT
            Not After : Jun 27 18:38:16 2024 GMT
        Subject: CN=ff5135af-1d78-4bc9-8964-32f2ea02ad0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:0d:21:1a:c6:ad:63:64:81:56:dc:8c:97:
                    b2:45:af:f9:75:8b:4b:8e:bd:29:eb:e1:c5:60:e8:
                    e1:98:2a:ec:a8:8a:36:ad:74:1e:9c:1e:28:c9:4a:
                    1c:bc:9a:04:c6:7e:ca:5c:b0:70:e4:e0:61:8d:ec:
                    58:de:33:34:c2:f5:6d:5f:19:b0:31:a6:97:9e:eb:
                    31:b9:b6:a6:fd:08:2d:40:fc:10:c3:9c:cc:c9:24:
                    01:03:2d:c6:be:3c:37:0c:1a:64:3b:3f:4c:22:01:
                    18:6f:91:0c:cd:27:9e:78:ec:f5:53:c1:b6:58:aa:
                    2d:d4:19:21:19:70:9d:ea:86:4b:0e:49:d0:58:bf:
                    36:a1:a8:e4:da:29:5c:c5:0d:79:47:d5:73:b7:88:
                    b4:fd:00:8b:a3:be:85:41:3d:f7:c5:d1:3c:1f:34:
                    3e:15:fd:3e:40:fb:3d:bd:ee:33:1e:ac:70:37:0d:
                    70:e4:e1:b6:67:65:3a:59:2b:7b:d8:1f:43:da:6e:
                    b7:31:f7:e9:a7:b0:a1:bc:3f:9c:8d:67:5a:ad:0d:
                    aa:9b:4a:6f:a2:64:bb:6c:cd:c0:8c:f0:f0:cb:bf:
                    f8:61:5f:03:a2:87:b5:fb:2f:72:fb:b2:c6:cb:11:
                    5a:8f:c4:2b:21:fd:a2:0b:0b:81:3c:07:d5:08:8f:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:A0:2A:09:BB:39:F1:49:16:5B:57:E2:A0:41:6F:FC:88:C7:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d219acb-e305-340d-adcb-3b5e8355e4fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e8:27:46:19:53:c7:46:d5:b6:ac:a6:ef:69:f9:0f:cb:64:
         3d:e9:e2:a8:51:b9:b7:25:31:40:26:39:4c:99:43:5d:15:14:
         8f:b4:06:60:81:ea:dd:62:0b:91:ff:c1:8b:fe:a2:02:ee:bd:
         a6:05:df:ad:c3:f0:44:6d:af:b0:4b:83:d8:84:3c:c0:e9:bc:
         6d:67:73:dd:66:a8:51:fb:59:3f:57:7d:a6:46:2f:55:21:5f:
         2f:71:0b:ce:18:59:73:b9:8c:ce:95:9d:a3:dd:4f:83:8a:3a:
         95:94:1b:7c:01:3a:48:cf:b2:b5:5a:89:a4:14:a6:c7:da:61:
         d0:5d:58:09:5b:15:b2:62:3e:d4:40:a7:47:9c:ed:c0:cb:45:
         f5:c9:e7:38:e0:d3:00:cf:f4:50:fd:60:1f:42:c4:48:f3:b8:
         12:7f:64:81:a1:de:f9:ec:f2:ef:74:1f:b7:66:56:79:fd:d3:
         f1:2d:6c:ba:08:bf:8b:fc:95:5d:df:15:25:07:c8:5e:4d:f1:
         48:84:fd:24:13:d4:f9:c2:38:c3:e9:3e:70:f2:89:b7:e2:0a:
         36:71:5d:2f:9e:e3:b4:64:f8:d9:a6:cb:c1:68:06:a1:9f:18:
         42:a1:b9:79:5e:2c:32:b6:7f:59:53:94:0e:d9:f8:13:97:0e:
         5d:eb:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:26 2024 by rpki-client on console-ams.rpki-client.org