Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa
File:                     a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa (raw, json)
Hash identifier:          H3MU/rU2AAnddhQf/p5a3sC51r/JYNnRYXsNvWmZMbg=
Subject key identifier:   40:8A:8D:65:9E:02:1B:AA:B7:DA:71:65:52:1B:5E:48:6D:66:14:26
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454907C46324AC1CFCA8B2944C
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa
Signing time:             Thu 21 Mar 2024 21:35:44 +0000
ROA not before:           Thu 21 Mar 2024 21:35:44 +0000
ROA not after:            Wed 19 Jun 2024 21:35:44 +0000
asID:                     15169
IP address blocks:        74.125.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:07:c4:63:24:ac:1c:fc:a8:b2:94:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 21:35:44 2024 GMT
            Not After : Jun 19 21:35:44 2024 GMT
        Subject: CN=0c3efece-8cf7-4214-bd6e-c848029fe064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:16:23:dd:03:3b:36:79:5f:36:cc:83:a5:
                    df:18:dc:2c:9b:02:f7:32:64:37:e2:7f:28:51:e0:
                    4e:ea:96:db:64:81:cc:7e:ca:48:cc:3f:ae:1e:c2:
                    a8:74:0f:02:7f:94:6e:93:f8:ce:da:f2:43:b8:ff:
                    7f:8f:18:0b:b0:37:81:14:ca:9f:8a:14:88:74:bf:
                    88:10:41:d8:06:a2:6f:ec:c5:86:a3:ef:f0:e3:f0:
                    25:9e:5e:ee:81:78:ea:eb:c1:63:5a:1b:7d:f9:4d:
                    89:1d:43:ff:ac:2f:40:af:2e:18:22:e3:0e:91:df:
                    5c:c0:8f:a5:7c:ab:98:6a:6a:90:22:d2:ac:65:e5:
                    1c:eb:4d:60:30:b8:4f:24:1f:a3:00:8e:8d:ca:16:
                    82:d2:5d:7f:ef:98:f6:05:e9:31:2c:b0:24:29:55:
                    08:da:8c:46:f7:4b:f5:f9:66:7e:25:9e:30:37:5a:
                    fe:6f:e6:95:fb:06:e9:4a:e4:5e:29:dd:3e:79:24:
                    a3:7f:56:49:6b:f7:25:b6:ca:a0:9b:be:66:6c:ee:
                    be:46:e0:d9:e9:2c:db:1b:7a:8c:1f:ba:5f:97:1a:
                    d4:57:d1:83:d0:5b:c1:f2:9d:35:f9:67:1e:2f:63:
                    4e:c9:9e:65:8b:f0:60:a9:f2:5a:17:9c:f3:73:8b:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8A:8D:65:9E:02:1B:AA:B7:DA:71:65:52:1B:5E:48:6D:66:14:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:52:fb:c5:4b:ab:6b:39:43:e8:56:4f:18:eb:07:f8:09:2a:
         58:e2:df:ee:5e:ad:47:ca:ba:0c:f7:a0:12:c6:5f:7b:0e:2f:
         5f:83:ad:97:84:59:0e:32:af:19:20:96:b8:5a:9f:35:d3:41:
         ab:85:3a:63:a6:2c:1d:b9:9b:2a:b2:20:82:c4:07:b6:94:6a:
         93:58:1e:3d:56:99:43:80:f2:8c:83:7b:87:bd:4b:9c:4a:84:
         57:71:4a:e6:73:49:13:1a:58:71:39:e1:93:ee:c3:38:fa:03:
         e4:be:2d:0f:74:2c:85:94:c2:e0:4f:77:d5:13:f2:5b:0d:a2:
         1e:ad:fb:c3:fb:32:55:59:7b:6d:83:4b:d3:c2:fe:3c:fe:4c:
         e4:86:3e:d4:59:9e:f8:a5:a0:90:7d:12:ff:90:94:95:07:f2:
         08:5b:08:41:b4:c7:17:dd:51:31:e3:ff:af:6c:14:94:dc:a1:
         6e:4e:59:b9:a4:7f:6d:8c:38:98:57:35:31:4e:86:3c:2f:10:
         fb:26:6a:17:b0:c7:c1:ec:fa:70:95:2e:b6:de:fb:66:8c:ac:
         bb:eb:84:17:ff:d2:b6:dd:03:f1:a5:22:e8:20:b1:fb:0f:6b:
         79:6a:b6:09:dd:58:a3:a8:71:63:e7:70:37:3e:88:a4:97:72:
         59:5a:75:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:31 2024 by rpki-client on console-fra.rpki-client.org