Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af870a15-06c6-3eaa-8426-c162e67d12a4.roa
File:                     af870a15-06c6-3eaa-8426-c162e67d12a4.roa (raw, json)
Hash identifier:          HV5xtA2ZNx2ugxt8H4tzUEuQ/OsLawBy6m588IVBbO0=
Subject key identifier:   01:89:B0:D2:99:09:40:AD:8C:C4:71:D9:E0:A1:37:71:20:AA:AA:80
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462E2EDD868909502C7529F0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af870a15-06c6-3eaa-8426-c162e67d12a4.roa
Signing time:             Wed 20 Mar 2024 21:05:43 +0000
ROA not before:           Wed 20 Mar 2024 21:05:43 +0000
ROA not after:            Tue 18 Jun 2024 21:05:43 +0000
asID:                     15169
IP address blocks:        142.250.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:2e:dd:86:89:09:50:2c:75:29:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:05:43 2024 GMT
            Not After : Jun 18 21:05:43 2024 GMT
        Subject: CN=7fd55168-165f-47a7-9c6e-ca63761069bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:63:74:8a:fd:98:4c:82:dd:db:c0:47:e2:
                    2c:68:0d:13:e1:18:b5:ed:e5:ea:09:6c:61:17:25:
                    f5:81:c3:29:e7:6e:24:09:fa:40:eb:6f:d2:46:4d:
                    e1:b6:d9:ac:03:7c:08:83:92:15:cb:ab:33:2c:0c:
                    f3:a3:47:6e:bb:f5:a4:9f:32:33:ca:1a:72:8e:30:
                    b0:fa:1e:cd:e9:f3:cb:58:5a:d9:62:a2:01:bd:96:
                    f3:5f:51:e8:6f:48:0e:5f:83:da:ed:ca:b4:71:8f:
                    51:ae:18:6f:d7:f3:90:6f:60:f1:0e:5c:75:ec:cb:
                    4c:da:03:61:b3:31:46:f3:17:a4:38:91:fe:19:77:
                    aa:2f:54:30:ec:0b:25:dc:90:f8:45:eb:9d:8c:b4:
                    ce:ee:5e:06:3b:03:dc:26:7e:e8:4b:54:60:44:8d:
                    7f:16:39:d2:b6:e0:6e:e0:72:0e:07:8c:77:8e:f2:
                    a0:28:c7:7c:ac:a1:34:40:4d:d5:4c:a5:dd:6a:c8:
                    50:a2:5c:bb:17:ee:c8:68:60:84:cc:22:f6:bf:23:
                    04:67:25:3d:40:21:c5:4a:57:9e:21:3b:2c:d5:c8:
                    bd:1b:34:aa:65:bf:e0:a9:0b:88:31:39:00:29:87:
                    6f:b1:ae:b5:63:1d:18:50:d1:60:3a:ab:38:26:f0:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:89:B0:D2:99:09:40:AD:8C:C4:71:D9:E0:A1:37:71:20:AA:AA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af870a15-06c6-3eaa-8426-c162e67d12a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:82:9b:c0:b6:f8:57:52:ee:e9:0b:fd:95:d1:89:a7:e4:
         8e:00:37:5b:bc:eb:06:b9:c3:49:cf:7c:d0:04:21:f0:4c:7e:
         91:03:22:07:89:86:5d:aa:1d:a1:70:f1:19:25:56:8b:4b:44:
         b8:e9:c9:5d:33:d8:78:aa:38:84:3f:0b:9d:ad:21:b9:2a:56:
         94:11:3f:54:7e:f6:79:32:b6:07:74:dd:21:60:f2:08:c1:cb:
         c9:0a:e6:91:5f:45:a0:fe:e3:86:cc:a5:ac:8d:55:59:a1:92:
         d0:32:19:44:ad:93:4d:c1:bb:7e:7f:11:49:e2:16:87:50:8d:
         a5:e2:58:b7:8c:9c:15:91:60:f0:ee:3f:cf:e2:9d:3c:bc:eb:
         5e:34:7f:55:a7:63:07:4d:ab:80:5b:80:58:cd:41:53:78:9c:
         cf:d9:84:c1:53:91:01:da:34:e4:fd:a5:b1:5f:8a:16:e4:1a:
         4f:cf:cc:51:ca:a7:19:fb:d9:29:f1:00:32:03:b6:6f:c5:34:
         9a:cf:69:dc:60:8d:77:ca:b8:69:11:36:2d:8a:ce:15:44:d2:
         c9:01:6f:cc:96:3a:24:d0:72:7c:ca:99:1a:0f:5e:82:19:ee:
         75:23:f3:63:6e:d0:35:c2:12:0f:ab:83:58:da:c5:eb:10:13:
         11:06:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:42 2024 by rpki-client on console-fra.rpki-client.org