Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7313024-d995-390f-b297-2842a85faa60.roa
File:                     c7313024-d995-390f-b297-2842a85faa60.roa (raw, json)
Hash identifier:          1KSLfciqvAfJvyhS7CdSpob/DkuoPAPHRccxpdyoT4o=
Subject key identifier:   A9:FD:03:08:EB:D2:FA:F0:EC:7C:6F:87:49:04:2D:FF:FB:32:60:F2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584546222FB28F84CD3F4900F9A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7313024-d995-390f-b297-2842a85faa60.roa
Signing time:             Wed 20 Mar 2024 20:41:32 +0000
ROA not before:           Wed 20 Mar 2024 20:41:32 +0000
ROA not after:            Tue 18 Jun 2024 20:41:32 +0000
asID:                     15169
IP address blocks:        209.85.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:22:2f:b2:8f:84:cd:3f:49:00:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:41:32 2024 GMT
            Not After : Jun 18 20:41:32 2024 GMT
        Subject: CN=53d910a5-9319-4a94-95dd-6fafea2036c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:85:d7:be:b9:84:f0:68:92:56:99:88:bb:
                    ef:97:b7:b8:e8:32:25:6a:a1:9c:6d:18:e8:0a:55:
                    3f:9b:59:5b:23:b8:e7:a6:18:d2:ed:d5:b3:6f:37:
                    a8:14:aa:8a:48:9a:6a:e3:cd:93:7b:c5:7b:30:e8:
                    ea:05:ab:d9:9e:6d:8e:3d:d9:e3:ae:f4:bc:c5:85:
                    fd:08:88:16:17:82:4d:0f:09:0f:07:dc:72:73:e1:
                    c4:0f:df:01:df:52:b0:99:50:6f:e5:eb:a8:f4:37:
                    dd:d0:62:fc:38:30:d2:39:83:11:f8:ea:d7:82:98:
                    b3:d4:8d:e7:df:8c:b9:60:47:1d:75:48:45:60:90:
                    d3:db:56:b0:94:37:13:2b:a7:17:de:12:c0:a4:47:
                    a7:71:1e:bc:b8:f3:29:8d:7d:3e:86:41:6c:89:6d:
                    01:14:0e:65:14:39:7e:44:6b:6b:27:d8:e0:d7:69:
                    ad:2a:1f:54:a6:fa:3b:33:eb:2f:fd:20:9b:dc:69:
                    dd:38:ae:97:69:26:07:76:f6:15:f0:39:31:40:8a:
                    8a:39:68:40:d3:d6:2f:6a:50:fb:7d:95:4c:b8:75:
                    3d:af:bf:08:83:11:4b:9c:ec:c0:d5:cf:c5:75:12:
                    d6:ec:29:c2:21:8a:4b:e7:10:81:6f:4e:ca:3b:20:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FD:03:08:EB:D2:FA:F0:EC:7C:6F:87:49:04:2D:FF:FB:32:60:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7313024-d995-390f-b297-2842a85faa60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.85.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:03:43:a7:a4:7f:78:8c:cd:fa:b5:73:fc:e3:00:25:1e:a0:
         e8:86:78:54:55:39:b9:da:4e:c6:5b:89:8f:6c:19:0b:9e:44:
         ed:da:79:4e:dc:6e:09:48:ac:c5:56:5b:aa:bc:3e:0f:88:13:
         22:f4:66:de:33:33:cd:b1:cc:cc:d2:31:98:1c:cb:67:7a:aa:
         57:40:65:9c:7f:bc:6a:36:86:ad:1b:2f:cc:2f:42:e2:9d:a3:
         55:f5:a9:b0:a7:24:ce:55:86:eb:a0:e9:28:a1:c9:ab:6b:12:
         55:25:8f:da:9a:ac:f7:94:ff:ff:e2:b5:33:ce:b9:37:28:1c:
         3c:5a:f7:a4:0c:59:e7:42:c0:1c:9b:26:36:bd:11:ea:67:ed:
         9c:25:0e:e0:40:3a:9d:84:52:a0:86:00:fd:c2:fe:8c:37:b0:
         dd:8d:4a:db:9f:e7:e5:f2:82:5f:b3:39:cf:d4:87:01:39:5d:
         90:ac:cf:f6:1f:b5:fb:7b:17:2b:48:44:30:28:65:87:90:32:
         26:1c:39:fb:01:8e:6a:a1:b7:1b:7c:8a:db:9b:30:20:0b:50:
         a5:41:0d:9e:38:04:e1:7b:48:55:28:8b:87:d9:2b:40:c6:dd:
         be:bd:c6:01:ac:49:a5:85:c1:75:9b:d8:86:50:05:32:48:d0:
         ec:d0:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:42 2024 by rpki-client on console-fra.rpki-client.org