Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e1a72dfb-1439-3141-a432-e977c9893c8e.roa
File:                     e1a72dfb-1439-3141-a432-e977c9893c8e.roa (raw, json)
Hash identifier:          ddQtGtxHR8lVrPtV4hhMoqCxdyZcEjltupsjlc7qVko=
Subject key identifier:   76:2C:91:7E:CA:04:41:B7:F0:1A:14:9A:45:57:99:A8:1B:22:D2:D7
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462D2F17E2A42788D3E5E600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e1a72dfb-1439-3141-a432-e977c9893c8e.roa
Signing time:             Wed 20 Mar 2024 21:03:42 +0000
ROA not before:           Wed 20 Mar 2024 21:03:42 +0000
ROA not after:            Tue 18 Jun 2024 21:03:42 +0000
asID:                     15169
IP address blocks:        142.251.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:2f:17:e2:a4:27:88:d3:e5:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:03:42 2024 GMT
            Not After : Jun 18 21:03:42 2024 GMT
        Subject: CN=b0d9ac08-8073-4e8d-8c92-5f82c97a918d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:dd:7a:53:4d:ff:4d:21:f3:dd:f1:4e:e7:
                    cc:2d:f7:18:e5:ee:9d:8e:6a:38:31:23:9d:8b:cd:
                    c8:df:c8:ed:db:9c:77:98:19:cb:9f:79:f9:38:26:
                    13:cc:72:f8:4c:60:20:1a:47:5f:31:e7:d6:15:e9:
                    61:8c:db:0a:49:bd:87:11:08:15:96:fe:81:68:87:
                    24:a6:d1:d5:98:fb:2c:97:d2:54:c3:27:79:cf:e5:
                    cd:ba:cb:84:b8:ef:f1:25:76:18:62:b3:d4:6b:23:
                    30:9d:48:23:d9:d3:67:24:33:67:fa:7f:2a:01:da:
                    db:a5:28:a5:fa:5f:df:03:4c:0f:49:0d:b5:43:3b:
                    23:79:b3:38:02:73:ba:d5:3b:70:6d:74:4e:69:73:
                    a5:9e:7b:da:94:d7:59:69:13:5f:16:40:65:e0:03:
                    10:c7:e9:dc:e8:29:d6:be:49:2c:b7:8a:60:ab:74:
                    ed:bf:ee:c5:05:a0:56:e9:61:33:53:61:6e:68:9a:
                    7c:db:88:44:c4:37:11:05:cc:dd:d2:8f:64:57:90:
                    0c:d9:d8:6c:5e:39:90:54:b3:4b:82:0d:c8:01:3b:
                    c7:a9:2b:58:00:87:70:25:8b:57:97:a0:bb:01:40:
                    e1:f0:eb:95:bc:c8:23:50:a9:76:b0:0b:85:da:0b:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2C:91:7E:CA:04:41:B7:F0:1A:14:9A:45:57:99:A8:1B:22:D2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e1a72dfb-1439-3141-a432-e977c9893c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b3:41:75:d3:9a:bd:9b:57:c2:b0:c5:9f:4d:53:d5:0a:bc:
         42:81:14:31:57:10:3f:89:41:96:2d:3b:c4:2f:2b:b3:2b:a8:
         00:e0:9d:aa:e9:47:6c:57:9b:47:e8:d0:1f:81:c8:59:90:ad:
         62:19:40:24:e4:11:60:27:9f:b2:b3:c4:88:57:9b:ca:da:3f:
         3e:55:6e:65:f1:91:a4:36:b9:af:1e:64:79:1f:90:d5:b3:97:
         dd:80:51:40:e4:fe:4c:7e:d6:f4:de:34:db:f0:23:37:ca:3c:
         bf:37:e4:b2:9d:54:70:07:a3:88:67:1f:34:34:d5:d9:5e:03:
         21:c8:d3:2d:2f:c9:13:20:2b:e9:11:dc:b4:5d:41:73:28:5b:
         54:e5:6e:b5:89:92:79:84:fc:4f:ee:bf:c1:76:ea:4f:49:ba:
         b7:c4:52:85:cc:51:dd:33:a2:e3:1e:97:5d:78:3e:68:f2:e7:
         75:69:13:c6:22:2b:1b:28:39:57:96:f9:22:5f:09:8a:12:2e:
         61:23:e4:9f:9e:44:5e:f0:fd:64:df:c9:19:a0:b9:ec:ec:7b:
         50:e2:aa:2a:40:e8:e9:0c:26:4e:49:4c:63:c1:d0:ac:45:8c:
         8a:ff:e0:a4:81:39:38:9a:bd:dd:3b:26:cd:7b:0d:dd:fe:d1:
         b2:64:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:43 2024 by rpki-client on console-fra.rpki-client.org