Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9568baa-4fbc-308b-bc61-401c4f05b197.roa
File:                     e9568baa-4fbc-308b-bc61-401c4f05b197.roa (raw, json)
Hash identifier:          0VPmARshd9JlWIN6vTJFoZpLarAieyibRHVn6+ed0o8=
Subject key identifier:   2E:4C:37:17:A6:F9:6A:29:F6:F5:76:4A:3E:39:E9:97:79:63:04:6E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454625A0221EBC0C27F1EC3140
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9568baa-4fbc-308b-bc61-401c4f05b197.roa
Signing time:             Wed 20 Mar 2024 20:48:28 +0000
ROA not before:           Wed 20 Mar 2024 20:48:28 +0000
ROA not after:            Tue 18 Jun 2024 20:48:28 +0000
asID:                     15169
IP address blocks:        173.194.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:25:a0:22:1e:bc:0c:27:f1:ec:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:48:28 2024 GMT
            Not After : Jun 18 20:48:28 2024 GMT
        Subject: CN=8d553286-636c-4050-b32d-41bd9231f371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4d:46:c8:35:5c:4d:bf:e9:1e:be:4e:0d:4a:
                    75:2b:d1:85:4e:b1:c5:5d:d2:87:54:d2:73:d3:62:
                    30:27:3a:4d:84:45:a2:05:2c:7f:01:a3:58:25:2d:
                    86:08:6e:33:74:53:0e:0d:42:45:4d:90:eb:f0:6e:
                    87:bf:63:86:bb:2e:67:0f:e6:df:ac:98:c8:6c:b5:
                    d7:56:33:b7:a9:9b:7d:ba:3a:ec:a6:e9:10:6e:f1:
                    59:e3:e1:ee:82:17:41:56:03:e5:48:8b:98:fc:87:
                    bf:14:36:41:cb:d4:4e:04:49:4f:74:93:2b:65:38:
                    6f:69:0a:05:25:86:ed:13:6a:9e:57:df:f6:5d:e7:
                    dd:41:30:0e:f9:21:8d:e0:b4:c3:b1:f4:93:11:c8:
                    7d:da:63:0a:dc:9a:1b:e7:30:9e:3d:a9:e8:f7:ab:
                    58:28:f5:7d:9a:72:23:4f:8a:9e:31:95:d1:1a:11:
                    09:a3:66:d5:b7:66:bd:dc:69:be:73:13:18:82:06:
                    2f:fe:83:3f:35:5a:d3:83:96:f8:e7:7c:f4:2c:ea:
                    7b:55:58:1b:1a:22:e0:d5:3b:e7:6e:92:e5:36:47:
                    17:19:16:08:ce:e8:0c:04:13:3c:6f:44:1e:3d:d7:
                    22:dd:cf:12:79:23:54:4c:17:69:c3:cf:da:21:64:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:37:17:A6:F9:6A:29:F6:F5:76:4A:3E:39:E9:97:79:63:04:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9568baa-4fbc-308b-bc61-401c4f05b197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:7b:fc:c4:d0:70:3a:99:cb:d2:60:42:55:a3:e9:80:96:ae:
         c2:90:7a:f3:16:01:7d:6e:ba:eb:a2:43:c7:99:d3:a0:d4:a0:
         fb:10:77:ef:c8:dc:c5:b6:f1:22:6b:19:ac:88:b6:30:62:55:
         0e:ea:75:f3:37:86:32:b2:b1:6b:f0:6d:9d:62:58:d9:b7:df:
         82:4a:ab:44:71:15:56:76:f7:d7:02:b8:7b:25:55:5f:8e:35:
         8e:ab:3e:cc:ce:4e:23:78:16:58:fd:21:d6:70:73:bc:85:66:
         93:83:c9:73:a6:4b:74:83:f5:7d:d9:ad:4a:8b:99:0c:aa:b9:
         db:45:87:7d:e4:f0:d1:e0:14:7e:b0:ab:ef:c3:f4:70:b0:06:
         c2:5b:16:a0:3e:7d:9d:19:04:57:05:51:dc:b2:08:31:4b:02:
         a3:89:50:50:49:b3:5b:08:04:b5:e6:18:b7:b6:76:a1:36:f3:
         c6:ef:e8:b0:9d:7f:65:34:4c:a3:58:8e:f3:28:c9:09:c3:e4:
         52:65:85:88:05:25:a6:ff:f0:13:44:08:7e:e8:9c:69:f6:bc:
         79:cc:44:59:b5:4e:bf:f0:8c:e8:d0:3d:0c:86:4b:40:78:88:
         db:57:b4:3e:b7:d7:46:c6:9a:50:ed:3e:df:61:c9:35:d0:d4:
         8d:f6:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:53 2024 by rpki-client on console-ams.rpki-client.org