Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/168189ad-30c5-3335-bc6c-f2f3e139b8ea.roa
File:                     168189ad-30c5-3335-bc6c-f2f3e139b8ea.roa (raw, json)
Hash identifier:          p1Kt2/t5exxI8PQcTS6ngYWue/hwo/BQUMkyLx0QaLM=
Subject key identifier:   5F:10:50:BA:49:30:2D:0F:64:FC:E8:9D:1B:E1:63:71:EC:12:72:EA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E62B3FB99EB40FC02202DF40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/168189ad-30c5-3335-bc6c-f2f3e139b8ea.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        142.251.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:3f:b9:9e:b4:0f:c0:22:02:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d2c3d257-52ec-44f6-9ffa-979a31e80636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:11:c0:4b:86:e9:bc:91:ee:d4:a3:98:de:
                    35:36:cd:40:85:c5:ca:ac:bd:5b:97:03:45:76:e3:
                    39:6f:48:c2:bc:de:6c:24:43:66:b4:0c:53:c6:0c:
                    d1:80:e6:66:23:ca:28:ac:10:03:5a:fc:30:a7:38:
                    d6:5a:11:15:8d:8a:35:e8:a7:87:9f:a2:c3:55:15:
                    6c:8f:56:d9:63:3e:1c:25:30:9e:1d:53:77:e6:e9:
                    84:aa:a3:f7:3a:45:19:1a:94:ec:12:50:d9:ea:b1:
                    8b:68:09:95:c2:d2:37:92:99:54:2c:8b:8b:dc:eb:
                    ec:da:39:69:fd:36:c5:72:c9:eb:9b:81:1e:71:d0:
                    69:a4:20:3d:2e:69:f7:82:33:45:98:33:05:c8:f6:
                    70:0d:56:49:b2:5f:22:b8:8d:2f:40:40:2f:21:2b:
                    87:c3:53:93:a6:ec:db:48:7b:5e:58:bb:3a:07:e7:
                    40:57:f3:a5:6f:4a:d7:65:af:93:e2:65:87:64:83:
                    a2:82:9f:98:17:95:32:49:0f:62:e7:d4:9b:10:81:
                    f8:c3:8d:69:32:d3:e0:dd:db:e1:a4:c5:90:81:ed:
                    68:9e:90:e6:fb:78:88:4b:47:d9:7c:02:61:a6:2d:
                    eb:31:d6:73:b3:ec:84:72:b2:20:2a:9a:b9:25:fe:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:10:50:BA:49:30:2D:0F:64:FC:E8:9D:1B:E1:63:71:EC:12:72:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/168189ad-30c5-3335-bc6c-f2f3e139b8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:52:fa:d1:bd:61:13:f5:2f:82:0b:94:c8:8c:19:a5:d9:
         c0:3e:b7:bd:8a:15:4f:39:d4:71:97:0e:f8:30:c9:08:51:b3:
         93:5a:26:14:9c:c4:4f:c5:d1:6c:2e:2b:78:2f:48:45:49:46:
         03:8e:82:5d:fe:33:12:6f:ed:42:d8:b6:92:9f:85:28:e6:50:
         cd:d0:0e:9d:a5:16:66:38:f3:d1:3f:44:ee:73:18:b2:61:5b:
         fd:f6:b3:fc:d0:47:e3:37:26:a5:f4:f7:26:13:47:6d:e6:41:
         25:e5:49:44:40:37:a6:54:df:e9:dd:d9:f1:60:17:69:59:26:
         f5:a9:bc:94:ca:0e:17:8a:3d:f4:e7:cd:57:70:7e:cf:16:78:
         10:73:7e:74:ee:8f:2c:2a:15:30:76:74:e0:6e:ce:34:9f:3f:
         0a:bc:4b:ce:96:78:60:65:3d:0d:1d:a9:8d:70:c5:ee:20:49:
         21:aa:d0:ec:a3:a8:01:8c:f1:69:7b:35:9f:b9:54:0a:af:46:
         a9:1c:cb:cc:e3:6a:07:07:be:44:64:e7:75:98:d6:26:eb:6e:
         b2:53:ab:8d:b0:76:db:fe:16:98:6a:78:ae:3f:db:c9:4d:3e:
         4a:76:f2:25:2f:4c:16:88:15:ae:a6:2f:ff:f5:f9:6a:ab:e0:
         97:ba:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:22:39 2024 by rpki-client on console-ams.rpki-client.org