Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa
File:                     1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa (raw, json)
Hash identifier:          cSxHsIbIDYiCFEczA3jZtQpIuBNMyuFjqLxPndE7GJg=
Subject key identifier:   B1:26:99:09:EF:FC:D5:01:8E:B3:67:A8:1F:9E:49:49:57:34:8F:3B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858470550C64FA6290F430602CD00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        172.253.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:50:c6:4f:a6:29:0f:43:06:02:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=3256fac2-9e0b-43a0-aca2-d3df572c6a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:ea:c6:1f:0d:32:c7:7c:ab:a3:ed:4f:a0:
                    40:4d:a2:c8:db:12:9d:c7:23:21:fa:7d:ff:db:40:
                    f5:6a:79:4c:c3:96:03:e7:6f:58:ab:8d:93:2a:b4:
                    48:b1:8a:5f:6c:a5:65:a5:d8:d3:c0:8f:0f:3f:80:
                    81:cf:0e:f2:66:34:8d:04:ef:d7:c4:01:2b:8e:c8:
                    b1:56:28:d2:84:55:eb:c0:56:06:5c:d4:e9:0b:7f:
                    2a:9e:03:a8:8b:d7:80:45:75:11:ef:6f:37:51:8d:
                    fe:70:b3:c9:4a:00:e5:c4:c2:eb:fe:56:14:2e:2f:
                    5c:1c:94:4b:b4:b7:1c:c5:e9:b3:74:9f:98:7e:42:
                    50:33:6c:e0:0a:e4:68:a4:c7:7c:39:50:13:9a:50:
                    14:b6:2b:2c:d1:07:a4:98:0f:b6:3b:0c:bb:21:39:
                    29:1c:38:c0:a9:65:e3:e3:9a:db:b1:89:1d:04:21:
                    67:6d:c7:47:51:6d:28:13:16:6d:3a:23:04:2a:1b:
                    b6:3f:19:b3:62:09:b5:9a:0d:c7:a8:d7:76:fe:e6:
                    ac:e9:38:f9:ad:49:33:c3:6f:aa:ae:f0:a1:e4:1c:
                    30:7e:71:f7:17:85:a0:9a:31:d4:3d:96:48:c7:e9:
                    8b:75:8b:1b:ce:fe:67:48:4a:a3:15:1d:03:c6:aa:
                    ba:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:26:99:09:EF:FC:D5:01:8E:B3:67:A8:1F:9E:49:49:57:34:8F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:d8:0b:28:91:02:75:7a:92:b6:88:8a:56:b3:0e:d7:05:
         9d:f7:fb:0b:84:3a:3f:30:92:ad:e1:7f:e1:74:e1:fe:87:ec:
         2c:6d:29:67:0e:9f:bf:e8:4a:59:9a:0f:e1:23:f7:1c:71:4e:
         d5:17:43:a1:d3:d5:6d:c1:3e:f8:10:27:49:d7:4a:47:20:e1:
         5a:65:83:37:d9:4b:aa:2d:fe:e2:43:e3:17:71:af:74:30:9a:
         b9:07:15:49:f9:1a:50:dc:5e:ab:46:62:5f:cb:c9:52:8a:2e:
         85:34:61:09:00:7f:a1:46:af:ed:91:e4:33:26:53:37:85:8e:
         96:5a:fc:50:80:ee:cd:0b:59:2b:ff:91:19:d9:c0:f5:cf:7d:
         13:88:e4:b6:25:0f:52:4c:30:fe:1c:00:50:78:45:9a:f4:e9:
         99:17:37:f0:01:cd:42:65:5d:19:60:75:85:ec:b6:e8:c7:fe:
         c7:48:be:d1:d2:05:7c:4b:ac:35:be:2e:70:0a:3c:16:9e:46:
         84:11:fe:77:35:b4:2c:80:da:e4:5c:38:c1:4f:c4:5c:d0:36:
         6e:14:45:58:2b:f1:93:60:ec:2d:91:4c:95:1e:27:f4:11:4b:
         63:7e:a8:1c:68:8f:37:91:3e:8e:47:dd:b9:9d:6e:cc:23:f1:
         6a:99:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:44:57 2024 by rpki-client on console-ams.rpki-client.org