Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/258f0fbb-4943-3a62-a79a-e7d714ebb310.roa
File:                     258f0fbb-4943-3a62-a79a-e7d714ebb310.roa (raw, json)
Hash identifier:          H6zaeyadpGQF8/Uk87QWw6Y0rcy6aVTdWoVf+3XQYx0=
Subject key identifier:   C6:19:75:F5:A6:35:A0:A2:92:2E:5E:F2:EF:2D:7C:D2:59:44:5C:CA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584705514C6238A1E829F31967C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/258f0fbb-4943-3a62-a79a-e7d714ebb310.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.251.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:51:4c:62:38:a1:e8:29:f3:19:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=b57ed030-ebf7-4fa3-bf55-afa1ea1de52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:aa:2f:26:63:30:51:68:94:2c:77:3c:69:
                    08:12:db:c5:e3:68:3c:c1:71:af:8c:c3:ae:e9:34:
                    6f:bd:f5:7a:9b:e3:9d:43:d7:15:ff:b4:d3:d5:f8:
                    f3:38:d7:68:19:d0:9f:54:ee:f4:e3:12:93:93:f6:
                    aa:db:b1:7d:c3:7a:71:33:e0:9a:79:9d:99:41:6d:
                    02:bc:d1:ef:eb:42:b0:aa:d9:8f:8c:df:70:0c:e8:
                    93:00:57:83:32:a9:bf:de:a4:bf:9a:be:c8:55:c7:
                    cd:b9:e8:21:5e:4d:aa:84:ea:d4:82:06:c1:8a:0f:
                    15:11:05:23:81:6e:b4:20:e2:57:c1:56:74:19:42:
                    b0:e9:74:21:24:a1:f6:cf:95:72:d9:7c:ae:c3:36:
                    49:39:72:b8:95:6b:77:bf:d9:f2:62:4a:a7:ad:cd:
                    55:81:a5:07:02:eb:64:83:82:fb:c7:ff:51:0e:ad:
                    ff:ab:ed:ef:10:16:65:9a:63:76:df:ed:88:10:42:
                    bc:9a:50:aa:41:b2:21:d4:33:8e:72:64:1b:87:83:
                    4b:6a:62:a8:be:7e:6e:0e:df:bf:3e:02:e5:f5:58:
                    58:b5:57:da:cc:4f:8d:82:0e:da:4c:a0:1f:26:3f:
                    66:e7:37:e9:db:be:2d:ec:46:b7:32:a0:b2:bb:c8:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:75:F5:A6:35:A0:A2:92:2E:5E:F2:EF:2D:7C:D2:59:44:5C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/258f0fbb-4943-3a62-a79a-e7d714ebb310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:76:68:27:a4:ac:6e:08:e3:19:6a:25:10:29:a8:29:2a:51:
         c0:66:40:1c:70:6c:e2:d3:d0:37:4c:5b:bf:c3:79:f8:99:69:
         3a:50:06:f7:3e:08:e0:1a:0e:41:7f:17:8a:60:57:31:d4:7f:
         3a:eb:20:cb:91:63:3c:c3:de:bf:b2:88:be:e4:35:90:ae:66:
         d4:89:7a:f4:b8:78:2c:e0:dd:c6:1b:86:8d:b0:9b:c9:a5:fc:
         46:aa:39:ec:5a:43:e1:10:13:4b:ec:e9:78:e1:3d:73:c6:97:
         89:5d:81:bb:36:72:d2:8d:7c:d4:14:00:59:78:f2:42:17:0e:
         56:c7:5b:ca:14:72:72:f4:17:cd:ec:33:a4:a8:bb:fc:bb:5b:
         f6:aa:88:3b:12:98:eb:b6:6b:d1:b0:99:2c:72:cf:8f:4d:fd:
         3e:5f:02:db:91:51:7c:16:34:4d:7b:4a:7e:0f:72:4f:ce:d4:
         f2:cf:bf:eb:ab:ec:a6:61:c7:3d:02:b2:94:36:8c:c3:0b:ce:
         9a:8e:ce:18:64:55:fa:25:2f:9c:b9:26:e5:d8:46:b3:f9:a2:
         bb:d7:b7:4a:2a:35:ca:a6:e7:60:d0:e0:7a:b2:c6:e7:40:32:
         bb:ae:54:18:f2:9c:e4:2d:98:27:be:11:3b:78:7b:7d:6f:09:
         cd:1e:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:45 2024 by rpki-client on console-fra.rpki-client.org