Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa
File:                     289e72dc-240a-3333-b80e-6a466f6a78a6.roa (raw, json)
Hash identifier:          rp6HaC7+K8KI1Q2LzWi/KVl3VmtGrJU15/cPTKxoPQA=
Subject key identifier:   EC:17:DF:AB:FD:01:8C:68:84:98:8C:9A:E8:4F:3D:49:3D:8A:F8:C1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F0743CD6731D760FBA5A600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa
Signing time:             Fri 29 Mar 2024 18:42:30 +0000
ROA not before:           Fri 29 Mar 2024 18:42:30 +0000
ROA not after:            Thu 27 Jun 2024 18:42:30 +0000
asID:                     15169
IP address blocks:        142.250.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:07:43:cd:67:31:d7:60:fb:a5:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:42:30 2024 GMT
            Not After : Jun 27 18:42:30 2024 GMT
        Subject: CN=1faba5c4-ccea-47fb-a9cb-5fda92b4f35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:fe:de:be:be:c3:56:8c:33:4a:56:70:77:
                    9c:99:76:5f:68:88:96:24:0f:68:e1:35:4e:64:e2:
                    47:5d:5d:89:a1:c3:86:07:26:7f:30:de:ca:59:9e:
                    3c:15:95:79:41:36:9e:d4:f9:a3:45:11:8b:83:30:
                    45:3d:61:3b:2e:3f:69:12:7c:47:39:c7:ca:00:15:
                    af:ed:6f:e9:51:52:8d:5c:74:f2:ee:83:22:11:87:
                    30:42:4a:61:19:9a:a4:89:19:ae:7e:45:00:d5:73:
                    a1:53:66:48:fc:de:1d:7d:ce:7f:ea:e5:df:8c:26:
                    e4:db:37:7f:48:58:79:3c:89:bb:07:74:23:20:28:
                    58:8f:fd:7e:77:cc:96:5d:87:e5:4d:16:84:70:35:
                    41:21:ed:a8:01:97:47:88:3f:54:54:9e:04:12:77:
                    cd:47:51:32:6e:40:71:58:c7:2e:99:20:9f:d6:5e:
                    8a:ce:ea:24:09:bd:97:aa:04:a1:6d:68:7f:ca:4f:
                    09:fe:6c:19:d2:36:d8:62:d2:f1:6f:d6:bf:05:5c:
                    79:09:ed:ee:63:b6:ab:88:0a:bd:81:5c:0f:6d:68:
                    81:37:66:da:4c:27:a8:8d:1b:a6:3b:d5:ed:4a:71:
                    92:b4:6a:0b:32:b1:ee:48:2a:5e:ac:ef:59:33:ad:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:17:DF:AB:FD:01:8C:68:84:98:8C:9A:E8:4F:3D:49:3D:8A:F8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:e1:15:a1:96:d9:e4:93:dd:d5:3e:37:dc:c5:2d:cd:68:
         ec:f5:20:54:c9:3e:93:8a:09:7c:f1:7a:9e:7b:84:cc:ca:55:
         e3:2d:38:6f:44:5a:00:29:27:44:66:73:ba:c0:5b:2b:48:f0:
         e5:bd:55:b8:e5:6b:0a:88:22:e5:17:75:ab:a7:72:00:0d:f3:
         02:29:fe:61:57:ba:ac:f5:7c:2d:0e:15:a3:48:8a:a8:25:50:
         74:f9:f4:67:f2:46:cf:19:84:c9:c4:6c:03:ca:dd:7d:b9:ff:
         ab:6d:95:0d:13:1b:eb:dd:3b:62:2f:cf:10:08:1a:a2:c8:61:
         a5:c8:83:92:e9:a6:a7:9f:61:9b:d0:89:d5:20:52:79:05:27:
         d4:10:d2:9d:56:83:96:fd:e1:6b:cc:1f:b1:1c:1e:6f:d2:c9:
         5a:fb:03:95:0b:8e:39:7b:ed:81:32:0d:85:b5:3f:08:ee:ea:
         b3:8c:7c:7b:a3:27:ba:46:d4:3e:db:f4:68:6e:25:f4:f3:34:
         0a:87:2c:81:b1:80:22:8e:72:4a:4a:86:6a:f8:12:1d:d4:59:
         36:fd:a1:43:78:57:5b:ea:a2:c2:e8:85:c3:63:b0:a0:6c:4e:
         06:df:5b:ac:b7:6c:d4:76:ee:44:8f:18:3c:5a:41:1d:f8:bf:
         05:24:8b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:38 2024 by rpki-client on console-fra.rpki-client.org