Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3055fe69-c73e-38fb-918e-f2022d02635f.roa
File:                     3055fe69-c73e-38fb-918e-f2022d02635f.roa (raw, json)
Hash identifier:          bj7sosLDRJ78M3bp+h95sL7lCYnlkFidfxInsx14xtM=
Subject key identifier:   35:CC:ED:88:22:5D:9A:65:9A:C3:0B:A7:1F:2C:BA:CF:72:63:4D:7A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858470550BC12052D220C15A01C80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3055fe69-c73e-38fb-918e-f2022d02635f.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.251.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:50:bc:12:05:2d:22:0c:15:a0:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=a1a0a058-64eb-4611-9414-673c0bc6f301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:18:25:e1:0a:92:8d:56:83:06:75:2e:8e:
                    0c:aa:a0:93:8c:86:e8:04:99:8d:41:4e:4a:0a:39:
                    88:d1:3c:c0:19:12:ea:3b:10:b1:13:fa:82:98:54:
                    81:ac:04:50:f2:13:19:99:33:a8:6f:a4:1a:d6:fd:
                    1e:e3:98:64:da:0f:86:a1:9e:04:c6:6f:a3:b1:71:
                    e6:c6:85:99:8f:f8:a8:b8:77:79:63:1d:63:2c:58:
                    9f:9a:9f:e2:84:c3:c5:58:77:6c:47:b4:de:e5:9d:
                    96:73:a6:70:fb:4c:50:b9:b5:32:6f:7b:d2:b6:87:
                    3e:77:c2:84:16:a8:09:55:31:34:fb:f8:72:db:ec:
                    04:d1:85:fc:1a:35:e4:c5:1e:d2:b6:4b:6b:c1:6a:
                    13:8e:c1:17:9f:45:ff:2f:ba:5e:a5:7d:6c:5d:c2:
                    c7:2f:3f:93:05:38:d5:9f:dc:fc:ba:50:87:18:36:
                    94:4e:e2:b1:66:6d:59:5e:86:7c:ef:19:ed:05:11:
                    ef:e0:ff:f1:0d:47:82:23:78:00:85:21:58:d2:d1:
                    be:c1:d0:00:9b:c1:d7:e4:c5:13:66:18:a0:0a:3c:
                    da:c9:1a:46:55:36:ac:22:5a:95:a9:1c:87:a2:f4:
                    cd:dc:e2:0b:59:77:ad:ae:e7:3c:00:94:72:dc:e8:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CC:ED:88:22:5D:9A:65:9A:C3:0B:A7:1F:2C:BA:CF:72:63:4D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3055fe69-c73e-38fb-918e-f2022d02635f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c2:00:b6:a3:19:e8:be:ff:f0:0d:fa:00:50:dd:33:bd:a3:
         5d:9a:e3:2a:89:55:13:fa:e0:3d:4d:a2:9c:ae:cb:15:73:dd:
         d6:94:41:32:d7:5e:71:60:c7:17:37:44:e2:14:64:e9:1c:7d:
         d9:3e:41:31:21:35:ab:9c:ec:58:8f:fe:77:7d:c0:24:e7:5e:
         de:e4:75:f5:b5:02:48:ea:f3:ec:99:ac:1c:d6:e5:f0:ab:25:
         80:75:fb:dd:39:fc:38:5a:48:7b:aa:32:0d:cb:46:41:6a:f9:
         72:e1:90:f4:a4:c6:cf:1c:8a:70:e8:9f:b3:3d:32:88:bf:89:
         22:4b:12:63:8b:c3:c1:96:9f:7f:aa:5a:8c:9f:50:d7:27:9b:
         78:5e:3b:81:9a:ba:73:8b:23:6b:4b:4b:e6:d2:4d:3b:d7:09:
         77:e7:df:af:20:b1:af:bb:1f:d3:2b:e0:80:e1:07:80:b6:ac:
         f0:62:96:79:39:1a:6e:31:7e:5f:58:6d:b1:7b:4c:8d:2e:08:
         74:ca:5e:8f:26:e1:49:e8:2d:d4:28:e3:92:38:52:8b:e5:1f:
         09:d9:06:df:48:31:4b:19:20:3c:8b:a9:a1:cd:78:10:2a:d1:
         cd:28:7c:49:4b:4a:39:a4:e1:97:6d:e2:9f:de:3c:af:e5:48:
         84:8c:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:46 2024 by rpki-client on console-fra.rpki-client.org