Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa
File:                     34c28d43-5060-326b-b054-88ca80c8af57.roa (raw, json)
Hash identifier:          TTRbk8fn30/giNjsc+RKI29tmYlsR+AudZiPuagNYfY=
Subject key identifier:   F1:08:5C:7D:09:10:F2:4C:AF:92:24:54:D7:0F:40:3E:D4:10:4D:5A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E707DA4CFBA54889ECB1900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.251.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:7d:a4:cf:ba:54:88:9e:cb:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=7d8f4b88-a8f4-4830-b1eb-dc5ad479c167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:b7:de:8f:6b:9b:34:5c:a5:11:89:63:54:
                    65:e3:3f:16:49:18:2b:19:96:e4:2b:b0:4f:80:9c:
                    e3:0a:ff:43:41:ac:f2:55:eb:fd:b3:d5:bd:32:01:
                    af:79:63:50:f7:8f:58:41:88:b9:ba:9d:87:56:6d:
                    5e:94:b4:11:61:83:90:21:70:ae:df:05:0a:81:96:
                    45:c3:b7:5d:76:ad:80:72:c8:d0:6a:1f:2e:9c:c4:
                    01:8d:81:0b:be:84:15:51:eb:36:b3:b3:ed:7c:86:
                    76:29:35:bd:8f:99:d2:51:bf:71:c0:4e:0e:c1:a0:
                    45:92:0a:b3:15:67:ac:34:e8:24:44:f1:ac:b6:d1:
                    6f:9c:20:e6:92:1e:d0:a0:2d:f8:32:b0:54:ca:92:
                    45:9c:a2:6b:15:e3:13:da:1d:84:a9:d2:ce:ef:30:
                    9a:01:06:19:5c:6e:34:c4:e4:c8:4b:85:04:cb:90:
                    be:d5:e2:ba:9f:76:06:66:6c:b1:97:06:bf:26:a1:
                    f2:1a:c7:d8:ab:dd:e3:a7:50:2d:c5:01:2a:80:9c:
                    8a:e9:eb:af:0a:ab:2b:eb:5a:3d:c0:7d:87:47:42:
                    e3:a8:71:51:ff:00:07:6a:c4:37:47:a9:dc:c9:0f:
                    29:32:79:b9:92:50:36:af:f9:b3:7a:d2:c5:73:a3:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:08:5C:7D:09:10:F2:4C:AF:92:24:54:D7:0F:40:3E:D4:10:4D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:56:82:9f:5c:c6:ca:33:e5:fa:94:24:10:a8:eb:01:2a:9e:
         c2:ec:82:ea:7a:94:71:7e:67:5e:ed:44:e3:2c:a4:3b:c2:69:
         8e:83:d3:76:48:48:4c:38:bc:62:b7:50:a8:4b:1e:79:7f:62:
         7f:c9:82:df:14:78:64:dd:63:18:1f:3f:ed:e3:ce:7d:60:39:
         d1:55:9e:ef:a9:5d:63:c7:d0:dd:4f:8b:33:df:db:89:7a:e6:
         bd:03:49:22:30:1a:4a:75:ec:b7:71:4d:2d:52:12:64:9e:91:
         3f:e0:73:fb:95:e1:7c:79:04:27:05:30:47:2b:5f:13:7f:d4:
         e9:5a:ac:00:e6:b7:38:9f:11:c6:a1:61:8c:7e:bd:fe:cd:30:
         a0:84:f2:9c:08:db:f5:8e:9e:b6:f3:2f:f7:64:fa:8e:40:5a:
         43:e8:cb:81:de:69:21:1a:8f:be:38:61:f4:20:1d:6c:f7:4c:
         71:fd:4e:43:5b:bb:0e:f1:d6:d7:a7:57:b1:7a:7a:cf:a4:e9:
         a1:74:18:f3:57:ef:18:3c:f1:71:0f:8d:f4:f7:c1:94:66:7f:
         c7:5a:04:48:88:da:0e:12:6d:8f:6c:64:83:45:f0:2a:28:05:
         99:5e:e5:34:fb:43:6f:b6:e3:05:7b:64:99:bf:22:61:65:df:
         4f:48:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:15 2024 by rpki-client on console-fra.rpki-client.org