Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa
File:                     39791293-3e4a-31e7-bd76-093a1ea73ab8.roa (raw, json)
Hash identifier:          OMNl8zMAxwSTgvqP3syLt8LRmFasAl1sIeJRSZG9SuI=
Subject key identifier:   70:26:80:24:5A:D9:C8:4F:67:B9:1F:C3:51:44:CA:58:2C:7B:14:F4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E62B670B58A3CB46428BA040
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        142.250.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:67:0b:58:a3:cb:46:42:8b:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0860b288-7a27-4a94-a66e-b300f1656e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:70:69:33:59:e2:c9:c3:7d:59:25:f9:7b:
                    0c:62:d1:bb:78:2a:e9:e7:ad:c9:80:c5:50:3d:74:
                    09:d6:fc:46:13:31:7c:d0:8b:20:dc:14:d1:a8:95:
                    9c:23:98:e1:f1:a3:58:d9:23:cd:be:92:b1:c3:93:
                    9b:73:be:7f:dc:01:c2:cf:0b:b2:41:d3:a3:4b:c2:
                    3e:40:76:a9:d0:f0:69:ba:4a:34:e7:08:b7:25:32:
                    11:99:97:2f:3e:00:f6:bd:93:07:5a:b3:36:06:96:
                    6d:0b:22:30:3b:65:d2:0e:3b:89:fa:3f:1f:36:70:
                    8b:f9:25:c2:ff:15:42:ba:af:dd:2e:d5:7c:6d:08:
                    24:c9:ae:4e:d3:06:6d:ac:95:13:8f:87:4f:03:43:
                    b4:7c:61:3c:26:75:78:40:c2:5d:f9:1f:04:af:93:
                    7e:38:80:ca:05:a0:54:4f:c5:45:0c:90:09:ce:7c:
                    82:4a:1d:4f:fb:fd:cf:ff:d2:cd:7e:76:6a:27:6f:
                    df:3b:ec:9e:89:8b:0f:c6:3b:bd:35:86:73:50:50:
                    d9:71:d1:9e:7c:45:5f:1e:ae:51:57:76:d5:3f:e4:
                    cb:68:eb:d5:71:97:81:a4:4d:91:3b:18:79:ca:0d:
                    b7:95:69:4f:e9:04:e9:17:d5:96:d2:66:61:c2:66:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:26:80:24:5A:D9:C8:4F:67:B9:1F:C3:51:44:CA:58:2C:7B:14:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:22:56:1e:d9:9d:8f:17:52:99:90:85:78:64:1b:1f:e1:a7:
         85:1f:85:4d:13:4f:08:22:6d:31:0c:98:41:9f:6e:a5:fd:b7:
         0b:58:b6:a9:30:83:17:44:a0:6a:ec:d2:b8:9d:5d:c9:3b:c2:
         b4:f7:a6:e3:28:73:14:00:f2:bf:8e:45:da:9b:54:10:ab:af:
         03:5b:7d:18:8a:87:35:11:7a:01:5d:61:86:81:79:a1:c1:4c:
         92:d4:f3:32:b1:15:a5:b9:ed:7f:2b:d9:21:c9:00:98:cb:4c:
         e5:c1:94:55:73:06:87:41:54:d0:31:44:c1:d6:4a:de:f1:fd:
         b3:75:c8:06:f7:76:c4:12:dc:b6:f6:c8:0c:c0:a8:8a:85:e9:
         56:5a:97:c2:e2:31:1f:52:87:e5:29:ce:d7:2c:0d:57:9f:c2:
         da:27:6e:cb:f8:63:e0:4c:e7:75:f1:13:bd:cd:8a:68:eb:5f:
         d2:97:92:a0:60:2d:75:2e:0a:44:b1:3f:94:01:bb:fa:d3:97:
         35:cc:35:28:38:af:95:94:f8:56:76:ee:3d:b5:bf:d2:dd:23:
         e0:49:92:d9:85:78:c0:11:38:b0:5e:bd:a2:7d:36:ed:87:0d:
         d4:72:12:ce:ee:76:00:ff:c1:c3:fa:f5:d4:48:19:69:c4:51:
         18:10:49:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:15 2024 by rpki-client on console-fra.rpki-client.org