Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa
File:                     48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa (raw, json)
Hash identifier:          hnco7I4b6cWMUJZNB4Tj1nVS3lry9MizCDqAh0ZHJJw=
Subject key identifier:   22:52:60:31:3C:62:54:44:1F:89:B3:C0:F0:0C:BF:48:39:E4:62:0D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454628191D5CBF75BEEDF6F080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa
Signing time:             Wed 20 Mar 2024 20:53:27 +0000
ROA not before:           Wed 20 Mar 2024 20:53:27 +0000
ROA not after:            Tue 18 Jun 2024 20:53:27 +0000
asID:                     15169
IP address blocks:        142.250.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:19:1d:5c:bf:75:be:ed:f6:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:53:27 2024 GMT
            Not After : Jun 18 20:53:27 2024 GMT
        Subject: CN=c5a72ff9-ab3b-4d9e-ae77-18b1dd570da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:51:4e:1c:9b:ca:30:66:b8:a5:50:51:a6:
                    c4:db:f4:c8:b0:ce:cb:a2:cb:80:8a:0e:29:a5:bd:
                    89:9d:2a:8b:a4:bf:df:be:2a:84:4a:83:6c:7f:aa:
                    c9:7d:10:d6:1c:0e:68:f0:b6:62:17:99:41:30:1f:
                    d9:34:f9:7f:84:2f:e2:c8:b3:19:a0:07:ab:c0:ee:
                    08:d9:98:f9:e9:d9:7f:20:ce:e6:ac:6d:8d:48:3d:
                    21:3d:72:9d:b6:d4:5c:33:c1:2c:ab:75:b1:25:63:
                    31:a1:5e:37:e6:a0:73:c8:67:d8:43:3d:31:df:92:
                    5e:8a:f9:07:bb:2f:bc:c8:bd:e6:27:cf:fa:56:98:
                    1f:59:b2:67:3d:49:c8:d4:ad:ce:7d:8d:c3:37:9f:
                    79:2b:dd:ec:24:47:07:08:31:84:04:43:90:4e:7a:
                    0f:9a:e7:ba:8b:19:04:45:49:ba:5b:4d:4b:f3:c3:
                    b0:86:fb:01:74:c2:2c:9e:5a:79:bb:38:00:59:8e:
                    4e:71:5f:74:4f:5a:89:eb:54:dc:5e:65:14:79:f7:
                    84:cd:c9:1f:d9:07:0f:1b:56:db:0d:ce:01:11:1d:
                    cc:66:74:b9:c1:23:5e:c5:88:cd:4c:71:e6:b3:14:
                    44:63:80:9a:b8:47:51:ce:42:69:bf:48:1f:16:13:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:52:60:31:3C:62:54:44:1F:89:B3:C0:F0:0C:BF:48:39:E4:62:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:24:3f:23:5e:b6:da:19:66:7f:e7:ba:e4:11:a7:b3:b8:
         8c:a1:56:40:7e:85:07:70:da:a8:4d:ad:99:bf:46:b2:28:ba:
         6a:94:3a:f6:62:bc:65:5e:c7:65:14:f6:e7:71:3d:ac:d2:1a:
         ce:06:9c:27:ee:a8:45:b5:35:7d:5a:f9:88:bd:5e:c7:82:04:
         b4:83:b3:cd:88:30:c6:5c:76:96:02:b9:d2:73:4c:07:ee:cd:
         7a:eb:75:48:da:37:97:86:44:55:b0:53:e1:19:58:27:82:0e:
         69:53:50:82:38:55:56:6f:ec:ff:13:d6:5f:c8:4f:55:7b:6b:
         f5:13:77:81:9d:6e:86:ca:ca:f0:f6:fe:4e:2e:54:11:44:9c:
         f4:3a:7e:65:d1:5a:6c:5b:07:e9:3a:ec:b1:15:8b:0e:e3:18:
         f0:3b:c6:62:52:dd:59:5c:e0:75:43:e6:14:d4:22:a0:d0:7f:
         4e:17:2f:f1:0b:47:cd:24:70:58:65:bd:05:6f:9e:69:4e:c3:
         53:58:d9:81:8b:30:5d:55:1b:4f:61:ef:e7:76:35:89:53:ec:
         82:ce:ed:12:18:8b:e2:e7:2c:9c:45:e3:c8:9c:22:31:9f:f1:
         c0:bb:fc:05:5b:8b:af:10:74:5f:60:d2:eb:05:d3:09:70:b5:
         1e:48:5f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:52:19 2024 by rpki-client on console-ams.rpki-client.org