Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa
File:                     5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa (raw, json)
Hash identifier:          ZilLBi03MpdT+HTJSPP5UTTlfSpuarc6+H4jZrFcdWk=
Subject key identifier:   C1:EE:49:BD:41:7E:05:FE:F2:24:80:15:73:B7:3B:21:B5:6A:30:F1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E707A8D536F74F55C53C000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.251.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:7a:8d:53:6f:74:f5:5c:53:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=f2526ac4-1621-4cad-b75f-eda67ff796a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:fd:a2:95:05:73:14:9f:86:86:cc:2c:00:
                    2b:c6:b9:b1:37:c4:b4:5a:71:7d:17:e3:53:d5:6f:
                    2b:5b:15:7a:88:57:50:ee:04:b4:50:fc:8b:97:ed:
                    54:e1:a0:8b:ac:76:89:1b:16:e9:cb:ae:82:5d:25:
                    3a:f2:fe:b1:dd:1a:01:b6:0f:26:ae:33:0a:75:8c:
                    8a:47:12:3b:f3:5a:80:29:92:a0:6f:a0:ac:21:ab:
                    ae:5b:79:3a:c5:e6:16:ed:51:28:40:6c:9a:b5:d1:
                    12:67:a5:49:a6:55:3b:9a:82:e6:87:f0:b2:1e:a4:
                    32:87:1e:29:f7:4b:ce:b4:b9:61:3e:14:86:0f:5c:
                    49:51:78:9e:6d:1f:0a:1c:98:23:93:9c:bb:82:48:
                    66:a2:15:d6:c0:2b:32:33:a4:5b:b0:9f:7b:dc:6f:
                    80:ac:95:83:73:7b:ed:af:cd:b7:64:98:21:46:b4:
                    89:62:f2:7b:21:43:ea:2f:88:81:4b:3a:0e:05:34:
                    8f:7b:10:ad:da:18:2b:34:6c:a3:19:d9:ce:82:26:
                    86:cc:b0:04:ab:51:0e:e3:9c:a2:e7:8b:f2:96:d4:
                    a4:a0:01:ce:cd:0e:f5:12:a4:a7:1e:75:f5:0e:85:
                    17:dc:f0:58:5f:30:10:de:61:8c:6c:7d:0b:7c:e0:
                    97:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EE:49:BD:41:7E:05:FE:F2:24:80:15:73:B7:3B:21:B5:6A:30:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:81:a5:f7:7a:3b:fa:d2:7d:44:70:e5:80:5d:5e:74:de:7c:
         74:e3:1e:dd:82:14:d3:3b:24:a2:51:01:09:b3:6d:e2:ad:65:
         6a:40:71:fe:e3:2f:75:67:32:e9:03:bb:5b:50:9c:d2:e3:7f:
         53:73:dc:4b:de:3c:26:fe:91:e1:aa:51:53:c7:74:0b:19:ff:
         3b:e6:18:3e:3f:cb:e5:43:a2:f9:5d:c8:94:ca:e0:28:d3:1b:
         d0:f3:08:fa:a0:38:08:9b:d5:7b:0f:99:cd:37:88:5d:e0:cf:
         fc:d3:21:2d:86:99:7a:1d:3b:e8:d6:bf:d3:e1:72:5a:ac:03:
         77:04:72:ad:77:45:9c:7c:a5:50:6a:0b:e7:e3:3f:6a:51:fa:
         e6:e6:d7:72:65:52:a3:4b:b6:f5:98:94:90:c4:9e:27:4a:67:
         a6:d5:4c:8f:76:f1:7c:8f:7d:c4:93:e7:ea:7d:fc:2b:a6:16:
         be:0c:b5:86:2f:a0:c5:3a:c4:d9:47:9d:b8:79:d4:f1:31:4e:
         34:2b:e1:96:57:08:3b:9b:1a:fa:49:71:47:d8:81:a4:24:d1:
         a9:24:76:5c:e6:cd:49:61:39:8b:de:c1:f4:dd:e1:48:17:d7:
         b8:37:8c:0d:67:30:89:07:6c:d6:7c:08:75:df:22:ce:7a:aa:
         10:a8:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:11 2024 by rpki-client on console-ams.rpki-client.org