Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72d71c1a-aaf1-3792-94d1-c107cc8a25d0.roa
File:                     72d71c1a-aaf1-3792-94d1-c107cc8a25d0.roa (raw, json)
Hash identifier:          CmHNg+bNoHazDry71HbPkExxPdCHZAhTM5AhSy8bQeE=
Subject key identifier:   D4:E8:EE:FF:9A:23:55:7D:30:E9:27:D7:20:F6:C9:EB:79:44:AA:C9
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462DD65677BA3348C0914B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72d71c1a-aaf1-3792-94d1-c107cc8a25d0.roa
Signing time:             Wed 20 Mar 2024 21:05:01 +0000
ROA not before:           Wed 20 Mar 2024 21:05:01 +0000
ROA not after:            Tue 18 Jun 2024 21:05:01 +0000
asID:                     15169
IP address blocks:        142.251.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:d6:56:77:ba:33:48:c0:91:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:05:01 2024 GMT
            Not After : Jun 18 21:05:01 2024 GMT
        Subject: CN=81f65640-5696-420e-b6eb-4372d735c201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:bd:6c:d7:9d:0c:8f:9c:eb:1d:ff:14:c5:
                    06:84:f3:b3:c8:54:9d:51:59:b3:41:d9:51:72:25:
                    37:c3:8a:53:5a:95:9a:a4:f2:4c:55:9e:45:1c:b9:
                    cf:d5:4e:eb:f5:da:29:a6:63:af:68:62:9e:04:5e:
                    f1:39:54:2e:75:2d:be:4d:fe:ad:34:51:ac:cb:d1:
                    a5:7e:e2:fd:42:96:93:35:6b:0f:ca:ad:a7:dc:91:
                    4a:a9:9f:3b:5f:b5:7e:d9:35:2d:87:6f:b9:b1:5c:
                    7b:66:be:6b:ca:f1:83:56:5b:b8:94:57:f6:10:b4:
                    52:5f:b0:0f:69:c8:39:b2:f4:20:8d:46:3d:01:1e:
                    73:10:54:56:4e:e2:60:78:04:d0:ee:a8:6c:6e:63:
                    6d:d6:dd:bd:e7:74:3d:46:29:69:00:ba:f6:c4:61:
                    8d:4f:68:04:f0:20:43:af:dc:88:be:5c:1c:ae:83:
                    f8:52:c4:4a:f9:25:17:a4:48:c4:33:63:93:40:99:
                    6d:70:5b:c5:5b:32:e4:4c:57:7c:bc:b2:e2:4a:21:
                    eb:87:41:f2:b9:04:69:11:4a:5c:5d:aa:18:23:79:
                    f2:e1:08:10:7d:6b:ec:56:0c:00:ba:ae:b5:e2:7c:
                    17:d1:2c:a0:1b:3b:a2:c6:e9:5a:91:9d:c8:8c:bf:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E8:EE:FF:9A:23:55:7D:30:E9:27:D7:20:F6:C9:EB:79:44:AA:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72d71c1a-aaf1-3792-94d1-c107cc8a25d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:be:09:6a:c8:38:14:ac:b2:76:bc:b4:e6:b4:43:07:76:b4:
         75:75:15:5c:cd:55:04:82:06:be:30:eb:57:95:44:ae:f1:c0:
         fb:a5:42:d3:a7:e8:89:58:3d:20:1e:54:ad:62:71:fc:b7:c3:
         72:75:52:92:78:7d:9e:1e:f0:14:a9:61:2c:a4:00:5e:98:ef:
         6e:28:03:25:7b:87:da:f4:d0:73:b3:dd:22:4a:2a:3a:d8:2a:
         b1:cf:b5:e0:86:a9:5d:4f:f3:5d:3b:52:18:ad:46:47:95:7d:
         cc:a0:64:ae:09:d5:ef:b0:24:87:ff:55:65:b4:31:93:ce:e8:
         ce:6c:6f:f4:26:67:ad:41:91:db:2f:10:48:b2:80:42:86:cd:
         33:e7:f3:5d:aa:34:ae:f3:2a:d9:06:3a:53:48:22:5d:73:e2:
         07:93:c1:93:d8:38:b3:6c:47:5d:2a:7f:77:8b:1f:37:5a:e3:
         6c:ea:2f:9d:cc:ea:db:7d:cc:20:3b:ab:ee:1b:ca:7e:13:91:
         fe:7e:0a:ae:a4:95:79:6a:2c:12:b0:b7:74:1a:40:61:67:83:
         0e:41:0a:d4:02:25:e8:71:67:b9:a4:76:94:3f:2f:e9:c4:a5:
         73:14:55:8d:58:07:d1:43:7a:33:2c:54:bb:a9:b9:f3:57:17:
         b1:f7:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:51:19 2024 by rpki-client on console-fra.rpki-client.org