Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa
File:                     7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa (raw, json)
Hash identifier:          orGqtaS0VoVtrMjAl2ICnpekG/8ixQjtwBSUf6bMjiU=
Subject key identifier:   92:2C:2C:28:8B:31:D5:FD:AB:83:C6:D7:26:1F:79:C7:1F:A3:60:F9
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E7073DF8DFD0E4216D7E000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.251.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:73:df:8d:fd:0e:42:16:d7:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=bd65388e-f2d3-4e74-8727-5a1e78b3e835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:7a:d0:2f:1d:81:94:ed:cc:29:e9:23:3b:
                    0b:4d:54:19:83:05:26:40:93:3e:02:98:24:e1:85:
                    10:d1:40:0d:16:cf:d0:2e:a9:a4:c2:f7:5b:20:47:
                    1d:19:e9:49:bd:ef:b4:21:fd:7f:05:45:8a:a8:2a:
                    b5:f0:2b:41:34:cd:29:c4:a6:f2:bb:9b:ef:82:43:
                    ce:ef:67:66:aa:e3:d3:4b:d7:b6:34:61:b0:3c:12:
                    6f:81:4c:d7:c6:58:ef:61:97:fc:c3:17:57:9b:21:
                    66:74:1a:09:9b:54:d8:05:dc:c6:b0:f8:12:5b:07:
                    b2:50:79:4e:4c:b2:16:7e:2a:36:98:f4:3d:26:34:
                    06:90:96:1c:41:e6:04:de:4c:0c:0b:b8:19:85:c5:
                    46:25:32:67:9b:fd:ad:37:18:b4:5e:fe:cb:85:79:
                    07:1e:d9:18:e4:c2:69:bd:cc:43:9f:9a:09:56:68:
                    ff:05:1e:ad:2b:5d:46:08:e4:44:7d:58:35:eb:87:
                    f8:e2:d4:0e:a8:3f:c5:6e:3c:5e:ff:e4:03:3e:b0:
                    53:d2:11:89:3e:39:d1:44:8d:4d:ae:b1:d4:08:91:
                    eb:60:98:6e:4d:51:e0:ae:f7:ba:bc:78:e6:df:bd:
                    9e:ba:63:ca:dd:16:67:8c:ee:2e:72:f9:44:17:58:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2C:2C:28:8B:31:D5:FD:AB:83:C6:D7:26:1F:79:C7:1F:A3:60:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e5:9f:a6:1e:c5:5b:4e:6e:12:1b:22:8c:a7:3a:2a:df:38:
         e1:4a:72:de:1e:96:a5:92:4d:cb:5a:f1:85:59:12:2d:58:c4:
         e8:b3:1a:c1:06:98:8c:0b:33:c2:4d:dc:82:fd:40:27:38:eb:
         5c:96:ab:a9:20:7e:4a:52:0b:ea:a1:5f:c3:b2:08:36:38:2f:
         de:43:ca:4d:0d:f4:76:24:da:2b:b0:53:e0:a8:8a:4f:73:cf:
         50:bc:17:a7:13:00:60:6c:90:0c:e1:60:2a:6e:89:86:64:28:
         10:a3:fc:2b:b2:cf:61:85:8d:07:02:fa:e1:e2:b1:9f:56:21:
         8f:22:54:81:89:c9:18:f0:b5:67:ba:00:e3:66:0e:bd:ac:db:
         92:8e:f6:fe:51:50:12:9c:be:4b:cd:51:f7:42:40:01:85:07:
         e6:86:bc:14:64:45:d0:39:ad:20:aa:87:29:b7:34:d9:ed:71:
         e4:4e:d0:18:f9:ef:02:53:5c:d5:ba:c4:ae:ca:20:5a:11:1b:
         a7:70:a6:3b:81:71:a6:35:65:9c:1d:f4:d6:da:08:f4:14:19:
         7d:f5:17:bf:eb:0c:40:f1:6d:6b:e7:7f:84:54:0d:d6:44:bd:
         00:85:10:1b:b1:a1:cf:d0:80:7d:a6:29:3f:60:3b:2b:cd:be:
         b3:cf:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:17 2024 by rpki-client on console-fra.rpki-client.org