Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a798f55-b66e-3b5b-b89b-736276961acc.roa
File:                     8a798f55-b66e-3b5b-b89b-736276961acc.roa (raw, json)
Hash identifier:          ziA7qLl3X4X8iykgxlkgKZKGidEVhM9gm7FnT+Pyk1A=
Subject key identifier:   C9:CF:58:A6:79:1A:85:F6:4B:A9:F6:7A:F0:84:F1:66:97:F7:22:75
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858470551499C183B3ADA7127D800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a798f55-b66e-3b5b-b89b-736276961acc.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.251.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:51:49:9c:18:3b:3a:da:71:27:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=a5e0a3c5-a6bd-4bc1-b54c-a585a7106657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:9f:7e:db:c6:49:29:b5:f2:1c:07:11:d0:
                    cd:68:0b:1c:2f:2b:eb:a4:9c:5e:40:6a:32:cc:d2:
                    8e:68:fe:0e:2b:3d:d0:ac:ec:b0:b5:7c:68:70:4c:
                    2c:bc:38:79:62:ee:93:b9:e0:4e:b3:72:1f:a7:fc:
                    51:91:ff:6e:d1:62:45:e5:08:71:ba:dd:ab:ae:5d:
                    3f:7c:b7:d9:41:e4:ed:12:12:95:f1:9d:f5:fc:5a:
                    00:03:77:9a:ac:fb:06:6e:34:8d:c3:fd:e5:2e:ec:
                    df:b8:78:3b:01:df:57:52:77:9b:df:91:31:cf:3d:
                    72:ed:06:60:72:24:72:50:24:cf:b4:77:fc:b0:db:
                    9b:b0:5c:fa:fe:d5:75:b3:98:a0:d1:c4:8d:9a:7c:
                    b1:eb:8f:ce:e6:6b:1c:1f:c5:9c:1e:51:48:50:f9:
                    c6:7a:c2:57:5c:5d:e6:34:52:21:95:c1:ad:4e:99:
                    03:db:98:37:5c:52:f8:18:fd:89:10:19:54:d3:c9:
                    84:d1:5e:82:da:62:0c:e9:f8:15:2a:70:19:0d:4e:
                    03:a7:c8:fe:be:52:92:3c:23:89:17:d0:54:83:2f:
                    ee:c9:58:e5:af:c0:b7:49:77:c7:b7:ab:3a:1c:23:
                    76:c6:d9:da:38:46:5a:f0:f8:85:6c:50:ef:48:d3:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CF:58:A6:79:1A:85:F6:4B:A9:F6:7A:F0:84:F1:66:97:F7:22:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a798f55-b66e-3b5b-b89b-736276961acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:d5:c8:78:2f:76:ae:58:3c:5b:b8:5d:6d:07:84:3b:0c:
         24:15:5e:03:73:d5:c9:a8:5f:4e:a8:12:ed:06:38:40:a6:4e:
         4b:39:17:03:fc:1f:3c:8b:c4:24:ff:0f:3b:9f:fe:1b:3a:f1:
         03:4c:76:85:79:b6:ee:20:5a:cf:84:cc:52:e3:85:94:3e:fb:
         cd:d5:17:38:56:bb:3a:b8:b2:13:81:38:38:1a:22:03:33:2e:
         98:c7:b0:0d:64:4f:99:60:02:99:37:49:c9:01:05:3e:2c:1f:
         dc:20:f8:d3:32:91:06:b8:ba:0b:7d:b9:4a:1e:bd:4b:2e:51:
         60:ea:5f:3d:33:2f:2e:e7:7e:e2:29:a9:bf:d6:2f:4f:26:bd:
         90:4a:37:2c:eb:fd:3f:5f:79:20:76:4c:ca:5b:ff:27:ff:3b:
         d8:82:b6:ee:b0:fd:78:4c:8e:33:17:df:8b:0f:08:ed:f5:ad:
         bf:64:02:6d:50:c0:28:ca:54:48:12:c6:39:fb:14:97:1c:80:
         92:26:7d:a4:49:2b:2c:3f:19:9d:47:07:ae:18:ec:4c:da:66:
         f6:a4:35:3a:8c:79:b9:28:55:cf:b7:0b:4b:3f:17:93:f3:44:
         c4:49:0f:8d:b4:b3:25:72:a9:80:53:6b:5e:7c:28:4f:e8:fa:
         cf:17:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:51 2024 by rpki-client on console-fra.rpki-client.org