Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d0756b4-cc4e-3318-8247-31817d174c95.roa
File:                     8d0756b4-cc4e-3318-8247-31817d174c95.roa (raw, json)
Hash identifier:          7UGKskjK/FzMthkIvCNrBMEgWTGXfpg36wK+qvbsdzc=
Subject key identifier:   4B:B9:5A:0C:06:F8:B2:2F:8A:80:1D:FA:A4:E7:D8:B2:C3:96:34:9D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462BA77C010A39197C64F4C8
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d0756b4-cc4e-3318-8247-31817d174c95.roa
Signing time:             Wed 20 Mar 2024 21:00:37 +0000
ROA not before:           Wed 20 Mar 2024 21:00:37 +0000
ROA not after:            Tue 18 Jun 2024 21:00:37 +0000
asID:                     15169
IP address blocks:        142.251.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2b:a7:7c:01:0a:39:19:7c:64:f4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:00:37 2024 GMT
            Not After : Jun 18 21:00:37 2024 GMT
        Subject: CN=9670e57b-4aaf-4f6c-b5ca-9cf111a3a9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:94:bd:0e:92:6a:73:76:2e:24:15:c3:76:
                    d5:4a:1a:cc:98:74:dc:b7:d0:2a:6b:19:0a:58:a1:
                    0c:04:fe:5c:83:a7:0c:60:f4:8e:6e:ed:5a:4c:ac:
                    e5:09:e4:63:a0:a2:9b:d3:28:ed:e0:c2:ba:90:0c:
                    88:9c:73:ca:3d:5c:d7:c5:08:43:ab:ae:11:62:f8:
                    8d:31:4f:8c:d7:45:5d:b9:de:05:f1:36:da:d7:91:
                    bf:19:08:22:07:74:5d:c2:72:0a:e5:97:99:74:0c:
                    f4:5a:57:6f:0d:47:f7:43:81:51:87:f4:b6:8d:ac:
                    77:9c:2e:bd:90:4a:ed:5d:e0:97:41:5c:51:be:21:
                    15:37:49:96:70:79:d2:8f:df:8d:ac:45:04:44:d6:
                    89:cd:65:10:8c:2c:60:73:7f:c4:9c:2d:a9:43:be:
                    4f:9a:ba:bf:6d:ff:37:c7:e4:fe:5a:bd:db:93:d4:
                    4c:f9:1d:22:c3:d7:cc:f5:a3:b1:b1:2d:bc:f3:dc:
                    9b:47:de:67:03:6c:73:e5:86:9d:35:0b:15:73:cf:
                    78:ee:59:10:6c:ce:a2:fc:f6:50:5d:1a:17:93:61:
                    0d:e6:98:f7:6c:db:2e:3a:83:36:7b:0c:6f:73:94:
                    9a:c4:52:39:68:ea:53:a9:ad:df:f4:2d:7e:62:84:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B9:5A:0C:06:F8:B2:2F:8A:80:1D:FA:A4:E7:D8:B2:C3:96:34:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d0756b4-cc4e-3318-8247-31817d174c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:8e:fd:dc:0e:6b:fc:19:a7:b9:e5:93:44:21:c6:30:3e:
         10:b7:de:cf:08:ef:38:d6:ed:f3:5b:da:e9:18:b2:5a:14:85:
         03:39:ea:04:22:f8:ed:ec:b0:49:a6:80:a6:bf:4c:e8:91:49:
         4f:14:ca:be:6e:0d:52:8d:50:a4:03:78:6f:07:70:1e:f8:99:
         94:21:c0:88:e9:25:f0:d4:26:d8:3c:6f:79:5c:a5:e7:da:b6:
         42:60:7c:98:c0:cf:d3:95:77:bd:3d:18:f2:b4:71:1a:b6:f3:
         5e:ec:7b:8e:6f:2a:2d:cc:06:b5:59:5b:13:a0:b0:b4:5a:df:
         a7:bf:24:b2:18:19:18:a4:be:d0:eb:af:4b:9c:b2:8b:d9:8d:
         29:65:b4:14:f5:f5:fd:3c:d6:f6:06:fa:d3:c7:3b:d5:b1:7a:
         6a:29:78:7a:a7:aa:72:05:bd:f2:69:09:ca:01:e9:4b:ef:bc:
         9e:e5:c4:9d:40:b6:ba:5d:fe:14:b7:44:d1:42:ea:c4:aa:06:
         39:11:3e:7e:03:0f:39:2f:8b:e4:ea:4d:ef:4c:58:16:ae:ef:
         ec:1c:c6:51:bc:6f:7c:9e:44:25:35:f2:8d:2d:cc:67:43:e9:
         09:65:60:89:f2:8b:58:4a:a3:36:8d:13:39:0e:f4:6b:59:97:
         f6:87:1c:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGK6d8AQo5GXxk9MgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMyMDIxMDAzN1oXDTI0MDYxODIxMDAzN1owLzEtMCsGA1UEAxMk
OTY3MGU1N2ItNGFhZi00ZjZjLWI1Y2EtOWNmMTExYTNhOWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMqUvQ6SanN2LiQVw3bVShrMmHTct9AqaxkK
WKEMBP5cg6cMYPSObu1aTKzlCeRjoKKb0yjt4MK6kAyInHPKPVzXxQhDq64RYviN
MU+M10Vdud4F8Tba15G/GQgiB3RdwnIK5ZeZdAz0WldvDUf3Q4FRh/S2jax3nC69
kErtXeCXQVxRviEVN0mWcHnSj9+NrEUERNaJzWUQjCxgc3/EnC2pQ75Pmrq/bf83
x+T+Wr3bk9RM+R0iw9fM9aOxsS2889ybR95nA2xz5YadNQsVc8947lkQbM6i/PZQ
XRoXk2EN5pj3bNsuOoM2ewxvc5SaxFI5aOpTqa3f9C1+YoSB/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEu5WgwG+LIvioAd+qTn2LLDljSdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGQwNzU2YjQtY2M0ZS0z
MzE4LTgyNDctMzE4MTdkMTc0Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxejv3cDmv8Gae55ZNEIcYwPhC33s8I7zjW7fNb2ukYsloUhQM56gQi
+O3ssEmmgKa/TOiRSU8Uyr5uDVKNUKQDeG8HcB74mZQhwIjpJfDUJtg8b3lcpefa
tkJgfJjAz9OVd709GPK0cRq2817se45vKi3MBrVZWxOgsLRa36e/JLIYGRikvtDr
r0ucsovZjSlltBT19f081vYG+tPHO9WxemopeHqnqnIFvfJpCcoB6UvvvJ7lxJ1A
trpd/hS3RNFC6sSqBjkRPn4DDzkvi+TqTe9MWBau7+wcxlG8b3yeRCU18o0tzGdD
6QllYInyi1hKozaNEzkO9GtZl/aHHAc=
-----END CERTIFICATE-----
Generated at Sat May 18 01:44:19 2024 by rpki-client on console-fra.rpki-client.org