Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac5aa560-b137-3b86-aeda-c4eb06f3c23c.roa
File:                     ac5aa560-b137-3b86-aeda-c4eb06f3c23c.roa (raw, json)
Hash identifier:          5GjyRlEM1wGtZjzxCm+iDB2NkKGJeuboknHvs9F7IGs=
Subject key identifier:   65:9F:F3:7A:A3:97:BD:A9:A7:DE:0E:DC:48:0E:BF:F3:61:24:F8:F5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847055159D5A3C408CD622DDF20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac5aa560-b137-3b86-aeda-c4eb06f3c23c.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.251.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:51:59:d5:a3:c4:08:cd:62:2d:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=94a43954-81df-40c5-a708-a4dfb8705c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:69:4a:08:6d:6f:96:d2:c7:2e:80:be:81:
                    78:64:a4:15:22:5e:f0:53:65:c9:5f:7a:b2:14:76:
                    7a:52:50:f9:19:71:82:82:2a:09:b8:e5:16:bd:a8:
                    49:68:d2:ed:cb:f6:2a:dd:19:f3:7b:ed:64:73:16:
                    85:20:20:20:77:b1:11:53:9c:bd:a6:9f:68:f1:2a:
                    65:8a:11:ca:7c:04:c4:81:27:a9:39:bb:5c:87:f0:
                    29:8e:b3:51:7e:43:e7:0d:03:ab:ae:f4:5f:80:41:
                    ef:fb:5f:39:3d:64:fe:1b:24:74:de:30:1a:7d:15:
                    14:e6:8d:f7:dd:3f:fc:ea:5f:8f:d2:35:1c:1c:f1:
                    58:c9:1e:69:82:3e:5a:cf:1e:2c:4f:02:c4:c6:99:
                    03:6b:02:93:69:00:d9:2b:e2:c2:26:dc:0e:fc:ad:
                    b5:d4:30:6f:68:45:39:ff:9a:36:eb:70:9d:b2:e5:
                    65:9c:fc:19:e1:40:e3:c0:fc:f2:0d:93:08:e9:cb:
                    24:af:c1:ae:7f:fd:bd:ed:23:af:49:7a:85:4f:6f:
                    14:68:9c:79:cd:11:9f:3e:96:f8:b0:7f:b0:89:a9:
                    e1:4b:63:14:90:ff:b3:75:f5:7a:81:e4:45:44:c9:
                    4c:e7:da:63:7c:c9:6c:bb:9b:d7:61:34:b2:19:f2:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9F:F3:7A:A3:97:BD:A9:A7:DE:0E:DC:48:0E:BF:F3:61:24:F8:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac5aa560-b137-3b86-aeda-c4eb06f3c23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b3:0a:8f:21:6e:cb:11:14:dd:c9:db:87:58:f0:0c:99:34:
         69:93:5d:bb:d4:84:50:93:fc:e0:89:90:8b:04:9d:93:00:1d:
         1a:46:a6:e8:08:56:56:ca:c4:42:37:8b:4c:9a:1c:b6:fd:84:
         12:4c:22:91:17:fb:91:96:88:d6:d1:d6:b6:65:51:f6:f1:de:
         13:5d:b4:0d:68:27:ee:e1:0b:3a:ae:26:dd:d3:d0:bb:6f:44:
         75:ac:73:23:ba:fd:ab:07:20:cf:dc:4c:14:0c:c6:7f:b2:56:
         5d:88:8c:61:7e:23:78:26:4f:7e:e9:73:0f:3d:8c:30:51:46:
         d7:71:9b:82:13:99:69:b8:5b:96:8e:89:f9:9c:5b:18:20:2d:
         79:1c:e3:cf:a5:fe:be:f0:c8:ad:c0:4d:aa:5b:fa:1a:b8:13:
         84:1d:09:d8:c7:a6:a1:38:17:df:de:cc:2d:32:18:e1:2c:67:
         ae:da:ca:a1:00:18:f6:21:b8:9b:de:b3:ad:3f:bc:0f:0d:d2:
         20:4b:2d:2a:c5:a8:24:6a:aa:87:fc:7b:e6:60:a2:95:f6:86:
         ed:fe:af:fb:ee:3c:08:b1:f9:ca:c8:78:ad:8e:96:84:02:8e:
         6f:06:e1:18:42:4e:44:f4:70:ed:98:cf:d5:80:e7:c5:25:d6:
         a1:59:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:54 2024 by rpki-client on console-fra.rpki-client.org