Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa
File:                     af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa (raw, json)
Hash identifier:          BpOw+dFU5+1qkD9kttatUFYvmcmM3UpDcgY3/nWU/v4=
Subject key identifier:   B5:55:93:10:7F:2E:F7:D3:3F:BA:14:41:6E:5C:1E:D2:A6:99:7D:39
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858470550BA4E7DA700AF366F6580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.250.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:50:ba:4e:7d:a7:00:af:36:6f:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=381a70a4-fbc9-41c4-b43a-d56eb73c0eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:e0:1e:ef:66:9c:80:b5:65:b2:d8:8e:1a:
                    74:34:e6:6a:2f:c0:fd:09:c1:f5:fd:c3:ce:fd:54:
                    6f:80:18:03:07:9f:bf:ac:6b:ae:08:91:d9:1a:a0:
                    20:33:cd:7a:81:a3:3c:8c:4a:06:b0:0d:3b:9b:60:
                    c1:a1:fa:09:cc:28:0c:c7:09:16:33:9b:3c:e2:78:
                    c4:2b:d9:06:e7:56:6b:0d:25:44:b9:73:4d:f0:ca:
                    0f:68:75:6b:fc:6c:17:88:3b:42:fb:11:27:0b:8f:
                    c9:14:22:7e:06:7a:04:97:40:14:a0:4c:ab:05:91:
                    79:a1:7d:26:9c:df:be:ea:ee:60:13:b9:d0:e0:41:
                    51:00:2c:8f:b8:41:93:6c:e8:28:d7:03:d4:32:3d:
                    27:a7:60:96:79:16:60:51:9f:e2:98:28:ae:90:39:
                    51:79:45:36:bb:56:5b:ac:d1:94:21:58:4f:d3:52:
                    40:3b:6d:e9:07:2c:ac:e8:b1:ac:5d:c5:92:82:e6:
                    15:26:17:eb:2c:b5:1a:ed:81:1e:49:33:7c:06:9d:
                    bf:9a:14:0b:2a:df:a1:2b:fb:69:e8:76:89:9d:60:
                    fa:8f:b8:aa:a1:d0:f3:d6:af:0c:5f:15:e8:1b:0f:
                    2f:89:68:c5:ff:5f:83:02:63:c0:f1:d8:a8:f1:84:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:55:93:10:7F:2E:F7:D3:3F:BA:14:41:6E:5C:1E:D2:A6:99:7D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:11:aa:17:7f:d3:ab:a8:b1:12:b5:fd:ed:52:66:39:72:7b:
         78:aa:03:5e:4e:27:a3:bb:dd:d1:e6:1d:c8:df:95:d2:0c:b1:
         cb:7d:23:f7:e9:64:fc:57:9e:83:ee:ac:fd:85:53:c5:65:f6:
         1c:58:6f:41:80:14:c1:88:05:0c:7e:3b:17:15:81:21:2b:8a:
         1b:82:0b:dc:a0:10:c0:de:63:8f:f7:16:65:3b:4a:66:65:86:
         63:9d:11:d4:0a:cf:3a:84:12:ac:76:52:8a:b0:e1:1d:53:e7:
         e0:6a:87:a2:38:29:eb:63:f0:83:8f:ef:84:2b:a0:03:cc:bb:
         61:7d:18:ff:57:9f:1a:a0:b6:4a:85:6a:f9:ae:2c:bd:7b:76:
         26:c1:a4:c9:c4:a5:6e:1f:4b:c9:9a:30:73:74:9e:e0:f5:b3:
         ef:73:76:b7:08:c3:d1:8e:d0:44:b9:1c:66:f2:0b:f9:d9:60:
         08:8f:62:0b:5a:36:24:ca:bc:b6:86:ba:13:d8:72:58:be:f6:
         9f:58:55:1a:03:0c:6e:63:f3:f4:7b:13:b1:1c:83:c3:ed:d0:
         54:ac:9e:d9:47:81:c8:13:bf:f1:c9:33:ec:ae:26:56:03:d4:
         d4:5b:0d:c4:39:51:41:05:bc:ef:12:f7:29:fe:c7:b9:06:53:
         92:53:f9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:45:08 2024 by rpki-client on console-ams.rpki-client.org