Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa
File:                     b06bceef-a146-3786-a710-c662d310f7f5.roa (raw, json)
Hash identifier:          r9zh3TblfyCQFSga7GeLm1VlSIhIUhMUZUQ200bmMMs=
Subject key identifier:   54:98:5D:6B:84:8E:8E:67:6E:4C:B5:86:89:68:38:11:49:F1:33:64
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E708C2492C2E063850F44C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.250.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:8c:24:92:c2:e0:63:85:0f:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=758f038c-f0b4-41f3-b494-7a546e450d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:98:f6:1e:4e:b6:bb:89:34:cc:49:db:e1:
                    85:52:c4:3f:a1:34:00:69:40:ff:be:cd:da:d7:ea:
                    d4:72:2f:08:3d:1b:89:5c:e6:2d:cc:9c:f4:f2:68:
                    8a:5d:71:ea:82:33:b6:20:89:c2:26:3b:7a:c5:4e:
                    0d:f0:80:a0:76:b8:1c:3c:86:9c:4b:cc:e1:83:33:
                    aa:a9:b0:85:0d:ab:3c:9b:31:a9:fa:ff:70:c7:f1:
                    4a:30:58:a2:19:a4:68:47:cf:f0:da:29:aa:1b:8f:
                    da:b7:a7:3b:51:85:98:0a:8a:61:64:2f:24:c7:e1:
                    a6:ea:d1:2a:5d:b1:4c:4c:8c:dd:c2:20:d1:09:27:
                    33:82:8b:ab:7e:e8:5e:35:96:a7:1f:c9:c2:33:c8:
                    dc:a2:43:49:e7:38:fe:05:5c:a5:ba:f5:64:cd:ea:
                    f9:3e:7b:be:e1:c4:4e:0b:fe:51:fa:5c:3a:f2:b0:
                    5a:8e:ba:cd:36:d2:92:a4:e4:b5:77:d2:8f:7d:5a:
                    f0:16:10:cb:3f:ea:78:18:3a:00:b4:7d:cd:06:4e:
                    f4:0a:dd:3e:66:cc:20:41:57:26:11:fe:79:bb:a4:
                    73:a3:1f:9a:80:71:90:4b:04:ed:3d:5f:a6:b4:32:
                    c1:3a:0f:9d:58:b0:82:9a:7c:6d:f5:9b:7b:71:1c:
                    59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:98:5D:6B:84:8E:8E:67:6E:4C:B5:86:89:68:38:11:49:F1:33:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:24:da:1e:fb:84:ca:b6:6c:c2:7b:a5:98:af:6f:34:22:34:
         d6:22:fd:49:c2:7d:02:c5:81:59:a3:cc:d7:be:93:82:29:fd:
         4d:f8:e1:c5:c8:43:42:e3:2c:dd:13:21:a6:5d:f3:d2:1b:4e:
         ca:cc:d0:df:1a:6d:79:19:a8:11:9f:79:49:d5:b0:63:20:a9:
         13:30:48:5b:4b:cd:64:18:79:30:a7:0e:87:75:38:7f:5e:cf:
         7b:aa:7a:58:ca:9e:ab:7e:b6:f6:e5:9d:da:f3:00:fd:3c:cb:
         56:37:10:8d:5f:92:25:4a:e3:84:8b:21:da:b8:eb:9d:7d:8a:
         fc:00:7a:39:1b:c3:1c:e9:e3:f7:5d:21:5c:8a:3f:51:85:23:
         ac:6e:a6:60:5d:d7:1b:5d:35:61:6f:ce:bb:50:76:12:98:02:
         a0:51:63:c3:4b:0b:b5:93:4a:ac:83:a4:43:1c:1e:51:a4:44:
         48:ff:95:30:40:1f:f4:fe:7f:3e:58:fb:b0:0e:c0:7e:d3:d4:
         4d:45:fd:ca:ac:80:ab:89:a8:6c:94:9e:d9:d1:21:eb:fe:02:
         e7:39:b2:bf:21:5d:c9:32:60:1c:af:6c:9c:74:c7:85:61:eb:
         3c:de:e6:18:2e:eb:07:39:e8:31:72:ee:e2:46:68:ed:6b:b3:
         b1:c6:25:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:54 2024 by rpki-client on console-fra.rpki-client.org