Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbe70973-503c-3940-9e3b-a9f446573caa.roa
File:                     bbe70973-503c-3940-9e3b-a9f446573caa.roa (raw, json)
Hash identifier:          Zg79nA+CoMZTc5X8AIl/7puA4YwdGgFNWqtaxHN6vMI=
Subject key identifier:   EF:78:72:82:09:E9:B0:5E:66:14:40:0D:A2:91:38:BB:9B:1F:39:9C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584549097960C05DCE9BCD04CA98
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbe70973-503c-3940-9e3b-a9f446573caa.roa
Signing time:             Thu 21 Mar 2024 21:39:10 +0000
ROA not before:           Thu 21 Mar 2024 21:39:10 +0000
ROA not after:            Wed 19 Jun 2024 21:39:10 +0000
asID:                     15169
IP address blocks:        74.125.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:09:79:60:c0:5d:ce:9b:cd:04:ca:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 21:39:10 2024 GMT
            Not After : Jun 19 21:39:10 2024 GMT
        Subject: CN=679e02ad-0c33-4ac9-9def-e6bd34f2b821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b1:f5:d3:0b:85:c6:26:f5:3a:12:a6:39:af:
                    a1:f6:8d:26:3b:3d:bb:cc:d5:bf:4b:37:a6:a6:d3:
                    c5:d7:e2:ad:7b:b3:1f:db:56:87:48:f0:53:2f:95:
                    53:37:c2:a0:2b:03:68:0f:ce:63:65:0f:9f:ca:65:
                    07:60:86:a5:a7:3b:1d:9c:f7:9d:75:e4:39:ca:0e:
                    fd:35:ca:06:ff:be:de:f8:20:f7:ed:37:14:61:54:
                    93:8f:df:e7:68:e0:71:9a:ad:ad:fc:8e:1a:0a:0a:
                    e3:ac:cd:b4:c4:ec:be:14:59:3e:69:19:a9:7d:7c:
                    b2:71:92:5d:0a:db:2c:d0:96:f5:03:c0:c3:cb:88:
                    2e:be:bd:38:11:e6:a9:9b:45:8e:de:b2:70:a5:2f:
                    a3:54:1e:90:81:26:67:f4:02:36:16:24:d7:85:00:
                    36:12:1a:be:0e:2c:4a:80:d4:18:9d:af:fd:a1:c1:
                    5f:3e:46:53:68:ba:71:c3:e1:0d:5c:f7:cd:42:71:
                    eb:5f:51:f9:21:ca:f7:b6:63:12:ba:c0:8d:a9:dc:
                    f8:63:8b:1e:69:84:16:37:b9:21:7c:32:1a:4e:c3:
                    c1:42:f9:70:89:d3:03:42:a3:dd:27:be:94:ef:a5:
                    ba:4e:bb:b6:f3:d9:71:61:ed:15:27:81:7a:d0:87:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:72:82:09:E9:B0:5E:66:14:40:0D:A2:91:38:BB:9B:1F:39:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbe70973-503c-3940-9e3b-a9f446573caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:d6:d5:d1:b0:ea:c3:8e:9e:63:65:ed:e6:14:99:0e:84:
         36:24:44:9a:ff:e7:5c:ec:0b:06:f5:8a:c6:44:33:8e:85:dd:
         02:64:80:95:d0:57:54:b3:73:5a:d8:f0:e9:05:27:1d:b9:40:
         fc:1a:ba:c9:02:77:68:9b:2c:a9:2e:67:c7:06:2b:22:17:63:
         de:99:65:aa:ab:c5:24:79:00:db:31:f3:8a:66:93:c2:e9:18:
         97:a6:fd:e4:3b:40:6d:ce:1e:a9:5f:f9:1d:21:1a:51:66:78:
         cd:b3:2b:cc:7c:92:c4:83:e8:d7:76:3e:bf:31:ac:a9:0b:6c:
         05:fa:90:56:66:49:b7:f4:75:8c:ba:53:c2:a0:49:a6:f0:8e:
         fd:8f:66:de:d4:c8:0e:4d:d6:6d:9e:72:27:8f:c5:23:47:1e:
         7b:bf:aa:07:cb:73:a3:3e:b4:c4:48:dc:71:4d:1b:8f:b2:04:
         36:4f:ed:42:73:b1:b8:3e:97:26:54:a5:be:8e:d5:6f:66:b2:
         a8:6c:2e:c6:88:b4:da:2e:12:82:ed:ba:29:a9:88:f1:b9:6a:
         8c:01:77:af:b1:3a:41:89:96:9e:94:25:d8:3e:73:89:d0:74:
         c2:13:06:5b:ac:0c:a0:a8:81:2d:c1:c5:42:84:43:43:cf:3d:
         c8:5c:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:20 2024 by rpki-client on console-fra.rpki-client.org