Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c381b149-36a4-3861-b92b-1f345c601274.roa
File:                     c381b149-36a4-3861-b92b-1f345c601274.roa (raw, json)
Hash identifier:          j8LZX7NztyMGH3TDEWERoH5XGokLJFdG8iKgv+A8Eqg=
Subject key identifier:   26:B0:83:F8:72:BB:68:AA:57:33:5E:EE:2C:EA:80:6B:6D:1B:CB:C1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E707D15B0FE40E151B6E800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c381b149-36a4-3861-b92b-1f345c601274.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.251.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:7d:15:b0:fe:40:e1:51:b6:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=adf8af81-cff0-416e-95e8-58a8ecdb4f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:fe:af:39:66:db:b8:69:63:5b:d3:32:cc:
                    88:02:f3:0b:6b:44:5b:b2:1e:27:62:6b:c1:de:4c:
                    42:db:2d:40:bf:cc:49:57:db:ea:38:2d:56:a3:06:
                    f6:eb:c7:2e:12:50:b7:85:22:08:eb:80:22:ce:07:
                    62:07:e2:a4:c5:59:78:7c:4a:55:64:4a:06:d7:70:
                    7b:8a:29:9f:bc:1a:63:08:08:3f:aa:99:0d:af:ee:
                    86:42:11:20:ff:78:77:9c:aa:2b:d4:f1:0e:d8:98:
                    f1:93:46:f4:a6:67:05:69:d2:f3:5e:7a:56:3f:4e:
                    f2:24:ba:1d:96:95:71:77:88:4e:40:ed:90:0e:b8:
                    ae:78:0a:78:0f:ff:d8:90:71:41:93:79:f5:12:66:
                    59:ff:8c:3f:27:33:b6:49:87:d8:d0:db:62:86:48:
                    08:2d:82:1f:f3:a4:81:02:3f:a9:fd:1b:75:e5:a4:
                    1c:ee:bd:b8:21:9f:b1:78:90:66:6c:88:c2:7b:4b:
                    8d:54:f4:c0:13:b3:1d:4a:1e:fd:0f:3b:d2:2c:fa:
                    fe:8e:ae:74:a5:bd:86:91:d9:30:a4:a7:fd:88:3b:
                    00:8f:3a:d7:da:81:a9:92:5c:73:2f:8a:dc:15:c8:
                    fb:79:c1:d7:1c:ce:7e:d1:85:94:05:22:32:16:9d:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B0:83:F8:72:BB:68:AA:57:33:5E:EE:2C:EA:80:6B:6D:1B:CB:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c381b149-36a4-3861-b92b-1f345c601274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:57:f6:c8:72:37:c0:66:80:14:42:66:a3:55:02:05:81:
         33:5a:25:24:5e:71:76:78:47:82:55:60:cf:38:e9:d5:af:ca:
         b2:f6:99:79:77:dc:a4:1f:40:8e:a5:18:ab:d5:3e:3e:c8:50:
         aa:5a:d4:ec:15:e0:65:f6:fd:0e:6e:60:61:2e:a6:d8:46:b4:
         04:d8:ba:35:4f:d4:9d:a5:26:cc:50:fb:2a:41:e0:f4:e4:e9:
         4e:f7:31:d5:37:c7:38:d7:66:db:bc:73:ff:c7:e4:93:9c:da:
         c5:07:fb:85:db:64:19:19:97:4f:bc:6c:60:69:49:0f:84:0c:
         00:73:77:b0:27:f6:90:30:88:e9:8e:17:b0:f2:24:27:07:65:
         1d:fb:d5:17:b2:a3:95:67:fe:2f:e8:c9:e4:18:f3:ef:d0:e8:
         78:88:0e:a7:ca:5e:7c:9b:bd:22:70:b7:bd:ae:8b:a9:c2:ca:
         ba:fc:be:17:be:9a:b2:12:fd:a7:05:a8:b4:7f:b4:7d:e0:a8:
         00:cb:dd:ba:7d:73:b0:fd:63:15:40:a6:0c:fc:65:9c:bd:5a:
         15:0c:e1:9f:b7:ba:92:7e:7b:aa:e8:50:ea:1a:ee:d7:3b:c6:
         37:e5:34:8e:c6:c0:5c:a9:db:63:4f:da:89:7a:f4:64:9c:90:
         f2:08:db:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecH0VsP5A4VG26AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
YWRmOGFmODEtY2ZmMC00MTZlLTk1ZTgtNThhOGVjZGI0ZjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPD+rzlm27hpY1vTMsyIAvMLa0Rbsh4nYmvB
3kxC2y1Av8xJV9vqOC1Wowb268cuElC3hSII64AizgdiB+KkxVl4fEpVZEoG13B7
iimfvBpjCAg/qpkNr+6GQhEg/3h3nKor1PEO2Jjxk0b0pmcFadLzXnpWP07yJLod
lpVxd4hOQO2QDriueAp4D//YkHFBk3n1EmZZ/4w/JzO2SYfY0NtihkgILYIf86SB
Aj+p/Rt15aQc7r24IZ+xeJBmbIjCe0uNVPTAE7MdSh79DzvSLPr+jq50pb2Gkdkw
pKf9iDsAjzrX2oGpklxzL4rcFcj7ecHXHM5+0YWUBSIyFp0G9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCawg/hyu2iqVzNe7izqgGttG8vBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzM4MWIxNDktMzZhNC0z
ODYxLWI5MmItMWYzNDVjNjAxMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5NV/bIcjfAZoAUQmajVQIFgTNaJSRecXZ4R4JVYM846dWvyrL2mXl3
3KQfQI6lGKvVPj7IUKpa1OwV4GX2/Q5uYGEupthGtATYujVP1J2lJsxQ+ypB4PTk
6U73MdU3xzjXZtu8c//H5JOc2sUH+4XbZBkZl0+8bGBpSQ+EDABzd7An9pAwiOmO
F7DyJCcHZR371Reyo5Vn/i/oyeQY8+/Q6HiIDqfKXnybvSJwt72ui6nCyrr8vhe+
mrIS/acFqLR/tH3gqADL3bp9c7D9YxVApgz8ZZy9WhUM4Z+3upJ+e6roUOoa7tc7
xjflNI7GwFyp22NP2ol69GSckPII28U=
-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:55 2024 by rpki-client on console-fra.rpki-client.org