Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa
File:                     ccdc89e1-94e2-3966-988e-15606f6e1e06.roa (raw, json)
Hash identifier:          YKlduBIyJ1c1bjUVYJ04R8yqq1sMdZ5khLbLwuD4DPg=
Subject key identifier:   94:E2:F9:13:2A:7F:79:2F:CB:BD:16:BC:89:71:41:E3:AD:2D:D9:81
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462B74A912DD14BE45A6CC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa
Signing time:             Wed 20 Mar 2024 21:00:13 +0000
ROA not before:           Wed 20 Mar 2024 21:00:13 +0000
ROA not after:            Tue 18 Jun 2024 21:00:13 +0000
asID:                     15169
IP address blocks:        142.250.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2b:74:a9:12:dd:14:be:45:a6:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:00:13 2024 GMT
            Not After : Jun 18 21:00:13 2024 GMT
        Subject: CN=1f00ed7f-8522-4252-af31-346f9b3f4b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:b8:65:de:46:d6:c8:c8:f2:97:ae:85:16:
                    ca:98:80:ee:0d:83:98:12:b8:c2:c4:15:18:47:67:
                    ed:37:dd:96:80:36:dc:db:e7:ec:1c:c1:79:80:ff:
                    d0:5a:6c:a1:12:1d:ba:71:07:f4:7c:fd:ce:9d:54:
                    0a:cb:5d:59:d8:0d:75:85:16:c2:85:60:53:6d:dc:
                    92:6c:7d:4d:d1:66:30:27:d8:12:1a:bd:67:1e:fb:
                    ae:80:18:43:d6:7b:80:b4:f8:1d:41:bc:36:c8:15:
                    f3:e5:19:c8:eb:01:07:e2:ec:d9:7d:f2:9b:51:ce:
                    d9:df:79:a0:2e:a3:0e:10:d8:4a:80:be:5c:46:19:
                    cd:e9:c4:45:e9:dd:74:46:6f:a7:70:b9:1e:f9:49:
                    9f:7b:21:e6:53:3c:bc:05:bb:d5:8d:8b:16:e7:f2:
                    04:81:d5:9e:bb:8e:69:9a:3e:80:05:09:3d:f7:9f:
                    d7:64:8c:96:f8:07:a8:ac:20:18:30:11:64:2c:20:
                    eb:f1:ed:62:b4:b3:eb:d0:0c:99:62:32:b4:12:87:
                    c6:ac:f6:d0:e4:3c:92:47:a9:92:47:fa:37:2e:24:
                    01:0c:7c:7f:db:4c:cb:a8:ce:52:e0:f7:be:0c:72:
                    43:53:f5:c0:5e:a4:b9:e2:35:d5:10:3e:32:e5:a0:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E2:F9:13:2A:7F:79:2F:CB:BD:16:BC:89:71:41:E3:AD:2D:D9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e6:b7:9a:bc:4b:8d:56:34:60:66:bb:2f:0b:52:86:b9:8c:
         4c:e1:de:f4:c0:69:b3:69:73:65:50:db:21:fe:60:00:4f:83:
         9b:b9:5e:f7:8d:6a:f6:5e:37:97:d9:dd:f9:b4:6b:6c:c5:ce:
         8d:5d:44:e6:c7:29:02:1c:07:4b:4a:95:c8:ec:92:ea:20:20:
         1d:10:e6:15:f1:a1:ff:da:dc:69:92:49:2b:4b:a0:48:b5:5a:
         c2:6c:cf:de:72:11:30:c5:48:d2:ba:88:56:0c:e7:f8:2c:b8:
         c8:54:16:81:af:93:6a:9d:0a:08:f7:d3:82:1c:e6:e0:3c:0a:
         80:47:2e:a8:f0:68:26:1a:a4:c3:66:bf:f0:21:d0:8b:f3:8e:
         18:e1:b4:5d:a2:c0:c4:33:b7:c1:a4:9c:4b:e0:af:a2:58:6a:
         45:6e:d4:1e:59:10:2e:9a:d3:de:ed:1e:5f:7b:37:e4:cb:fb:
         84:3f:3e:be:c0:22:bf:ef:0a:12:ae:7e:89:4d:c5:00:a3:53:
         97:08:a2:09:fb:db:0e:84:89:ae:d2:03:79:1f:8b:fc:ca:b5:
         07:1d:a7:79:cc:f5:58:2a:2e:1a:3a:4e:68:37:5a:35:67:ee:
         e8:db:1a:75:5d:b7:af:0f:99:ed:11:1c:80:70:68:67:be:cb:
         af:7d:48:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:42 2024 by rpki-client on console-fra.rpki-client.org