Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9cb2a04-8979-3731-8c92-0f70826beb04.roa
File:                     e9cb2a04-8979-3731-8c92-0f70826beb04.roa (raw, json)
Hash identifier:          JvPWbgOQYBkGbIeHfZzoUCoA6b2j1YjDc5sc+WJ0kds=
Subject key identifier:   8C:47:9D:60:A2:99:A4:C4:5C:96:F4:40:AF:62:2F:B2:1C:E1:7A:01
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462648001863D47CA5879D80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9cb2a04-8979-3731-8c92-0f70826beb04.roa
Signing time:             Wed 20 Mar 2024 20:49:47 +0000
ROA not before:           Wed 20 Mar 2024 20:49:47 +0000
ROA not after:            Tue 18 Jun 2024 20:49:47 +0000
asID:                     15169
IP address blocks:        142.250.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:48:00:18:63:d4:7c:a5:87:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:49:47 2024 GMT
            Not After : Jun 18 20:49:47 2024 GMT
        Subject: CN=23b38d21-251a-4900-ab71-02fae0d68c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:d1:30:d8:36:ab:75:e6:c3:ca:45:ce:61:
                    83:b9:11:77:76:af:3c:d4:2b:9d:bb:61:dd:bc:b6:
                    8a:c6:9f:c3:3d:c0:f4:6c:31:2c:c2:3c:06:06:48:
                    e4:b5:b6:79:7b:40:e4:f6:d5:53:6c:94:b9:6d:29:
                    e8:3d:e0:b2:22:0a:a5:ba:6a:e9:b4:5a:77:65:7b:
                    e5:9b:3a:de:e8:48:34:13:0d:89:ad:8e:a6:67:84:
                    5e:60:00:df:f5:65:6b:4f:ae:b6:9e:df:16:66:d3:
                    51:5d:46:58:e9:15:e1:d1:aa:3f:dd:c1:1a:ed:c9:
                    66:c0:15:24:6f:e1:8e:31:a2:65:21:a7:f2:0f:14:
                    ce:41:e1:5b:f3:d6:b7:38:05:2a:28:bd:72:8d:95:
                    3e:dc:a7:bc:11:99:af:a8:74:d9:f8:7f:d2:04:e8:
                    33:4a:6f:05:16:99:6c:fe:9c:56:4e:88:07:59:3f:
                    8b:f2:04:92:6f:4f:69:c8:5c:d7:da:b5:fc:4a:9a:
                    c3:a0:d2:d3:3d:5f:83:35:3d:2c:b7:3c:3d:d4:ee:
                    14:18:83:7f:d0:f5:98:8d:73:d3:7f:fb:42:e6:16:
                    e0:79:64:e2:5b:e9:aa:33:7a:38:5a:c3:29:66:11:
                    7b:f7:b1:ca:da:a6:b0:45:7b:62:94:81:74:46:ab:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:9D:60:A2:99:A4:C4:5C:96:F4:40:AF:62:2F:B2:1C:E1:7A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9cb2a04-8979-3731-8c92-0f70826beb04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:20:bc:9b:97:14:2b:d1:01:38:59:f8:05:ba:ad:2a:c2:2c:
         5d:8a:2d:5d:72:06:28:80:f9:51:3e:bf:20:5e:37:92:c8:7d:
         ad:7a:08:08:2a:fe:f1:d5:5f:40:ae:b6:9d:d7:03:5d:73:0b:
         1c:49:88:a0:ab:8b:51:d8:55:40:c7:78:c5:09:9a:81:ee:94:
         2a:ba:c2:54:f7:67:87:8c:ff:b5:61:0d:4a:db:dc:6c:5a:f0:
         7d:8d:8d:45:f1:58:59:07:51:be:d6:df:f4:e9:7f:e4:e2:39:
         33:29:98:cb:b2:75:eb:3e:7c:af:67:27:3e:58:fe:25:40:67:
         6e:0e:9b:99:00:3e:48:20:75:8a:fb:27:93:52:ae:14:01:ab:
         76:6c:58:4a:21:29:b1:80:19:3c:19:22:cc:44:af:8a:24:fb:
         f0:7e:10:7b:ed:4c:37:ff:8b:f6:db:dd:fe:e6:ac:98:4b:e3:
         a7:90:5c:27:2f:3d:75:68:8a:d0:7b:5e:23:68:a1:67:b6:d3:
         76:4a:4b:75:2e:92:6e:55:02:ec:ad:cd:d2:be:64:02:75:a5:
         a7:02:68:22:5e:0f:7c:3a:18:8a:c2:31:95:3f:19:fe:d7:9c:
         d3:ad:76:ec:d2:7b:b3:17:2f:61:96:e5:81:a1:e0:3d:51:34:
         2c:cb:9d:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJkgAGGPUfKWHnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMyMDIwNDk0N1oXDTI0MDYxODIwNDk0N1owLzEtMCsGA1UEAxMk
MjNiMzhkMjEtMjUxYS00OTAwLWFiNzEtMDJmYWUwZDY4YzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CfRMNg2q3Xmw8pFzmGDuRF3dq881Cudu2Hd
vLaKxp/DPcD0bDEswjwGBkjktbZ5e0Dk9tVTbJS5bSnoPeCyIgqlumrptFp3ZXvl
mzre6Eg0Ew2JrY6mZ4ReYADf9WVrT662nt8WZtNRXUZY6RXh0ao/3cEa7clmwBUk
b+GOMaJlIafyDxTOQeFb89a3OAUqKL1yjZU+3Ke8EZmvqHTZ+H/SBOgzSm8FFpls
/pxWTogHWT+L8gSSb09pyFzX2rX8SprDoNLTPV+DNT0stzw91O4UGIN/0PWYjXPT
f/tC5hbgeWTiW+mqM3o4WsMpZhF797HK2qawRXtilIF0Rqvd3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIxHnWCimaTEXJb0QK9iL7Ic4XoBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTljYjJhMDQtODk3OS0z
NzMxLThjOTItMGY3MDgyNmJlYjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUgvJuXFCvRAThZ+AW6rSrCLF2KLV1yBiiA+VE+vyBeN5LIfa16CAgq
/vHVX0Cutp3XA11zCxxJiKCri1HYVUDHeMUJmoHulCq6wlT3Z4eM/7VhDUrb3Gxa
8H2NjUXxWFkHUb7W3/Tpf+TiOTMpmMuydes+fK9nJz5Y/iVAZ24Om5kAPkggdYr7
J5NSrhQBq3ZsWEohKbGAGTwZIsxEr4ok+/B+EHvtTDf/i/bb3f7mrJhL46eQXCcv
PXVoitB7XiNooWe203ZKS3Uukm5VAuytzdK+ZAJ1pacCaCJeD3w6GIrCMZU/Gf7X
nNOtduzSe7MXL2GW5YGh4D1RNCzLnVQ=
-----END CERTIFICATE-----
Generated at Fri May 17 22:54:43 2024 by rpki-client on console-fra.rpki-client.org