Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa
File:                     eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa (raw, json)
Hash identifier:          jRhJVNJy/QvDUzoLEBw7TEsll+FOzQkU2FLv1WYPJM8=
Subject key identifier:   8E:86:61:EA:BE:3D:1A:F0:4C:AB:E2:3A:6E:7E:99:A0:AB:A4:31:CD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E707137BBD3941F8543D6D0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.251.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:71:37:bb:d3:94:1f:85:43:d6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=8c5c4960-e88a-44b9-8e37-c793a6dcfff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:6c:a8:44:70:7d:62:c2:e1:d8:d0:ac:ec:
                    f1:5a:ee:59:64:61:3f:e2:c8:b6:6b:49:92:86:2f:
                    ea:ab:6f:35:70:68:3b:9e:a6:18:60:19:56:6b:64:
                    14:08:ba:ca:90:f4:6f:c8:d3:9f:2d:ff:b7:2b:03:
                    57:46:08:ec:70:87:53:76:79:cb:1d:6c:4f:5c:c3:
                    01:c8:07:5c:e9:6c:9c:e8:bb:5c:b1:63:77:6e:52:
                    94:82:e7:85:cc:56:4d:49:33:fd:f6:25:b0:d9:1e:
                    60:c1:3a:61:d7:1e:30:53:43:42:0b:54:3d:d1:b8:
                    c2:01:fb:6d:e1:7a:d8:20:34:17:6b:87:88:a2:9f:
                    05:d1:24:aa:65:5b:79:5a:f5:70:f9:49:db:14:2f:
                    0d:ca:ae:16:1f:32:42:6d:2d:8b:10:52:b3:52:d9:
                    59:7e:58:d5:5a:c9:36:b6:c7:0c:ce:c6:d3:cb:01:
                    7f:72:89:dd:ee:e9:69:6d:6b:7d:9c:a8:fc:3d:aa:
                    64:25:34:02:68:b1:a8:98:1c:6e:31:38:78:55:f7:
                    8f:5c:15:e0:35:ff:af:7b:98:71:64:48:2f:c5:ec:
                    07:62:06:fc:cb:42:85:d6:cc:47:bd:01:eb:29:15:
                    57:5c:3c:46:13:8a:e1:a7:fd:00:c7:a1:06:78:7f:
                    d1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:86:61:EA:BE:3D:1A:F0:4C:AB:E2:3A:6E:7E:99:A0:AB:A4:31:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:02:d2:8f:cd:98:7f:a4:90:cc:6f:bd:ca:f5:7a:98:38:
         d8:60:25:3d:ed:6c:9b:e9:32:62:ef:43:8c:86:65:de:0b:40:
         58:71:33:2e:98:4d:7f:8f:8f:56:63:10:d2:04:41:67:2d:67:
         03:e3:9e:89:8c:29:3a:46:04:2d:cb:1c:12:9d:4c:08:93:c3:
         46:6d:5b:6d:8c:1c:cd:bf:ff:7a:72:01:73:4d:f6:1b:62:2c:
         4b:a5:63:83:5b:c1:81:5b:9e:5f:d0:95:3f:90:3b:9e:dd:c9:
         b9:ac:c9:a5:40:45:5c:89:98:19:f6:0f:10:03:03:12:bf:7e:
         73:af:c3:fb:ff:b5:d7:cc:17:42:69:d8:04:1a:44:5a:93:2b:
         b2:04:db:36:02:cc:fb:01:a2:4f:10:b1:2e:86:ad:7e:55:04:
         c4:a5:79:cf:26:30:e1:b1:48:fe:6b:bd:83:76:48:64:2a:25:
         fa:f1:a5:01:d5:4e:66:fa:cb:21:89:3f:35:15:7a:e8:61:32:
         cd:c7:b5:10:30:48:0f:54:20:d9:40:cc:bf:da:4c:4a:ec:ef:
         63:34:3c:92:aa:5c:6c:79:4f:df:30:c4:03:00:64:5c:63:a6:
         5a:80:03:81:6b:ff:4e:54:7f:e6:4a:57:48:16:5c:24:e1:01:
         ad:67:e9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:17 2024 by rpki-client on console-fra.rpki-client.org