Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa
File:                     fcffca7c-1a11-39cf-b450-a1243d10e54e.roa (raw, json)
Hash identifier:          qVClDUK7PVKohz3WSLJCmOESjJQ5TP/IGCxqI8ztWbk=
Subject key identifier:   28:C9:6B:CD:AD:9F:4A:20:42:37:4C:B8:AD:5F:71:8E:80:58:F9:B4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E7078AA54C68A711D090B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        142.250.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:78:aa:54:c6:8a:71:1d:09:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=41803ced-e7f7-4a99-8655-a3f455b18ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:fe:3f:ba:48:9b:fb:0c:d2:95:63:f5:15:
                    47:f1:24:28:dd:b7:6a:60:4d:f8:81:31:31:0e:79:
                    08:cb:43:58:bf:58:c8:6a:58:93:ca:32:82:1d:76:
                    09:9a:c7:5f:12:80:ad:a0:88:6b:e2:e0:04:5e:7d:
                    73:b7:b8:1d:ba:61:e0:94:0a:ad:fe:ef:06:85:8e:
                    6d:54:cf:e8:7f:0c:3c:04:53:ce:e1:5f:e5:14:c0:
                    b2:ba:68:b9:cc:62:11:b0:98:82:28:ce:f5:d8:7c:
                    9c:51:d1:a7:8b:77:d6:78:75:de:3f:c5:94:16:36:
                    f5:c2:87:bb:d1:23:86:57:a1:0d:3b:78:ef:90:2c:
                    44:b7:8a:1b:4a:dd:75:89:36:73:11:cb:fb:65:7d:
                    25:7a:6f:8b:18:81:b2:81:fe:f6:2f:26:1c:59:71:
                    3f:7b:6d:10:a9:33:7d:81:f6:f1:91:b0:eb:fa:a1:
                    a7:f9:14:4a:0b:df:09:f5:86:77:d4:6e:fd:e6:4c:
                    46:72:63:e0:bf:79:e5:d1:c1:52:54:a3:fe:84:da:
                    cb:21:7f:90:06:48:11:12:7d:8a:ea:97:0f:4f:44:
                    19:10:03:bf:9d:ae:e9:5c:ab:b3:1e:3d:5c:fa:e1:
                    10:a7:c7:29:bb:fd:17:26:64:19:f2:15:ba:02:c8:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C9:6B:CD:AD:9F:4A:20:42:37:4C:B8:AD:5F:71:8E:80:58:F9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:7c:53:18:c4:19:36:0d:4b:2e:1a:58:32:37:77:44:92:51:
         8b:d2:86:88:ee:5e:3a:3a:c4:37:59:df:4d:42:82:d8:e1:bd:
         93:49:1b:6a:85:22:26:9a:41:1b:bc:7b:47:07:db:c7:3a:54:
         cf:71:74:12:88:13:9c:ad:b0:b9:cc:b4:e0:b7:51:72:37:50:
         41:27:d0:e4:30:c5:30:e5:9d:49:b4:24:cd:31:48:b9:99:42:
         9e:24:ee:d6:3c:06:bd:67:98:26:38:00:17:fd:c5:66:56:cd:
         3d:0b:b1:c3:c3:cb:fd:d5:0b:71:06:9f:70:37:9f:fa:a7:73:
         a9:73:eb:7d:71:01:fa:fc:5b:ae:4b:87:7c:56:de:4a:bd:e3:
         fb:00:74:2d:0c:9f:9a:43:34:91:f6:a8:d0:d9:45:cd:1e:26:
         ce:61:c3:40:c3:8a:c7:17:e6:a3:1b:b7:6d:aa:dc:65:20:5f:
         49:21:29:cd:1b:bd:09:07:7b:1e:c8:75:53:fa:66:fa:9f:22:
         cc:6e:d9:28:29:04:2c:a5:61:01:76:3e:01:f3:d8:a8:a8:69:
         aa:dd:05:c0:68:0f:6b:72:6d:4d:7e:ba:a0:30:c0:09:a2:fc:
         82:31:21:96:ce:23:9d:88:40:17:69:13:88:f6:e3:f0:18:09:
         1e:93:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:22 2024 by rpki-client on console-fra.rpki-client.org