Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa
File:                     fcffca7c-1a11-39cf-b450-a1243d10e54e.roa (raw, json)
Hash identifier:          1QS+iVJEqxHM/t+wFOKu0zDLM0Kz2XljUwFmIVlHdss=
Subject key identifier:   79:CD:DA:E5:9D:29:20:9A:D6:F3:0D:FF:8A:59:61:89:9E:D8:7D:84
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F059F40A6E67B6B25516180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa
Signing time:             Fri 29 Mar 2024 18:39:12 +0000
ROA not before:           Fri 29 Mar 2024 18:39:12 +0000
ROA not after:            Thu 27 Jun 2024 18:39:12 +0000
asID:                     15169
IP address blocks:        142.250.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:05:9f:40:a6:e6:7b:6b:25:51:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:39:12 2024 GMT
            Not After : Jun 27 18:39:12 2024 GMT
        Subject: CN=53c5783a-c899-4d75-920e-7849a6c6f231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:d8:f1:fb:da:f0:b0:22:cb:e0:97:29:6b:
                    e4:65:64:fb:f9:87:34:c7:2d:16:d0:1e:81:d3:ec:
                    44:8f:99:34:ae:b9:13:ff:67:9b:c9:1f:65:3b:50:
                    2b:67:03:5f:17:41:8a:31:05:08:79:0e:f6:a5:aa:
                    74:81:ed:f5:02:8f:3e:0a:a6:d6:4c:6d:a3:db:e5:
                    1f:77:85:5b:1c:ba:aa:41:a5:2b:07:47:10:7b:1a:
                    37:94:2c:2e:44:a7:50:6f:54:c3:ba:0d:94:f1:db:
                    cc:d7:bd:35:e2:ee:33:97:e7:3a:a6:22:09:90:71:
                    23:78:5b:a1:3a:e1:38:63:09:bf:11:c4:06:88:1c:
                    7f:a9:f9:8d:6c:db:ac:da:80:88:f3:9f:27:89:96:
                    56:75:07:d9:11:0c:a4:15:25:4c:14:1c:db:b5:94:
                    b5:78:94:be:91:df:fd:74:e4:d8:47:ce:3e:8f:07:
                    b2:ce:df:9f:eb:c1:61:a1:b0:5c:f6:23:a0:6f:e9:
                    d6:88:00:c0:5a:a2:1b:1f:62:23:af:be:96:31:87:
                    1a:bc:97:f1:bc:8f:9b:7f:c6:8d:6b:75:23:8e:e6:
                    5c:25:9c:ee:b0:64:49:00:4b:10:22:ad:92:7d:74:
                    bf:a9:d9:ab:db:67:a0:09:ea:77:c6:15:7e:f3:e1:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CD:DA:E5:9D:29:20:9A:D6:F3:0D:FF:8A:59:61:89:9E:D8:7D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:09:1b:cb:96:26:ce:12:f0:60:96:31:4b:14:50:19:44:f9:
         bd:73:51:6b:d6:c6:3d:87:39:1b:a1:9a:3a:ac:a2:12:e6:74:
         4c:e2:4c:69:01:72:0a:c5:01:42:d6:8e:84:28:4a:6e:fb:02:
         ab:9c:0a:40:e4:f7:69:d6:ce:3a:cc:58:f0:55:7e:18:c2:55:
         e4:75:64:27:ee:b2:db:9f:78:cf:6d:ed:e3:7e:89:6e:47:71:
         f2:f4:cf:14:80:7e:83:ef:35:20:d1:ce:67:ab:e0:db:ad:73:
         40:44:46:06:21:ca:c6:27:13:6a:4f:4c:a9:33:85:f0:bf:bd:
         d7:0c:0a:dc:33:e4:62:a9:f5:dc:33:65:f3:ff:c0:26:27:e2:
         a5:b8:d2:b7:29:c2:6e:d9:9c:d9:79:b6:b8:90:61:00:cc:99:
         f2:5b:ce:2b:27:b6:84:b3:36:c8:51:a5:1d:82:f0:b4:97:74:
         9c:5c:b2:ec:78:97:20:f6:2b:04:ff:9a:e8:7f:e2:1c:d6:49:
         90:9f:03:16:00:ed:35:59:23:6c:84:24:d1:d1:8d:f0:4f:36:
         17:8d:7e:ea:f3:0b:fd:85:7a:e8:b2:ed:f6:e6:51:b1:77:f0:
         53:1b:d9:77:b0:d9:95:2d:7e:99:d4:8f:dd:65:ad:2a:78:df:
         43:07:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:43 2024 by rpki-client on console-fra.rpki-client.org