Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa
File:                     d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa (raw, json)
Hash identifier:          13X2HvkWdFzin9GtYZOdIl21ybUK5QT/4lNfu8gTOtY=
Subject key identifier:   BA:C9:A5:84:EE:69:D7:07:39:79:82:8D:F9:75:C8:62:52:3A:9B:B1
Certificate issuer:       /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Certificate serial:       010D0C9F43285845AB2356DD60FD87A886B13061
Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        216.24.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:56:dd:60:fd:87:a8:86:b1:30:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=47733998-3f32-42ab-a7cb-0e7183c8a845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:d7:35:f6:58:df:45:fc:6b:f2:d4:35:50:
                    34:04:e5:5a:72:60:65:a3:be:ec:e9:f3:00:54:f6:
                    fb:78:84:57:38:e7:43:1f:55:f6:09:b8:50:ac:68:
                    43:4f:ec:c0:98:51:95:f4:05:5d:ab:e1:69:7e:30:
                    5a:3e:e5:39:46:eb:6c:9a:32:64:f2:97:97:fa:fa:
                    65:30:ab:f0:a8:76:09:75:a1:40:a4:36:57:2c:58:
                    0f:29:b1:72:76:6e:47:c7:a6:11:25:4c:45:bd:7f:
                    b8:e1:5f:62:b7:d1:83:1d:02:51:d4:21:61:a0:c6:
                    f7:bc:af:5d:a9:fd:55:c4:0a:6a:96:41:52:d4:2e:
                    a7:4a:09:18:41:a4:99:76:c3:ca:0e:f0:6c:a0:45:
                    4e:1b:a8:41:9e:e3:23:93:5a:40:95:91:a9:90:e7:
                    9d:49:b3:df:df:c2:d4:63:31:86:be:f4:10:bf:49:
                    56:d5:b6:dd:af:46:ec:ff:35:1f:60:c0:b1:5c:65:
                    24:9b:e2:07:e8:04:5d:43:66:f7:f4:71:1d:cb:c7:
                    05:70:34:85:f7:aa:bb:5f:e1:05:b3:7f:af:83:d5:
                    85:0a:f6:18:46:97:4a:c2:fa:f2:22:00:bd:73:96:
                    4d:4b:f6:7e:f3:9c:51:78:95:dc:7a:b3:66:40:50:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C9:A5:84:EE:69:D7:07:39:79:82:8D:F9:75:C8:62:52:3A:9B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl

            X509v3 Authority Key Identifier:
                keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:11:70:67:bf:f4:1d:5b:04:29:79:f6:db:5c:d1:5c:f9:09:
         5a:ee:79:dd:8a:8f:84:01:21:6c:45:a3:39:e1:dd:a7:e1:d8:
         62:07:22:87:1e:b2:d3:36:c0:1f:a7:96:e7:1b:17:c2:d5:a3:
         a5:3f:14:bc:1d:eb:5d:7d:25:21:db:2d:63:0f:3c:5d:cb:5a:
         05:bf:3b:c9:94:e6:da:d1:60:67:7f:6d:5f:87:a9:46:d6:9b:
         7d:d8:67:4c:3d:b7:02:16:8b:43:1c:56:ac:f5:2f:d1:f9:d1:
         fd:07:21:b0:a0:12:e6:97:8a:e2:38:48:1b:b4:54:09:96:28:
         f2:47:a9:04:2f:3c:13:1e:ac:92:d9:cf:32:e5:c0:8d:95:61:
         b4:ef:50:c8:74:d2:66:66:dd:0d:a1:18:ad:b7:95:7e:bf:83:
         0a:92:dd:19:45:b7:9e:28:b6:e0:6e:d4:dd:be:ee:4f:dd:bd:
         c1:b5:85:3e:bb:b2:49:5e:0f:a0:c8:bf:7b:fb:e9:2d:c1:3d:
         cc:6b:1b:5c:f6:22:6d:ca:d2:eb:3e:b1:32:4b:fa:5e:91:a6:
         8a:4c:eb:a8:64:33:3b:6a:d7:d7:f7:3e:9f:44:2e:e1:bd:00:
         fb:4e:54:69:e7:8f:fa:3c:52:5f:9d:7d:fb:57:7d:0d:7e:18:
         0c:91:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:00 2024 by rpki-client on console-fra.rpki-client.org