Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa
File:                     d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa (raw, json)
Hash identifier:          u/+9SkvIkEWOuW8RTerzrr0Tnp80WZSEuSGaPNPu1So=
Subject key identifier:   0C:F8:3C:BC:54:A3:3E:83:09:B0:B1:AE:83:37:8D:76:21:C8:02:8E
Certificate issuer:       /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Certificate serial:       010D0C9F43285845AB2356F6E2043530CE820100
Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        216.24.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:56:f6:e2:04:35:30:ce:82:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=331d0e12-ac4d-4c0e-84bb-106f90c33a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:08:da:0e:86:07:70:fc:72:de:bf:18:c3:
                    c6:db:4c:63:f4:20:35:eb:4e:de:7f:ec:e6:90:10:
                    bb:5a:37:f8:bb:8a:08:1c:ff:a9:36:00:74:36:f0:
                    9b:a5:18:03:c9:d9:2b:05:94:20:ec:be:ec:d5:35:
                    eb:1d:41:67:f2:6e:98:76:0f:5a:30:12:e2:50:3b:
                    21:b0:89:b6:c5:2e:e4:42:38:06:f5:df:70:84:4b:
                    07:0b:89:e4:54:3c:c6:34:a6:8c:74:7a:63:e3:6c:
                    2c:d5:3e:df:f7:bf:d9:11:8e:17:d8:99:3f:48:19:
                    ce:df:fc:5d:56:e9:27:15:59:22:35:7b:b8:03:b6:
                    4b:40:89:38:7d:b7:9d:9a:be:fd:f7:a6:4a:ff:27:
                    8a:7a:34:bf:96:94:03:77:38:70:9f:bf:ad:12:6d:
                    4f:1e:de:67:88:81:36:e5:36:6a:43:01:55:6b:35:
                    3c:3e:53:7f:23:df:74:49:0a:30:ed:0f:19:70:b2:
                    61:11:a1:20:cd:98:74:4c:cd:c5:d3:54:0f:2a:88:
                    57:61:ed:8d:5d:94:a0:a3:aa:3e:01:a5:f5:48:43:
                    1a:06:cc:51:61:6e:37:fd:8d:be:e2:06:a3:7f:7a:
                    4d:fb:08:f9:2b:08:a8:1f:a7:44:86:98:59:a2:9b:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F8:3C:BC:54:A3:3E:83:09:B0:B1:AE:83:37:8D:76:21:C8:02:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl

            X509v3 Authority Key Identifier:
                keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:17:ff:1b:fc:25:c1:d2:bb:15:64:de:de:c2:20:23:2d:d9:
         90:b1:9e:6b:12:fc:85:93:ee:28:fe:46:74:15:87:b9:59:74:
         23:80:a2:39:13:cd:05:4e:a9:51:6e:1f:81:52:03:dc:e8:f4:
         63:33:df:bd:fc:25:0d:f2:a1:94:af:6a:2c:91:60:b2:52:63:
         e9:c0:99:fb:15:eb:46:1b:43:31:f3:71:92:8f:8d:21:52:21:
         1a:81:d6:b2:32:1b:c2:f1:67:20:10:fc:d8:ff:65:80:6f:4f:
         38:a7:73:bb:85:44:da:af:1b:76:a2:cd:b2:dd:94:88:d9:72:
         89:a5:54:16:5b:b7:5d:73:5e:73:5f:4c:a4:09:8c:f2:b1:d8:
         b5:37:df:16:ae:0f:25:9f:81:da:b8:d2:3b:22:f7:f9:4a:d9:
         19:45:6d:62:19:02:f8:74:ab:21:54:07:8a:8d:bc:bf:c6:07:
         b9:bf:d0:3a:a2:86:5a:41:38:8d:9a:57:a5:b1:30:e5:4e:a1:
         ad:ec:54:8c:ba:6b:9b:92:4d:11:12:97:0c:a4:3e:32:5e:43:
         89:06:54:a0:29:21:22:b6:e8:bd:d0:5e:d4:96:07:63:d5:b8:
         e1:b4:8f:90:49:f9:3f:34:9f:97:54:27:25:e7:78:bf:9e:58:
         f4:0a:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:51 2024 by rpki-client on console-fra.rpki-client.org