Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215580.roa
File:                     AS215580.roa (raw, json)
Hash identifier:          w5Hb4DFD68Z38TUyaocJYnqtwYmdhMEfAP2uATnEL4w=
Subject key identifier:   F6:E7:A4:42:92:23:0B:94:02:FB:6E:A6:46:D2:7A:6E:ED:A6:50:B7
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       315CCE6BF04E5002368CD94C053FD0D5F302FF49
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215580.roa
Signing time:             Tue 11 Jun 2024 10:17:31 +0000
ROA not before:           Tue 11 Jun 2024 10:12:31 +0000
ROA not after:            Tue 10 Jun 2025 10:17:31 +0000
asID:                     215580
IP address blocks:        107.173.205.0/24 maxlen: 24
                          107.173.215.0/24 maxlen: 24
                          198.23.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jul 2024 04:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5c:ce:6b:f0:4e:50:02:36:8c:d9:4c:05:3f:d0:d5:f3:02:ff:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 11 10:12:31 2024 GMT
            Not After : Jun 10 10:17:31 2025 GMT
        Subject: CN=F6E7A44292230B9402FB6EA646D27A6EEDA650B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:85:22:ff:aa:8f:71:bf:0f:61:96:00:7c:
                    1b:30:ca:dc:fa:91:8a:5a:a4:8a:30:8b:9a:21:c0:
                    1e:5c:69:e8:93:de:51:07:b6:24:d1:83:34:c3:7c:
                    75:9c:68:01:53:4e:ac:74:52:2d:ed:c5:e7:cb:bf:
                    88:e3:19:18:b2:11:a4:53:18:51:3c:80:41:ea:58:
                    74:b8:cb:b0:9c:c2:53:d4:f5:cd:14:fb:4a:62:04:
                    11:d6:c8:8c:e1:1c:11:3b:c2:2c:32:81:54:ec:bc:
                    03:21:6e:eb:65:97:49:02:ae:d2:bf:e9:bc:11:1d:
                    b6:e0:f3:8e:91:3c:80:78:af:71:fd:40:b9:49:50:
                    35:cb:88:0d:06:a8:b0:74:a6:31:59:3d:87:bc:29:
                    06:79:33:69:66:f1:03:0a:d2:17:d8:1b:61:1f:56:
                    bd:ad:43:79:52:49:42:01:55:32:6f:a8:53:63:b6:
                    08:a8:5d:70:d3:f7:86:4e:b8:82:98:ad:af:38:2b:
                    d0:c4:5e:1d:d5:5e:fd:46:27:bb:97:2b:d5:a6:18:
                    e0:ef:50:01:91:2f:0c:30:91:fb:1a:2e:35:ac:d9:
                    2f:b0:5e:ef:c0:ad:71:66:f8:24:8b:7f:7c:3a:a3:
                    ac:9f:f9:89:a7:e8:54:99:93:ef:db:8e:4d:8a:fa:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E7:A4:42:92:23:0B:94:02:FB:6E:A6:46:D2:7A:6E:ED:A6:50:B7
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215580.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.173.205.0/24
                  107.173.215.0/24
                  198.23.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c7:a9:b5:c9:9e:67:a2:bc:87:dd:db:28:05:02:4f:c6:3e:
         89:7c:9b:94:8b:a7:09:d5:5b:00:19:ed:a2:49:67:55:44:96:
         70:5e:2a:12:c4:06:34:72:18:45:dd:f6:da:7b:0b:64:43:68:
         a0:52:67:d5:d4:de:4e:69:d0:30:58:8a:e2:96:0d:bb:46:c9:
         8b:47:67:9c:a7:c4:93:f5:64:5a:ea:5a:fb:2d:ed:b8:1f:40:
         e3:34:65:e5:49:db:70:73:de:47:4d:a0:3d:45:9e:cb:fe:a5:
         d6:ed:15:5c:9b:9c:a7:1b:e3:b6:68:38:3c:7f:5c:55:70:a6:
         e9:9f:0c:79:b7:67:1d:4f:28:d9:d4:a9:da:71:60:45:fb:23:
         56:92:24:ef:c8:23:ba:05:d8:35:9c:a7:64:fe:90:30:77:8e:
         56:40:ba:74:c0:d5:74:e2:ff:03:52:12:00:5d:73:9c:fc:00:
         14:44:8c:08:2e:e2:0e:9b:f6:d0:fb:9a:be:ea:9f:09:e2:4b:
         fe:9d:6f:9c:f3:4d:41:fb:5f:a0:5d:f1:ee:81:27:c3:ef:b1:
         c7:37:8c:62:2b:05:30:2f:fd:8a:2e:f4:94:d5:02:83:e0:71:
         e6:44:03:f2:ec:08:db:0f:ed:1f:ab:0a:d5:e6:ae:32:8a:ce:
         a9:cf:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 05:18:13 2024 by rpki-client on console-fra.rpki-client.org