Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS13213.roa
File:                     AS13213.roa (raw, json)
Hash identifier:          b4AOBHOn3JXzVtDlp9ZtcPJM695k08MCV1fJf+d8254=
Subject key identifier:   50:11:9B:00:F9:70:06:D7:3F:84:1E:6E:83:20:C9:12:2B:41:27:7D
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       314BABA8C6B32C438A771BAFBDEB0FFA72D53A8D
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS13213.roa
Signing time:             Tue 11 Jun 2024 09:41:28 +0000
ROA not before:           Tue 11 Jun 2024 09:36:28 +0000
ROA not after:            Tue 10 Jun 2025 09:41:28 +0000
asID:                     13213
IP address blocks:        140.99.224.0/24 maxlen: 24
                          140.99.225.0/24 maxlen: 24
                          140.99.226.0/24 maxlen: 24
                          140.99.227.0/24 maxlen: 24
                          140.99.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4b:ab:a8:c6:b3:2c:43:8a:77:1b:af:bd:eb:0f:fa:72:d5:3a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun 11 09:36:28 2024 GMT
            Not After : Jun 10 09:41:28 2025 GMT
        Subject: CN=50119B00F97006D73F841E6E8320C9122B41277D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:ac:5e:a4:13:b9:f0:00:06:85:f9:5b:31:
                    27:30:68:fe:77:fa:0c:ad:d0:66:4e:14:10:59:82:
                    83:05:d4:58:86:50:90:42:92:33:63:6a:c2:48:44:
                    2a:21:ff:fc:7e:80:17:65:0f:81:7b:0a:36:6c:24:
                    b5:3d:ca:18:f4:68:50:de:eb:a1:dc:0f:1a:7d:b7:
                    40:77:09:b5:a6:f1:59:ad:0f:20:1d:8b:c0:93:48:
                    70:87:95:01:5e:a3:b0:5e:d1:61:00:8c:07:2b:61:
                    fa:69:0b:ae:80:b0:d3:a4:da:6a:5a:7e:60:89:c7:
                    78:c9:65:b4:43:ae:c6:fa:5b:62:a0:fd:61:67:6e:
                    d4:40:d7:d2:ec:83:1e:b1:f0:c7:dc:c9:89:a3:28:
                    76:25:d1:12:af:e2:b5:bb:84:f6:d9:6c:ad:c9:0f:
                    0b:73:20:67:47:0f:62:cd:ed:32:54:7e:43:6b:74:
                    41:96:54:d3:e8:b5:af:d5:55:dd:62:2f:3d:8e:01:
                    dc:d6:b7:ac:33:4c:4e:53:92:df:2a:ec:37:ed:84:
                    4e:7b:38:72:95:98:cd:9c:04:ac:b2:1a:b3:a9:8e:
                    e6:1b:65:5c:e9:2f:99:c7:53:0d:45:b5:d8:29:0c:
                    21:4a:a8:6f:49:78:30:f4:a8:a1:70:94:d8:58:24:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:11:9B:00:F9:70:06:D7:3F:84:1E:6E:83:20:C9:12:2B:41:27:7D
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS13213.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.224.0/22
                  140.99.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:89:1b:37:2e:df:f5:f8:29:f3:93:c4:f0:53:74:f3:c3:
         f8:68:ce:f9:af:24:89:49:dd:03:14:c7:ed:24:51:29:77:bb:
         66:ca:a0:9b:92:6b:1b:54:35:a5:ab:99:e7:f1:39:86:d5:f3:
         5f:36:00:3e:72:bf:03:fa:57:e9:55:86:56:45:08:d1:c7:7b:
         7f:10:56:a7:39:08:1a:4d:34:56:12:f3:4d:bd:6c:99:92:26:
         54:92:82:7d:ea:67:be:5a:74:bd:bf:0f:55:39:97:bd:77:77:
         3a:6a:b9:b6:fa:43:cf:82:15:bc:8d:ab:2b:1f:b2:b1:71:13:
         f5:ae:fe:c1:c4:f6:ce:e2:ef:22:6e:63:3d:cb:f8:5a:cc:70:
         ee:98:60:a8:ae:a0:66:b8:81:9e:41:b1:c4:88:07:47:2d:1a:
         af:22:30:c7:95:01:42:14:7f:e0:04:10:94:a0:7d:b8:14:a1:
         c6:ba:e6:71:9a:ca:8b:bb:0d:1f:75:40:21:6e:13:97:ae:31:
         34:d2:2c:49:43:2f:64:4d:0c:63:b9:5b:74:75:53:02:60:e2:
         43:d2:bf:46:03:c4:01:df:7a:59:34:9b:e8:6a:3a:41:c5:3b:
         26:23:82:57:e6:a4:07:c7:e2:4f:33:6a:47:02:3c:ac:0d:fc:
         17:a3:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:45 2024 by rpki-client on console-fra.rpki-client.org