Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          5560bjkJ2PFxwex+WTdRbjlVpopqfu3eYmtaCjKTsRM=
Subject key identifier:   59:FC:68:6B:FB:ED:5D:3B:88:87:73:21:98:9B:CB:1C:BC:0F:7C:76
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4B4025B68FCE42307AABBA6F07017942014785FA
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS61317.roa
Signing time:             Sat 27 Jan 2024 00:42:59 +0000
ROA not before:           Sat 27 Jan 2024 00:37:59 +0000
ROA not after:            Sat 25 Jan 2025 00:42:59 +0000
asID:                     61317
IP address blocks:        140.99.48.0/24 maxlen: 24
                          140.99.58.0/24 maxlen: 24
                          140.99.168.0/23 maxlen: 24
                          140.99.248.0/23 maxlen: 24
                          140.99.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Apr 2024 17:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:40:25:b6:8f:ce:42:30:7a:ab:ba:6f:07:01:79:42:01:47:85:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jan 27 00:37:59 2024 GMT
            Not After : Jan 25 00:42:59 2025 GMT
        Subject: CN=59FC686BFBED5D3B88877321989BCB1CBC0F7C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:a5:16:d3:c6:21:de:a2:44:42:6a:8d:48:2f:
                    27:5f:d4:b7:4e:f0:6b:aa:ab:9b:35:a4:6c:a7:e9:
                    12:d6:88:71:90:b2:23:6d:42:fe:16:83:0e:db:28:
                    8d:aa:c0:cd:34:da:bf:a0:bb:e6:df:a7:60:91:87:
                    2c:6f:72:a0:72:17:c8:d9:3b:45:1a:70:d1:dc:b8:
                    82:c2:ab:eb:f2:77:fe:a0:c8:64:e9:20:d0:ff:5b:
                    53:ab:63:10:89:ba:98:c2:21:e2:d5:ba:47:26:4f:
                    d8:cc:15:67:af:7d:df:b2:4a:77:ae:ae:a1:a3:60:
                    ec:54:fa:9e:59:21:c1:f1:39:57:d2:2f:ee:93:d2:
                    4f:b7:ea:52:35:27:00:02:c8:af:31:12:2d:ba:04:
                    3b:8d:c6:cd:26:b9:ad:80:94:82:a5:1d:45:a9:12:
                    f0:4c:8d:d2:8b:24:f4:67:35:cc:3f:88:16:0c:27:
                    25:89:11:98:5d:ef:bb:84:a0:50:e3:cf:cc:e3:af:
                    a7:67:b8:d3:67:4b:4b:5d:59:fc:87:2d:d0:5a:47:
                    98:1f:d9:64:45:26:34:1d:1d:b9:3e:08:f2:ed:f7:
                    5d:01:28:a2:f8:1c:f7:59:e4:dc:43:75:e0:6f:b3:
                    a6:82:9a:e8:e8:11:49:df:b1:9b:a2:92:2a:ca:f0:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FC:68:6B:FB:ED:5D:3B:88:87:73:21:98:9B:CB:1C:BC:0F:7C:76
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.48.0/24
                  140.99.58.0/24
                  140.99.168.0/23
                  140.99.248.0-140.99.250.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:44:df:e5:43:b5:7f:79:a2:c5:e6:4a:59:24:7a:fb:d9:41:
         cf:09:57:24:c5:36:ea:d6:2d:6c:01:02:30:51:0c:6a:99:be:
         46:aa:ec:13:62:64:9b:26:f5:93:b8:27:48:83:5e:f9:92:7e:
         66:07:cd:5a:59:26:f9:4f:dd:61:67:61:c3:fa:e7:7c:e3:73:
         85:3a:52:31:f6:f6:04:4d:67:3c:f4:c8:b9:af:78:38:52:24:
         f8:e3:86:f9:59:cc:c1:b7:05:af:49:b4:6f:5e:4b:40:35:84:
         23:bd:1b:a8:b7:e1:2d:89:63:8c:79:dd:c2:49:59:61:00:07:
         c4:c5:d4:f4:2f:65:03:6b:a0:9b:b1:79:d8:05:10:22:3a:dd:
         57:69:95:97:8c:70:1d:46:56:ab:4b:a4:65:c2:e1:22:f4:73:
         d0:45:95:bf:bf:cf:dd:ee:d7:da:4a:3b:64:8f:64:f3:7d:ca:
         dd:69:1d:cb:d9:06:15:84:ed:31:af:db:81:c5:ca:5f:2f:fa:
         47:9b:70:06:c3:3f:6f:8c:bf:ad:13:7c:4e:7f:9b:ed:7f:8c:
         85:4f:05:d2:d2:a8:77:26:19:fe:0c:26:f3:4d:c6:f8:a3:a6:
         c9:64:01:46:98:24:43:d6:12:48:87:fa:c7:9d:c9:70:89:e8:
         3c:98:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:38:53 2024 by rpki-client on console-ams.rpki-client.org