Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          vTxta7Hommg6AuDI7auQ8Zr80WqrngklboAkp1DNae0=
Subject key identifier:   A0:B3:AD:8F:6A:9E:F9:E4:4E:FF:25:BE:71:5C:A6:52:AF:49:E8:5F
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       3943610A2EC9BEDB0093C3B15B32CA8D22EB6EB2
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS61317.roa
Signing time:             Mon 01 Jul 2024 00:00:24 +0000
ROA not before:           Sun 30 Jun 2024 23:55:24 +0000
ROA not after:            Mon 30 Jun 2025 00:00:24 +0000
asID:                     61317
IP address blocks:        140.99.58.0/24 maxlen: 24
                          140.99.168.0/23 maxlen: 24
                          140.99.248.0/23 maxlen: 24
                          140.99.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:61:0a:2e:c9:be:db:00:93:c3:b1:5b:32:ca:8d:22:eb:6e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun 30 23:55:24 2024 GMT
            Not After : Jun 30 00:00:24 2025 GMT
        Subject: CN=A0B3AD8F6A9EF9E44EFF25BE715CA652AF49E85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:35:09:3b:5f:e1:17:cf:73:ec:d5:5e:20:
                    9e:20:9a:7e:50:5d:fa:87:7d:55:84:cf:59:af:30:
                    7f:3d:2c:80:ee:ab:9f:80:58:5d:bb:3b:68:cb:47:
                    ef:d0:b2:0c:6d:16:59:90:2e:04:b3:38:3a:ce:d2:
                    45:cb:d3:fd:21:6f:f1:51:bf:84:e0:7f:23:10:32:
                    a1:93:64:d9:14:0d:8c:b5:09:73:76:57:d0:09:80:
                    a5:b3:8b:a1:5b:f0:be:72:c4:0a:6a:e5:ea:e5:95:
                    ac:99:7f:22:91:e3:03:b5:71:ee:b9:11:5f:9c:81:
                    41:69:62:5d:4f:9f:b8:26:5e:4a:bb:7e:55:6c:49:
                    32:40:a4:85:1a:7a:dd:34:0c:66:07:c1:ac:21:d5:
                    4f:34:74:7f:e9:28:1f:57:50:cf:f5:2a:45:c7:4d:
                    d0:af:9d:e0:04:1a:df:51:d6:52:fc:f6:54:64:57:
                    99:37:bd:e5:48:ba:5d:ad:91:d7:b8:87:fa:b7:71:
                    c2:54:dc:c7:e0:2c:21:9d:42:71:12:a0:02:bb:0d:
                    b7:90:de:cb:4b:2b:5e:38:a4:94:2b:eb:f8:d8:82:
                    82:75:3b:9e:1a:dc:f3:d0:07:09:98:c7:fa:a7:ff:
                    c0:28:02:91:f2:e1:4d:2a:e6:c0:1a:9b:af:12:dd:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B3:AD:8F:6A:9E:F9:E4:4E:FF:25:BE:71:5C:A6:52:AF:49:E8:5F
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.58.0/24
                  140.99.168.0/23
                  140.99.248.0-140.99.250.255

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:77:f3:72:b0:b2:05:ac:dd:bd:7d:68:d6:e6:e1:74:af:
         db:5c:6b:56:13:02:74:e1:08:a3:19:b7:39:47:91:56:f7:0c:
         93:b3:7e:fd:c0:1a:cb:5f:52:2e:14:82:66:5d:12:9c:05:8f:
         7b:86:82:d6:4e:33:12:22:6e:c7:06:e3:79:fa:d2:07:45:8f:
         30:ce:69:82:d2:d6:aa:1d:d5:df:2a:96:c7:14:39:83:25:ce:
         20:59:dd:ea:ab:63:58:09:8c:b2:aa:44:45:ab:15:da:12:35:
         7f:d5:27:1c:78:38:1e:cb:e9:4d:16:4f:f2:15:fa:ef:f9:88:
         95:60:7a:34:87:8e:6f:f8:70:a8:8a:27:3a:39:11:be:a4:cf:
         c4:2a:08:33:f2:dd:ac:85:57:ae:7e:d6:4d:99:67:e4:28:db:
         53:04:f7:e6:cc:17:b4:f4:0c:40:69:15:60:6c:0a:e2:c3:f2:
         4e:b2:8b:84:59:1b:66:77:1c:eb:e9:ee:48:97:69:71:9c:7f:
         3d:8b:ba:68:da:90:94:20:db:35:56:4c:7c:dd:8d:87:cb:18:
         27:85:01:b9:2d:2e:cc:65:80:b8:94:cd:bf:63:66:0e:43:69:
         61:71:87:9c:85:c2:3b:66:de:81:e0:5c:16:0a:6a:cb:23:a0:
         c5:b1:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:49 2024 by rpki-client on console-fra.rpki-client.org