Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          ux7gNSxasCv/e8Y5CUhhkLufitvw7cbtJ5SPIdXvqwc=
Subject key identifier:   22:9D:50:8C:9B:70:59:E4:62:B0:1B:D0:7F:3A:6E:0F:5A:05:4B:F9
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       1688C81B73B41FEB12A9F3AB1B7A4DB41C4BA66F
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS16509.roa
Signing time:             Tue 27 Feb 2024 09:07:38 +0000
ROA not before:           Tue 27 Feb 2024 09:02:38 +0000
ROA not after:            Tue 25 Feb 2025 09:07:38 +0000
asID:                     16509
IP address blocks:        205.234.204.0/24 maxlen: 24
                          216.246.3.0/24 maxlen: 24
                          216.246.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:c8:1b:73:b4:1f:eb:12:a9:f3:ab:1b:7a:4d:b4:1c:4b:a6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Feb 27 09:02:38 2024 GMT
            Not After : Feb 25 09:07:38 2025 GMT
        Subject: CN=229D508C9B7059E462B01BD07F3A6E0F5A054BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1e:15:7f:71:3c:b0:55:3f:fa:93:b1:86:b8:
                    2b:9c:57:3b:3a:8e:2e:91:08:52:5f:70:ba:63:51:
                    80:6c:1d:3f:b2:b8:52:18:f0:39:14:01:a9:73:a1:
                    39:18:7c:40:19:f9:77:cf:f4:ed:21:c9:12:ef:4b:
                    55:8b:b3:d5:39:32:29:24:05:92:86:89:a3:2b:7a:
                    5b:d6:ed:2b:53:fc:84:79:5b:a1:cf:c3:88:fc:22:
                    ad:fb:8d:fd:7e:b9:56:59:4f:00:7b:5b:49:96:ef:
                    ae:9f:35:64:18:54:04:2f:da:8a:f9:43:c3:dc:98:
                    82:6f:31:22:d1:af:35:86:51:16:08:91:bd:20:fc:
                    81:2b:06:72:31:0b:70:a4:ef:6d:7f:6a:62:87:96:
                    f7:5a:c1:19:23:a7:a7:df:ec:6d:ff:16:38:a2:af:
                    98:eb:dd:24:42:78:5d:f2:4b:91:cc:8c:c6:c5:78:
                    1d:a6:23:d2:a1:93:93:e6:3d:93:11:7d:bd:d7:ae:
                    c9:c1:5e:a4:47:45:81:3d:68:a1:c5:dd:06:0e:9b:
                    b5:9c:a6:a7:17:d2:fc:fd:c4:31:a9:aa:82:11:ef:
                    4e:f1:31:65:36:6e:26:18:16:fb:dd:6f:d3:55:59:
                    07:21:91:d8:45:94:9f:e4:0b:18:4d:b1:29:f0:8b:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9D:50:8C:9B:70:59:E4:62:B0:1B:D0:7F:3A:6E:0F:5A:05:4B:F9
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.204.0/24
                  216.246.3.0/24
                  216.246.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:3c:68:24:80:6b:6e:78:49:5b:50:0e:36:3b:d2:89:b4:
         0b:90:3f:11:b6:bc:ad:95:8a:17:27:07:79:6b:62:72:13:03:
         e6:94:ac:ef:7b:3b:df:c1:b0:e8:e2:fe:66:26:54:e5:df:0c:
         75:70:88:d3:e3:84:81:c8:3b:37:e0:97:a7:6a:eb:1f:c0:c9:
         84:da:53:47:4a:3f:36:86:a4:77:3c:d4:e3:65:77:8d:1e:b6:
         9e:0f:27:0c:12:13:97:fb:99:84:58:07:d6:a4:70:12:b5:73:
         41:ac:fb:7f:97:b2:68:2b:82:bf:58:58:25:38:9f:dd:fe:c9:
         bd:3f:be:d6:fe:3b:e0:1a:38:8a:f3:e5:4e:58:2e:56:51:84:
         12:fb:aa:27:62:10:3d:6f:89:2c:91:00:dc:04:ff:80:4d:89:
         da:e4:2e:63:19:88:74:c4:1f:21:2d:3b:41:9c:b1:ad:26:63:
         52:47:f1:f5:8e:16:c7:73:9e:47:87:fa:e0:19:a1:d7:9b:a8:
         40:de:12:fd:ef:4f:b4:5c:a9:76:ba:4f:a0:44:aa:c9:5f:db:
         a3:df:d4:6d:f5:e8:b2:ac:3d:44:be:19:d5:35:a4:ee:1b:17:
         de:56:5f:48:d3:e7:be:e2:b0:38:13:ca:0d:56:ca:0f:dd:36:
         bb:56:f0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:11:24 2024 by rpki-client on console-ams.rpki-client.org