Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5733.roa
File:                     AS5733.roa (raw, json)
Hash identifier:          y7y6nPKs9jgAvQY/qw+7Nh0OKLNe5oRHal02XzI3aso=
Subject key identifier:   5B:56:C7:74:F8:1B:0E:A5:6B:45:2A:48:6A:ED:F0:EE:83:E1:4C:CC
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       6ECFCDCCE81BEBBA38B4F4F9A170CA96C641C6DC
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5733.roa
Signing time:             Tue 30 Jan 2024 05:21:28 +0000
ROA not before:           Tue 30 Jan 2024 05:16:28 +0000
ROA not after:            Tue 28 Jan 2025 05:21:28 +0000
asID:                     5733
IP address blocks:        173.84.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 03:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cf:cd:cc:e8:1b:eb:ba:38:b4:f4:f9:a1:70:ca:96:c6:41:c6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 30 05:16:28 2024 GMT
            Not After : Jan 28 05:21:28 2025 GMT
        Subject: CN=5B56C774F81B0EA56B452A486AEDF0EE83E14CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:b6:d0:e9:b4:42:6e:d2:36:d3:84:a8:ef:
                    67:55:51:58:8f:a0:8a:10:b0:a6:5a:49:e3:88:f9:
                    e9:8c:21:60:52:76:bc:fa:b3:cd:03:2c:b0:9e:d8:
                    01:72:ce:86:5d:8e:a2:69:95:94:4c:c4:ec:af:4d:
                    79:44:52:e3:fa:d9:f5:50:91:77:9a:71:2d:1f:31:
                    f7:95:3d:2d:8e:78:42:21:8e:cf:f4:4e:b8:91:49:
                    cd:f4:c2:5c:a4:34:48:8b:75:12:d6:13:f0:8f:1c:
                    31:f2:79:24:c4:ab:20:3f:d8:32:ea:22:86:ac:50:
                    28:5c:0b:c0:eb:c2:87:36:e4:28:78:fe:9b:6e:5d:
                    7b:97:12:58:24:3d:e7:fc:1f:07:1b:2f:c7:8a:43:
                    bf:ac:c8:eb:4e:09:14:b3:20:7e:ea:93:f9:c6:54:
                    65:40:60:c8:42:c2:31:f5:61:9c:ea:96:85:2e:e8:
                    d4:29:6c:d4:f0:b8:a5:65:30:ba:af:3b:ac:7d:c2:
                    4e:e3:5e:3a:c2:e7:cd:4e:db:90:08:cd:2f:f5:29:
                    7d:85:87:1b:21:93:ad:6a:f6:41:35:75:a1:73:5d:
                    77:0b:c4:63:67:cd:15:c0:c9:ce:ca:5e:ad:28:0c:
                    ec:0f:5b:9f:1b:b6:5b:79:b9:04:7c:c6:dc:86:7d:
                    7d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:56:C7:74:F8:1B:0E:A5:6B:45:2A:48:6A:ED:F0:EE:83:E1:4C:CC
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.84.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6e:61:74:7d:bb:5c:ad:fe:a8:08:13:63:59:42:ca:2b:ef:
         7e:66:cd:68:a0:e6:64:9b:24:b3:10:53:ef:a5:0b:5d:1b:de:
         b1:dd:83:98:5e:0a:3f:7a:39:44:96:65:59:47:4e:ed:d2:08:
         52:03:c8:0e:11:b5:f0:f7:4d:1d:aa:96:4b:01:33:dd:46:36:
         3e:21:a3:4c:02:fd:a7:a4:7d:45:ad:8b:59:65:0f:a4:15:5e:
         34:cd:6c:66:8e:bf:e5:52:de:1a:42:d1:e8:65:63:79:2f:d9:
         fb:5d:24:6f:b5:75:4e:89:6c:43:8c:1c:18:dd:1c:00:05:92:
         6a:55:50:b7:11:66:a2:f9:29:5d:65:30:7c:f0:1f:00:57:4f:
         fe:35:b1:7a:36:b5:39:42:98:ae:59:ca:07:f0:1e:3c:79:19:
         9e:45:b9:f6:d5:11:9c:81:d3:ae:56:50:2b:92:a9:90:7b:98:
         4d:84:54:0d:73:3e:33:1c:b6:d2:5e:6c:50:7c:d3:67:d4:c9:
         2e:5a:8d:da:5b:ed:95:8d:2f:ac:1e:81:e6:ba:52:07:81:1e:
         26:52:d4:bb:9a:36:f4:14:ca:bc:8c:3d:93:0b:08:f2:7c:b1:
         2f:66:28:31:73:8b:c1:bb:89:c6:a0:54:d5:d3:41:d7:e3:69:
         66:1b:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:37:41 2024 by rpki-client on console-fra.rpki-client.org