Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137409.roa
File:                     AS137409.roa (raw, json)
Hash identifier:          WYxoBHEjIayzsPVOj1YnZKoMBesiWlq29s5maNG/IR4=
Subject key identifier:   F3:CD:08:07:B9:2B:B2:CD:56:1D:DB:0A:ED:05:FF:85:34:99:7B:68
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       25DAF09AF32A61BE0CA2715C951B182D1E1EF508
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137409.roa
Signing time:             Wed 21 Feb 2024 09:01:14 +0000
ROA not before:           Wed 21 Feb 2024 08:56:14 +0000
ROA not after:            Wed 19 Feb 2025 09:01:14 +0000
asID:                     137409
IP address blocks:        67.210.124.0/23 maxlen: 24
                          67.210.124.0/24 maxlen: 24
                          67.210.125.0/24 maxlen: 24
                          74.50.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:da:f0:9a:f3:2a:61:be:0c:a2:71:5c:95:1b:18:2d:1e:1e:f5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 21 08:56:14 2024 GMT
            Not After : Feb 19 09:01:14 2025 GMT
        Subject: CN=F3CD0807B92BB2CD561DDB0AED05FF8534997B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:d1:84:d3:02:68:cc:4f:45:ab:4b:82:b1:
                    7c:82:7b:1c:68:00:18:c6:6b:cd:37:0e:b4:80:81:
                    f1:39:e1:9e:67:5f:9d:d4:b1:31:06:01:99:3a:8c:
                    8b:62:7c:d8:01:5c:8a:24:86:7b:0e:d8:28:17:5d:
                    51:7c:7c:46:eb:a1:69:16:be:3b:25:e0:09:37:e0:
                    0d:18:a1:06:58:01:fa:88:c2:a2:fb:b3:cb:c5:ba:
                    9f:95:3d:5b:40:9a:71:50:82:79:e3:19:7b:34:32:
                    af:41:73:b7:d2:3c:1b:6c:fb:7d:2b:60:2c:71:07:
                    86:7a:f6:7c:fe:ca:f4:d0:25:0d:44:16:92:08:8e:
                    56:90:a6:44:53:90:9c:7c:9e:61:2b:44:30:c5:18:
                    62:98:bf:3a:08:3f:15:78:89:1f:1f:22:f4:bb:79:
                    6f:f0:4c:a2:54:8e:46:81:91:9b:37:13:fb:4a:62:
                    6f:61:db:c8:30:72:fd:58:f3:e9:5d:8f:fa:69:3f:
                    1d:e0:4d:95:66:95:ea:3d:88:64:fb:0b:ec:e8:53:
                    1f:73:8c:5f:e5:b2:cf:5a:17:d7:bb:c8:3c:f0:16:
                    82:be:f5:a8:6e:60:55:e9:45:a2:e1:29:b1:53:05:
                    1e:3a:94:d5:a5:cc:f9:09:ba:2f:24:a7:8f:e3:7a:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CD:08:07:B9:2B:B2:CD:56:1D:DB:0A:ED:05:FF:85:34:99:7B:68
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137409.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.124.0/23
                  74.50.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:66:8b:16:ef:bf:e0:96:dd:d5:a1:e0:bf:1e:28:cc:56:
         c6:80:e5:26:69:0a:19:9b:18:08:bf:c7:87:dd:93:65:ef:a3:
         dd:49:87:9d:0b:38:12:76:31:5e:1c:fb:31:f1:fa:0b:6f:98:
         2e:8e:de:fd:f8:1f:bd:74:71:d9:c6:b0:5c:20:6e:71:41:fa:
         ac:c2:d9:ca:da:f0:1c:59:57:d7:62:f0:f7:b0:d4:6c:30:f3:
         0b:31:f8:25:03:56:d9:9c:b3:8e:25:de:bd:b8:c7:a0:ff:65:
         b0:3a:4a:74:1e:68:90:2d:c4:b8:61:2a:81:02:d4:8e:86:b7:
         00:ae:bb:38:8d:0b:bf:39:08:b3:06:79:54:0d:7b:6f:74:fe:
         c5:78:91:6f:3d:ae:92:9e:c3:a8:aa:26:61:77:3a:cd:8d:76:
         87:dd:1b:5d:04:f3:89:b5:79:21:5f:f5:c2:0c:21:72:45:99:
         f4:aa:b1:c9:cd:0c:bf:55:df:b3:87:21:bb:e8:64:41:d5:b9:
         52:ef:28:0a:b4:5a:3a:23:1b:52:66:70:57:87:c1:99:f5:c0:
         ca:d8:c7:a3:20:01:35:69:96:10:5b:a3:56:33:a1:1a:55:7e:
         11:2c:44:99:8a:88:b2:a5:8e:f8:5b:0d:61:27:c0:e0:f9:31:
         d6:fd:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org