Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          y4ZfgEDr8tJA9SHFD5N1pRMk+wjwXexH98Xm4KdOuEM=
Subject key identifier:   E9:30:43:EE:A8:72:20:A0:8C:B8:5D:FB:3D:14:2E:20:AF:F5:C5:33
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2B042DD92AD568942AA313AEFF9B493BD228A939
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS61317.roa
Signing time:             Fri 02 Feb 2024 02:18:02 +0000
ROA not before:           Fri 02 Feb 2024 02:13:02 +0000
ROA not after:            Fri 31 Jan 2025 02:18:02 +0000
asID:                     61317
IP address blocks:        74.50.6.0/24 maxlen: 24
                          74.50.8.0/24 maxlen: 24
                          74.50.9.0/24 maxlen: 24
                          192.228.116.0/24 maxlen: 24
                          209.200.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 12:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:04:2d:d9:2a:d5:68:94:2a:a3:13:ae:ff:9b:49:3b:d2:28:a9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb  2 02:13:02 2024 GMT
            Not After : Jan 31 02:18:02 2025 GMT
        Subject: CN=E93043EEA87220A08CB85DFB3D142E20AFF5C533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:99:3a:cf:fd:a3:29:27:e3:28:b9:6c:ec:ae:
                    6c:bd:d2:9e:a7:1e:a0:16:90:ab:68:ca:52:1d:08:
                    7c:8b:4e:2e:2a:dc:93:74:02:40:4d:7d:7c:85:ab:
                    ab:fc:ac:c6:96:ed:44:d7:c9:ff:0a:01:35:80:09:
                    5a:2f:a1:9c:78:72:50:b6:66:be:03:d9:2d:16:4c:
                    ac:0a:e3:b7:f5:3d:86:08:d6:e1:d1:4d:dc:88:0d:
                    0b:bd:72:75:28:c9:5a:db:98:55:b2:c0:4d:36:40:
                    95:fb:e1:f7:ee:93:86:7a:a3:f1:51:ce:40:7e:c7:
                    99:21:ea:34:37:fe:ec:7e:66:09:58:43:fc:52:4b:
                    81:f1:91:ed:de:af:17:74:a6:b6:23:bd:b2:5f:68:
                    3f:6c:2c:02:4f:06:67:ce:04:5a:c8:7a:3e:94:e1:
                    0e:e6:3e:05:fc:28:28:c8:62:64:d2:83:f0:28:c3:
                    57:b8:fe:92:85:22:ec:8d:4a:68:4b:e0:c2:8b:54:
                    9a:a1:23:67:a1:c0:3c:d8:f3:9d:5e:12:48:16:3d:
                    1f:93:17:21:07:18:ec:79:02:df:62:cf:72:4e:04:
                    f3:93:56:66:db:28:6a:9e:84:77:0b:bd:72:b4:44:
                    5e:36:e5:4f:00:bf:49:6e:29:5d:4e:66:c2:88:22:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:43:EE:A8:72:20:A0:8C:B8:5D:FB:3D:14:2E:20:AF:F5:C5:33
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.6.0/24
                  74.50.8.0/23
                  192.228.116.0/24
                  209.200.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:e3:f5:b1:2d:a3:94:43:ee:39:e0:77:78:1e:e4:e0:77:
         36:c6:c1:61:84:03:2c:7c:34:e0:5d:d0:51:45:07:c4:78:c4:
         a2:e4:b7:41:c6:77:62:93:dd:95:5d:09:6d:ea:78:b5:eb:9f:
         12:30:d0:74:30:77:ab:d5:d7:63:33:89:0d:d5:a3:3e:96:6c:
         07:a9:8c:a6:9b:bd:e0:14:1f:82:b6:94:41:07:ad:72:eb:09:
         be:c9:a4:0b:90:57:c2:a3:71:a6:a0:47:53:23:2c:60:a3:64:
         e3:79:3a:5e:3d:41:f6:df:dc:d6:6a:47:5d:24:b4:1f:6e:47:
         42:81:22:b4:75:d8:18:97:67:d5:ca:73:58:f1:34:a4:54:9f:
         9b:4f:72:6f:90:ab:8c:e1:96:86:79:62:30:8d:81:55:c2:06:
         43:9a:c5:30:c7:0d:3f:f3:09:e3:01:b8:3a:1f:b0:81:d4:fd:
         d3:d5:41:e5:c1:e2:d5:d5:f4:04:88:71:4f:57:6d:be:c7:8d:
         17:33:2c:2c:4f:d9:bc:86:96:e7:c8:4d:8e:c0:71:14:fe:8f:
         72:65:7d:e0:70:16:b6:5e:ca:50:31:68:20:c4:ca:c1:08:40:
         c6:ef:68:c1:07:50:e7:b1:e2:b1:7a:7f:78:0f:1e:a0:f0:76:
         b1:0b:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:24:56 2024 by rpki-client on console-fra.rpki-client.org