Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa
File:                     227d8994-f85a-3324-94e1-1cebf2b86d70.roa (raw, json)
Hash identifier:          5AQtXJotlVM/sEshmUxXeu43WIARNX+O7Tvt+3L3Yb0=
Subject key identifier:   67:4D:CC:4B:53:3D:74:F3:38:85:85:36:B3:AC:62:32:11:EF:FB:00
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285845A6F35E7801A4EBF8205A3E40
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     206092
IP address blocks:        173.239.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:5e:78:01:a4:eb:f8:20:5a:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=59837205-5467-404e-8f73-ffeeabc72421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:74:18:e3:8c:b7:c7:f0:29:1d:9b:e6:0e:
                    a6:f6:a5:1b:30:86:0b:7a:72:a9:1e:9e:b5:a9:82:
                    06:8f:09:cc:8d:c9:5b:36:d1:ca:c8:92:9a:11:67:
                    3c:24:09:ea:5f:c9:bf:ce:3f:94:4c:80:70:36:08:
                    a5:4f:74:84:d7:12:28:19:d1:1a:b9:10:48:cc:c4:
                    a5:09:4f:8f:0f:bf:dd:e1:26:1d:30:f5:c0:d9:db:
                    0d:a8:f8:40:99:45:d5:8f:2d:79:29:2b:b8:36:3e:
                    c3:ae:c9:2a:46:e4:a0:7c:e5:4c:28:09:95:92:3c:
                    23:bd:e5:72:a8:ab:00:56:ba:6c:d7:a2:db:09:16:
                    fd:c7:87:60:76:69:ca:71:c6:da:37:22:e5:93:69:
                    90:6d:e9:96:6e:67:bc:83:da:6e:73:7d:d2:49:03:
                    2f:96:66:cf:4e:6a:70:4f:b7:a1:f0:5b:18:8b:ba:
                    e2:ab:32:47:e9:31:9c:02:9e:43:9a:29:ff:bc:2d:
                    d0:87:62:5d:66:1d:1c:83:de:d7:ad:8a:fa:14:a1:
                    90:e9:9c:eb:dd:33:48:04:eb:4a:7b:be:f1:e1:16:
                    7f:cc:f7:7e:4a:23:5e:23:79:f4:88:19:90:0c:bf:
                    9d:d5:c2:fd:b7:20:02:c2:05:97:fd:f1:a2:84:b9:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4D:CC:4B:53:3D:74:F3:38:85:85:36:B3:AC:62:32:11:EF:FB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ae:5f:b1:d8:62:b6:14:88:ad:eb:f6:5c:ee:de:84:e6:15:
         2d:51:5d:a4:c1:88:39:93:00:8d:0c:dd:36:4a:e6:65:7f:94:
         f1:17:39:02:47:6a:c1:bf:c0:0f:e5:c3:cb:cd:68:55:a3:d7:
         2c:6c:88:b0:05:96:b7:0b:dc:c8:68:b0:64:cf:11:de:2c:83:
         6b:03:5c:56:64:5c:05:f9:95:ab:6b:b1:d9:ab:bc:4c:36:87:
         f8:63:2c:2f:99:46:bc:8e:f9:b6:a3:22:61:8a:86:d1:06:9a:
         06:e6:ed:86:39:0c:15:ab:dc:f8:76:2e:40:0c:73:0f:a2:b1:
         41:e5:6f:b8:89:b9:22:3a:e3:24:59:37:3b:10:ee:b1:99:9f:
         60:a6:87:47:08:54:56:75:b6:68:4c:de:ff:9e:b3:04:c8:88:
         b9:29:5a:a9:8d:9f:a8:d1:3c:84:fb:7c:7b:44:c9:ff:e4:0c:
         b7:08:4b:83:76:9b:98:7c:7f:0b:06:62:81:ac:f6:34:41:b9:
         bf:da:85:ef:6c:0b:0f:d6:9e:02:78:ba:f6:fa:af:2e:52:10:
         00:1a:2c:c3:6d:6e:9f:ba:c1:15:ed:26:12:14:e4:5b:f9:26:
         58:a7:2d:6c:cd:53:36:3e:34:9f:01:0d:96:8e:4b:1a:fc:b9:
         a7:7d:14:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:17:20 2024 by rpki-client on console-ams.rpki-client.org