Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6c71a50b-e704-3623-89e8-1db9283e8ca4.roa
File:                     6c71a50b-e704-3623-89e8-1db9283e8ca4.roa (raw, json)
Hash identifier:          66GrA0e2eVk1Q/AoI5tIX4Iq5qA16aLWMwf7PO5vyJI=
Subject key identifier:   94:0F:CF:9A:EB:D5:5F:0A:9A:4F:7B:35:DA:6B:0B:67:B5:1F:44:96
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285845496D5EF70C3A59DE9404EB00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6c71a50b-e704-3623-89e8-1db9283e8ca4.roa
Signing time:             Fri 22 Mar 2024 01:00:24 +0000
ROA not before:           Fri 22 Mar 2024 01:00:24 +0000
ROA not after:            Thu 20 Jun 2024 01:00:24 +0000
asID:                     137409
IP address blocks:        173.239.217.0/24 maxlen: 24
                          64.64.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:6d:5e:f7:0c:3a:59:de:94:04:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 22 01:00:24 2024 GMT
            Not After : Jun 20 01:00:24 2024 GMT
        Subject: CN=e6faa725-9ebf-4101-81cc-52b9de175547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:08:8c:a9:d2:44:6f:c8:3e:6a:65:5c:d9:
                    a6:fd:85:7b:42:e9:30:f5:c7:ac:88:18:2f:86:23:
                    f6:6c:99:b8:92:c3:49:12:13:cc:07:15:10:a4:2c:
                    7d:b7:39:89:c9:8d:59:5b:a7:a0:51:5c:f0:36:ab:
                    31:f4:48:2f:39:f0:04:a1:02:66:38:ca:15:7b:1e:
                    3b:43:29:d3:03:7d:b9:52:a1:af:6b:3b:88:4e:31:
                    4c:c6:20:0f:b1:9f:09:be:91:3f:91:8d:60:31:9f:
                    e0:a9:31:49:7f:75:64:15:40:58:52:40:53:11:e3:
                    cc:82:28:87:f3:88:fc:71:16:09:7e:d7:7e:da:02:
                    6a:79:7c:24:d0:5d:95:14:45:f1:fb:c1:ac:23:65:
                    39:8b:1b:77:09:27:34:e9:73:40:ef:2b:ea:f7:66:
                    81:9f:5f:4d:98:2f:53:12:11:6f:84:a7:51:87:8b:
                    df:2e:2e:9e:d3:df:4d:1d:a6:1a:6d:36:a8:c8:19:
                    f1:19:2a:ba:3d:11:e6:b3:f5:9c:06:ea:49:d3:4a:
                    91:e1:bd:37:91:54:8c:0e:c4:ef:11:1c:03:80:79:
                    84:93:c3:3d:33:c9:ff:40:9a:94:dd:30:d2:e3:ff:
                    b5:61:71:17:46:9f:62:1b:e8:7f:37:b8:aa:50:91:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:CF:9A:EB:D5:5F:0A:9A:4F:7B:35:DA:6B:0B:67:B5:1F:44:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6c71a50b-e704-3623-89e8-1db9283e8ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.112.0/24
                  173.239.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:32:a0:26:25:76:02:2b:65:b5:6d:a5:d3:fc:d8:4f:13:
         52:11:03:47:d9:cf:9b:9a:51:7b:ce:a8:6d:4d:a1:7e:7e:60:
         c4:80:0b:62:ee:3f:25:eb:9b:da:6b:7b:3d:5a:a3:de:4a:fc:
         3c:b8:b5:5e:78:72:f7:03:2a:4b:82:2f:b8:ae:db:fe:68:52:
         da:64:67:14:aa:da:23:e9:f9:c0:01:bc:d3:36:9f:54:cf:99:
         9e:fc:ba:93:c8:00:e0:cf:0c:1b:e6:8b:ed:83:88:31:f3:90:
         86:97:cf:38:91:6f:75:a2:65:7d:b1:fd:b9:76:df:48:29:9d:
         32:14:3d:0e:53:32:16:99:4b:bb:07:61:cf:5d:6b:5f:48:ad:
         d9:cc:08:89:cb:57:15:40:d3:3d:e5:9d:56:90:36:87:b7:c9:
         b4:07:68:c3:8b:f3:6b:38:0f:5c:6c:b7:24:3a:e2:85:e0:59:
         bc:78:45:7d:dd:e6:b3:0e:df:95:5c:a1:0b:51:31:6f:da:9a:
         ea:c2:22:1c:55:ec:8a:95:23:71:ae:7d:15:8f:cb:9e:28:ec:
         67:bd:b4:71:af:37:df:c0:c0:b7:93:5f:e5:80:a9:59:6e:d6:
         4e:15:87:3d:4b:81:18:da:e4:00:68:9e:17:4b:11:c1:82:8c:
         f7:57:49:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:10:16 2024 by rpki-client on console-ams.rpki-client.org