Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa
File:                     a140d151-5e59-30bd-81ec-045425e2fb5b.roa (raw, json)
Hash identifier:          M0b6Z7A2TjlUBB6lD9/t7Xs2flK/uRG4eSQKRja3tio=
Subject key identifier:   C1:6B:4A:17:29:B0:F4:B1:38:83:A8:B7:07:DA:6C:E7:E4:F5:59:59
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584507F01EC7BE822D0252984380
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     206092
IP address blocks:        173.239.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:1e:c7:be:82:2d:02:52:98:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=192f7126-6e64-4f7f-9591-c562c7052e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:5d:ae:36:a7:e2:d5:62:07:4e:39:3f:24:
                    c6:31:0b:1e:55:c7:40:cb:20:3c:cd:d7:bd:7d:a1:
                    88:d6:42:f7:0c:18:a5:89:eb:87:75:4b:d3:52:9a:
                    27:5e:97:ba:38:01:21:8f:d3:57:80:43:b1:c1:cf:
                    68:b0:df:df:8f:7a:05:51:1e:3b:27:4f:00:16:6b:
                    3e:45:7f:d0:88:09:7c:50:c0:83:41:29:17:23:4c:
                    09:de:bd:0e:cb:4d:c5:ff:c2:88:2c:2e:4b:82:ac:
                    6b:c2:9e:93:95:63:0e:c4:ca:d9:df:98:6f:de:d9:
                    bc:6c:48:c6:fd:fd:c8:1f:eb:cf:42:29:cc:4f:5f:
                    e2:4b:c7:54:5a:d2:50:e7:e4:6e:a7:1f:ca:7a:6c:
                    e1:79:fe:9e:08:0c:87:14:a0:d3:45:c9:25:f4:de:
                    46:5d:bf:1f:51:50:aa:30:60:b6:15:7b:7d:1d:fc:
                    cc:df:f2:32:ff:21:33:3b:70:fc:e7:00:83:4a:6c:
                    8d:90:8a:d5:5f:49:ae:82:c8:a6:dd:78:f1:b2:74:
                    40:66:78:43:19:bd:5a:3e:d5:ef:fb:d6:b8:e1:cb:
                    ba:df:c6:33:ac:cc:1e:bf:19:44:97:4c:fe:a2:2a:
                    df:e3:57:d5:3c:5e:e1:b6:de:e5:75:d8:99:db:25:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6B:4A:17:29:B0:F4:B1:38:83:A8:B7:07:DA:6C:E7:E4:F5:59:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:30:3e:4e:ae:4c:bd:31:2c:c1:27:50:53:b4:2d:a7:de:a7:
         49:37:5d:c1:21:ba:da:33:5f:e9:5b:df:15:2c:95:6b:6f:de:
         10:b9:2f:db:64:71:32:bf:b0:db:5a:b5:87:94:c2:ed:3a:3c:
         3c:aa:1a:3c:73:fb:8b:e2:d9:7a:cd:c1:cf:bd:e1:e8:fa:26:
         21:d3:2e:ea:6e:cf:dc:25:02:8a:fb:d5:42:b4:3b:b2:94:f1:
         9b:32:8b:bc:e7:7d:0c:cc:48:02:ed:ce:4e:bd:cd:08:2f:29:
         47:77:06:eb:0a:96:6e:a3:fa:c7:54:45:a0:fb:7e:2e:0d:13:
         3a:fc:c8:b6:b7:19:d1:07:c2:6b:8c:d4:5f:fc:d1:26:96:fd:
         8e:db:1a:27:e3:d3:1c:2e:f9:2a:c4:16:8b:ea:87:be:aa:d8:
         be:88:11:9f:a7:c1:f0:c7:8b:11:91:87:d3:c7:22:7f:92:da:
         86:bd:43:ac:fe:de:60:0f:68:be:b7:9e:f5:8c:89:8a:00:53:
         9c:d1:da:e0:92:3e:97:71:e4:28:90:ee:e7:4d:7b:21:0f:d5:
         64:2a:46:de:85:7e:ed:8e:e9:ee:ec:37:38:b6:5d:0d:0e:24:
         2b:af:d5:72:f7:7f:f7:df:48:e9:85:42:f8:8d:3d:dc:5b:76:
         df:c2:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:57:49 2024 by rpki-client on console-fra.rpki-client.org