Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ef586868-5b67-37dd-ab4e-5becdd524db3.roa
File:                     ef586868-5b67-37dd-ab4e-5becdd524db3.roa (raw, json)
Hash identifier:          9pb5cZeDEzGPNl5xQOIUnOcxrG0tHC5+/FvG003UyXg=
Subject key identifier:   2E:4F:C0:FA:B8:4F:5D:49:02:F8:3B:7C:D4:52:F1:FC:A6:A4:B8:41
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285845A1BD2211D91ADEE2F3AC5E00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ef586868-5b67-37dd-ab4e-5becdd524db3.roa
Signing time:             Mon 22 Apr 2024 16:12:18 +0000
ROA not before:           Mon 22 Apr 2024 16:12:18 +0000
ROA not after:            Sun 21 Jul 2024 16:12:18 +0000
asID:                     55154
IP address blocks:        173.239.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:bd:22:11:d9:1a:de:e2:f3:ac:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Apr 22 16:12:18 2024 GMT
            Not After : Jul 21 16:12:18 2024 GMT
        Subject: CN=88ddcf63-386a-49ed-a6d1-cac195ef643a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:ce:23:4c:5e:3e:aa:81:b5:10:af:7a:91:
                    2d:46:8a:50:04:d7:da:8a:21:2e:aa:f8:61:76:04:
                    70:3e:8e:43:52:f6:a4:9b:1a:d7:60:b2:0c:84:10:
                    51:92:5a:32:6b:04:a5:5f:00:d8:8b:b8:14:8d:2f:
                    a1:21:75:57:64:07:dd:8e:7e:d8:d9:dc:7e:61:e6:
                    d2:46:1e:82:b4:2d:fd:78:6c:c4:a9:aa:52:fb:a9:
                    9e:56:d0:3c:c1:59:f2:93:ee:7c:d6:82:00:82:90:
                    ff:d7:da:84:a6:04:83:f4:8b:22:b9:f2:ab:28:cb:
                    15:37:fc:49:cf:e4:d6:c4:e5:61:df:8d:5e:66:39:
                    a5:cd:8f:6c:07:c1:51:ac:6b:a4:2a:f4:d4:13:d4:
                    fa:63:80:9e:56:6a:f0:b0:6b:5c:bc:a3:df:e6:8e:
                    b7:cb:69:34:41:7b:0d:b8:33:80:5c:ae:37:65:c0:
                    3f:4f:c5:7f:fb:f0:b0:08:c9:cb:07:00:82:22:0f:
                    7b:09:f4:d8:b0:2c:77:2c:c2:25:3f:60:c0:cf:eb:
                    cf:53:37:c1:0e:c6:d4:71:80:8a:a2:cd:92:8b:33:
                    46:f3:a8:ab:9d:80:0c:af:be:34:06:e7:39:c4:53:
                    4a:35:f5:46:df:3b:a0:15:d7:1f:0a:dc:b4:08:2b:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4F:C0:FA:B8:4F:5D:49:02:F8:3B:7C:D4:52:F1:FC:A6:A4:B8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ef586868-5b67-37dd-ab4e-5becdd524db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:23:59:87:aa:e5:65:0a:0b:74:e3:a3:44:21:98:b0:db:08:
         f2:23:3b:5b:ab:b1:0e:c4:75:b8:ea:24:97:56:08:b6:f1:ec:
         f6:16:c5:45:16:75:f7:92:b4:99:6b:d1:18:c8:ea:81:3a:c7:
         b8:7a:e2:5d:bb:46:8f:ea:11:05:57:9c:74:1a:b7:5e:30:96:
         ec:23:cc:d0:03:33:7d:61:12:9f:56:c3:cb:92:7c:26:26:2b:
         a3:b6:38:d0:19:92:84:0e:8d:1c:04:2e:12:fc:57:85:eb:73:
         be:05:12:77:4c:1e:2e:c7:26:78:f3:75:3c:48:9c:ac:e5:9e:
         99:c9:02:8b:52:1e:2e:ce:f3:cb:1e:e0:4d:8a:ee:f5:63:a4:
         0c:96:21:e8:8b:12:3a:6d:a7:1c:de:cf:60:02:ee:3a:e6:f1:
         46:ad:0d:fe:3b:ce:ec:a2:d2:05:c8:1c:45:47:cf:3e:48:c0:
         97:3b:0c:97:aa:2b:b9:0a:76:1d:7d:42:c1:e6:10:d6:d5:e7:
         e8:80:1e:21:22:ab:60:70:62:f3:d7:b1:a6:29:93:0f:86:b1:
         07:1f:80:c3:4a:2c:a9:09:6c:02:b8:16:6e:0f:61:06:5d:95:
         bc:c8:ee:b5:f7:be:6b:ac:7d:4c:8d:f4:ab:2e:d2:ac:4c:05:
         44:6f:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:52:11 2024 by rpki-client on console-fra.rpki-client.org