Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa
File:                     fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa (raw, json)
Hash identifier:          K3xs1MbsQJ+L8UlkFtfmE2i5JFCXX2haskjb5+KNcss=
Subject key identifier:   9D:F6:59:F8:B0:5F:42:89:80:FA:20:0C:E7:63:5E:D0:70:28:98:35
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584563F312E938E0B8D605F89B80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     62240
IP address blocks:        173.239.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:12:e9:38:e0:b8:d6:05:f8:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=a44c35d4-53d7-42bf-b346-bf25975e20b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b8:80:ab:46:bc:d1:06:a7:27:2a:09:ca:a9:
                    88:f3:f0:7f:38:7d:cb:6f:23:da:9c:b4:34:84:79:
                    98:e7:2e:76:e7:0c:82:51:b2:db:79:f4:bf:1a:e6:
                    07:7e:2c:13:9f:f7:4a:8c:37:79:f6:41:18:d3:b3:
                    0d:8a:e8:8b:16:7f:3c:f7:a2:0b:13:95:cc:38:b0:
                    25:11:6d:97:dd:35:9e:91:e3:d8:ed:78:bd:b9:51:
                    2c:f8:e2:d4:d9:ae:62:dd:37:3f:fe:35:5d:7f:d1:
                    a0:dc:c4:bb:c7:1d:83:db:a3:84:c5:ac:2d:ce:4d:
                    24:09:2a:77:99:4d:d3:54:05:bb:68:aa:c0:8a:8d:
                    64:39:73:50:1c:04:79:68:54:13:57:84:2c:6d:14:
                    f4:ac:de:60:c9:9b:1d:be:e9:fb:58:46:6e:3e:fb:
                    63:e4:3c:28:d4:ff:d8:43:ed:35:09:42:32:72:fd:
                    65:8f:4d:c1:49:38:b9:0c:53:c7:ac:00:66:f5:70:
                    65:ce:ab:ed:89:e4:b1:f9:4e:98:73:93:00:15:76:
                    00:a6:c4:9f:cf:7b:fe:1f:ff:c5:0a:b3:ba:6e:71:
                    47:06:12:72:08:bb:02:07:a7:8d:78:bd:69:eb:12:
                    20:c6:8f:04:bf:16:ed:1d:53:d3:32:3a:49:11:48:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:59:F8:B0:5F:42:89:80:FA:20:0C:E7:63:5E:D0:70:28:98:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:2e:d3:ec:32:35:4b:ea:17:81:6b:c9:6b:9f:0f:70:7d:84:
         f3:9f:a5:fc:f4:69:fd:84:11:bb:54:cb:8a:a9:a5:4f:51:0c:
         03:e5:88:91:2b:e1:f7:5d:23:15:64:ed:7e:42:af:12:a5:ab:
         36:ea:b1:63:c4:ef:bc:3a:61:0d:ac:bf:6b:c1:ae:77:02:3c:
         19:a8:c7:15:23:f4:95:03:6f:de:c0:1b:8f:ec:bc:81:2c:9e:
         0a:be:73:a5:2e:f2:31:be:69:57:c1:dd:fe:10:a9:34:7f:23:
         ce:b9:7a:b9:ec:f5:b5:9e:13:9d:60:29:67:62:df:53:2a:f9:
         72:b3:40:d2:59:7f:ba:05:e2:cc:d8:f4:c6:f3:8a:96:16:07:
         06:24:62:60:8b:76:ba:de:7b:ff:00:d1:cd:4b:3c:5d:18:06:
         bb:75:69:15:6e:61:eb:e9:23:ed:c5:ef:41:a8:f3:f5:e9:1b:
         55:76:5e:9e:b8:af:fe:fb:5d:af:d9:90:17:b2:78:f4:64:31:
         49:e2:b5:1d:81:dd:be:a0:4f:d2:41:cc:b5:54:54:3c:d6:2a:
         3a:a2:97:b5:5c:8d:0f:68:ff:b2:8c:85:6d:6d:6d:1c:96:dd:
         02:b1:13:fd:4a:ec:6b:25:cf:f5:4d:ee:7e:16:12:e5:da:76:
         ea:3d:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:53:26 2024 by rpki-client on console-ams.rpki-client.org