Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa
File:                     73593fb5-6e33-3b47-af5a-76760132089b.roa (raw, json)
Hash identifier:          LT3t6gQd+G3FCVTeFTbmJ3Kps+70wWihmgDRFhSlxYI=
Subject key identifier:   F0:97:89:E3:28:4C:B7:1A:49:29:BB:FB:AC:F0:AD:1F:4A:44:A9:D2
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858454C380C022F5ED02494AD1C00
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        66.117.17.0/24 maxlen: 24
                          63.140.43.0/24 maxlen: 24
                          66.117.16.0/24 maxlen: 24
                          172.82.229.0/24 maxlen: 24
                          172.82.197.0/24 maxlen: 24
                          172.82.214.0/24 maxlen: 24
                          172.82.227.0/24 maxlen: 24
                          172.82.226.0/24 maxlen: 24
                          63.140.41.0/24 maxlen: 24
                          63.140.40.0/24 maxlen: 24
                          192.243.247.0/24 maxlen: 24
                          172.82.208.0/24 maxlen: 24
                          192.243.244.0/24 maxlen: 24
                          192.243.230.0/24 maxlen: 24
                          172.82.239.0/24 maxlen: 24
                          172.82.210.0/24 maxlen: 24
                          172.82.222.0/24 maxlen: 24
                          172.82.221.0/24 maxlen: 24
                          172.82.232.0/24 maxlen: 24
                          172.82.231.0/24 maxlen: 24
                          172.82.238.0/24 maxlen: 24
                          172.82.230.0/24 maxlen: 24
                          192.243.246.0/24 maxlen: 24
                          192.243.255.0/24 maxlen: 24
                          172.82.236.0/24 maxlen: 24
                          172.82.233.0/24 maxlen: 24
                          172.82.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0c:02:2f:5e:d0:24:94:ad:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=2290b6a5-32ec-4457-b061-d06dfdfbefb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f4:44:8b:91:47:2f:cf:ff:29:ae:2d:d6:b2:
                    de:06:a1:64:fe:26:ef:db:57:8c:e6:0c:0a:be:0d:
                    e1:65:30:dc:5d:6b:be:47:06:11:06:f9:a4:b8:75:
                    29:5c:b5:1e:dc:4c:42:07:33:a3:11:64:08:c8:ff:
                    e0:56:54:c5:cd:ec:84:32:a2:2d:a5:35:11:b9:52:
                    30:90:97:f3:b4:12:0f:4d:d0:b1:02:42:4e:14:d1:
                    17:1a:3d:2b:48:17:fa:df:82:18:1e:5c:90:0b:9d:
                    34:20:38:e9:1c:46:5b:0a:f5:6d:3d:20:4f:78:05:
                    1f:43:a4:c9:94:c6:ea:19:78:28:f2:dd:16:7e:b5:
                    cb:7b:09:eb:40:f4:fd:58:2a:cb:45:1d:e9:4a:11:
                    46:4c:bc:54:db:70:58:9e:82:7e:aa:fa:e6:1d:cc:
                    be:f6:7e:bc:7a:3d:df:42:59:56:ba:5a:57:d0:f3:
                    1a:c0:b1:27:fd:89:fd:33:d6:c2:42:87:b0:aa:92:
                    df:f4:50:67:94:a9:3c:f5:40:fb:ac:e1:94:2b:00:
                    0f:dd:d2:e7:d5:16:a9:b0:2b:cb:ce:27:ef:2e:ff:
                    27:2a:86:64:2f:c4:44:7e:3f:a8:15:e6:7f:a3:09:
                    dc:ad:bc:93:6e:7e:f2:9d:ab:7d:c3:a1:ff:92:9b:
                    ec:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:89:E3:28:4C:B7:1A:49:29:BB:FB:AC:F0:AD:1F:4A:44:A9:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.40.0/23
                  63.140.43.0/24
                  66.117.16.0/23
                  172.82.197.0/24
                  172.82.208.0/24
                  172.82.210.0/24
                  172.82.214.0/24
                  172.82.221.0-172.82.222.255
                  172.82.224.0/24
                  172.82.226.0/23
                  172.82.229.0-172.82.233.255
                  172.82.236.0/24
                  172.82.238.0/23
                  192.243.230.0/24
                  192.243.244.0/24
                  192.243.246.0/23
                  192.243.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4e:de:3f:30:62:3a:77:71:ba:3c:53:67:77:01:41:63:e3:
         8c:74:24:09:9a:50:d6:f3:c6:ae:52:bc:8b:6d:a2:7d:91:0b:
         1c:a9:d2:43:fc:3a:ab:51:9f:f6:1b:79:68:32:89:9b:cf:c6:
         ce:ba:5c:91:1c:be:03:4b:5d:ad:99:83:5b:f8:4b:6e:4c:a2:
         91:f4:5b:b7:ea:11:fe:76:57:f1:d3:68:0e:3b:d1:f5:21:1b:
         27:ec:dd:fe:08:97:f7:e3:0e:85:ee:74:da:8f:d2:18:4d:2a:
         f6:e4:da:7c:e3:55:02:f5:a0:e6:84:fc:97:98:9a:cd:1a:90:
         82:74:3b:ea:86:01:7a:79:61:19:e3:91:4b:a2:6f:3e:c2:2a:
         1b:98:30:49:fc:f9:d3:8b:a5:33:5e:07:9a:19:8b:79:d9:78:
         10:cf:b4:81:d1:1c:73:c0:e4:40:f4:bd:ed:4b:50:ab:31:40:
         1f:3c:1b:2d:6b:2c:f4:50:50:2c:63:66:3f:5b:27:ab:0b:d3:
         a9:7f:d3:81:d1:48:e7:a9:45:9c:15:44:09:ed:1b:d7:36:83:
         8a:f2:23:6d:ff:e5:a3:56:e5:13:25:ec:b2:73:f0:48:49:54:
         ea:66:72:41:d6:91:55:c8:65:2e:f4:d2:46:ef:d7:92:da:2a:
         b3:d8:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:11:02 2024 by rpki-client on console-fra.rpki-client.org