Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140641.roa
File:                     AS140641.roa (raw, json)
Hash identifier:          lt8JorzV5e6NRl4cgXIGXmzzNpVuI7qOU6cEGwMc/mQ=
Subject key identifier:   49:73:F2:3F:86:45:C1:DE:DE:04:60:01:73:75:7F:8B:9C:A0:F0:3F
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       42C7F9A6AA7878925E8A867DC758ADD4A65F3424
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140641.roa
Signing time:             Fri 14 Feb 2025 09:28:26 +0000
ROA not before:           Fri 14 Feb 2025 09:23:26 +0000
ROA not after:            Fri 13 Feb 2026 09:28:26 +0000
asID:                     140641
IP address blocks:        140.99.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c7:f9:a6:aa:78:78:92:5e:8a:86:7d:c7:58:ad:d4:a6:5f:34:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb 14 09:23:26 2025 GMT
            Not After : Feb 13 09:28:26 2026 GMT
        Subject: CN=4973F23F8645C1DEDE04600173757F8B9CA0F03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:05:03:38:aa:9d:f1:66:40:ad:1b:f3:f8:
                    c3:0f:4b:b3:16:fc:2d:87:e3:8d:aa:4a:dc:0f:f2:
                    11:fc:29:9d:92:98:c3:bd:39:ca:a0:cd:8a:23:21:
                    7b:de:2c:2d:f7:be:0c:43:e0:b3:9e:0a:d4:3a:85:
                    81:04:0b:11:b0:39:05:82:2b:0d:2e:31:e0:af:15:
                    13:5e:11:fe:38:c9:94:ba:5f:ba:a1:91:ed:55:67:
                    ea:29:24:5a:c9:59:e0:fc:3f:ce:34:f4:95:8c:69:
                    0f:47:fa:66:2e:a4:5e:dc:1b:3a:36:e5:e1:e9:32:
                    56:a3:37:54:70:4a:25:03:32:52:fd:99:6f:9f:68:
                    29:2f:c5:5e:7d:c0:13:05:17:bf:be:46:8e:49:29:
                    3e:fc:c2:22:78:97:07:c6:a0:7b:99:c0:25:da:34:
                    72:5d:a6:07:0b:ca:3c:3e:bc:5f:3d:c3:05:d2:88:
                    c9:71:15:98:3c:ea:49:35:d7:56:8d:ac:ea:3e:ab:
                    c5:dc:b1:91:08:c2:0e:9a:8d:bc:eb:54:57:c0:db:
                    2c:23:6a:89:6c:4b:da:f5:ad:3b:9e:52:d4:35:77:
                    38:c0:86:e6:17:5f:5d:e3:5b:9a:41:e8:b4:4b:6e:
                    7a:48:8b:94:5d:50:38:7a:f0:cf:ba:20:6f:a2:88:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:73:F2:3F:86:45:C1:DE:DE:04:60:01:73:75:7F:8B:9C:A0:F0:3F
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ca:89:bc:e1:c3:04:76:11:46:2b:8f:c8:0c:67:ae:70:7b:
         af:11:01:ba:20:5f:b2:e8:ef:e7:b0:a6:c9:6d:5f:35:ef:13:
         82:95:e9:7a:43:8f:f7:8f:59:ef:c3:d2:66:ce:55:e4:6b:68:
         fd:f7:ba:c8:65:f5:a3:1e:97:e3:f6:f4:2d:d8:5a:38:82:e3:
         01:41:01:60:63:76:b3:9d:20:2f:13:e3:e3:a8:34:b7:fb:e2:
         42:d1:a3:be:d4:6b:0a:fb:73:bb:80:04:7b:df:9c:df:e2:e5:
         52:53:d2:78:ea:2e:bf:db:bb:dc:d7:85:7a:e3:fd:58:5a:1e:
         02:b1:22:52:fd:c2:da:86:14:17:e8:f4:df:59:97:11:7c:10:
         41:57:56:55:60:4f:e0:8b:e5:b5:e9:a7:f9:c2:4e:10:66:06:
         b0:66:dc:30:7e:a4:f6:11:60:a6:f2:d3:41:34:93:94:56:1b:
         7f:a0:21:de:b9:f1:9a:cd:5f:59:6a:49:00:e3:d3:97:ed:40:
         96:8e:02:92:c6:9f:cb:70:a5:04:f2:8e:4d:d7:47:84:fb:69:
         4b:e6:b0:e1:64:3c:7a:07:40:76:2a:99:fd:6c:be:c4:01:65:
         c0:c7:1c:de:e6:67:ea:79:a9:ab:3b:b9:d2:7e:d9:eb:02:59:
         74:94:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:05 2025 by rpki-client