Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS199912.roa
File:                     AS199912.roa (raw, json)
Hash identifier:          Qlej1eAfJClkKBBvlbn1zq/4tnkclekDjF8jtAP7LxI=
Subject key identifier:   61:13:80:9E:DF:D3:87:89:06:81:8F:D5:C8:A3:E9:7C:2C:22:AD:EB
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       47983F1DD1E8E579AD19CCA323F5DED21777D5AA
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS199912.roa
Signing time:             Tue 14 May 2024 12:23:49 +0000
ROA not before:           Tue 14 May 2024 12:18:49 +0000
ROA not after:            Tue 13 May 2025 12:23:49 +0000
asID:                     199912
IP address blocks:        140.99.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:98:3f:1d:d1:e8:e5:79:ad:19:cc:a3:23:f5:de:d2:17:77:d5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: May 14 12:18:49 2024 GMT
            Not After : May 13 12:23:49 2025 GMT
        Subject: CN=6113809EDFD3878906818FD5C8A3E97C2C22ADEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:75:e7:3b:aa:ca:cb:23:e7:80:70:6f:bf:
                    38:c7:bd:7f:b1:de:da:e1:04:f6:e3:26:2c:d3:84:
                    ee:bb:e8:ba:a4:a4:ab:8f:77:57:3c:9b:76:2b:5e:
                    e8:f4:e3:54:57:f0:ec:da:59:e2:0f:9b:37:5c:01:
                    cf:c4:5c:1f:89:10:ac:2f:6e:41:32:a1:73:56:bb:
                    9f:5a:9f:55:f3:62:12:c5:4f:d7:3f:f7:7a:46:33:
                    31:b9:b6:fa:7b:9c:d2:66:1d:7c:2e:b6:8d:a0:3b:
                    aa:ca:69:85:a3:d4:db:6c:e0:af:10:0c:8e:47:f4:
                    27:8a:81:12:17:ec:4f:b2:f1:2e:aa:b2:1a:5a:a3:
                    34:24:01:aa:02:58:87:09:fe:d5:4a:03:3a:f6:1d:
                    ca:80:fe:18:1d:ce:ab:d7:7d:24:29:d0:1d:8a:68:
                    4e:28:e9:0d:2a:f5:31:08:d4:05:fa:e8:52:04:55:
                    19:4c:d6:58:88:d4:8b:90:6c:f4:1b:fa:fb:31:a2:
                    cb:c5:2d:2a:bb:73:4d:74:99:88:0d:4c:bb:39:77:
                    b1:32:17:b1:05:38:d4:a1:48:ee:6f:8e:c6:4c:60:
                    a5:44:2a:65:2f:58:25:33:52:08:68:8b:57:9b:62:
                    b6:16:90:be:7b:7d:c1:73:c9:f7:67:9b:65:ed:e7:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:80:9E:DF:D3:87:89:06:81:8F:D5:C8:A3:E9:7C:2C:22:AD:EB
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS199912.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:01:d6:6e:b3:fb:7a:e3:9e:10:51:03:c1:e3:06:36:b5:2f:
         31:db:e9:0d:3e:13:95:2e:21:94:c1:da:78:c0:b3:18:83:14:
         73:59:e3:78:40:0b:5b:41:f4:54:1f:e8:0e:80:67:f7:e1:18:
         d3:f6:ce:32:06:87:8a:86:a9:97:82:94:8b:8b:29:8b:cb:34:
         54:a4:c7:81:83:ea:b3:12:2a:f1:59:59:bf:45:0e:57:dc:ff:
         a0:cd:0f:35:52:db:10:9f:ce:3c:ef:fb:ed:28:6f:8a:68:1b:
         b7:1b:2e:99:07:4f:10:5c:a1:e7:3e:e6:46:ce:62:26:69:86:
         b7:bb:02:75:95:c7:38:73:64:f8:79:02:cf:ac:22:8a:31:e3:
         a7:ee:a8:c2:94:d0:f0:3d:fd:f4:aa:68:c7:3c:5d:88:b7:b8:
         77:64:b6:1e:b5:16:8c:9d:a3:17:2b:f6:3d:e6:70:44:8e:ab:
         d5:f2:b5:3f:29:c4:b1:91:fd:37:3c:cf:27:55:ba:b6:e7:62:
         33:f9:35:d1:1c:b5:50:29:a2:81:27:48:db:1d:8d:d2:8e:8a:
         e0:92:00:3b:84:ff:e4:a0:9d:6c:45:34:cd:eb:49:2a:74:6a:
         6b:08:4b:a5:9a:8c:6f:95:77:da:47:3e:3e:33:05:55:6d:ed:
         2f:d1:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:42:34 2024 by rpki-client on console-ams.rpki-client.org