Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          pCUllzg5uqO/NYDWrfIYAdQkphp2ZqmN0Iv/VdkMVBQ=
Subject key identifier:   B3:F2:7A:7E:72:1C:E9:02:31:19:62:A4:9E:C6:88:72:20:2A:E8:86
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6BF4E9C72E4AF75F04A896A1CE18549171BF1155
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time:             Sat 27 Apr 2024 10:20:40 +0000
ROA not before:           Sat 27 Apr 2024 10:15:40 +0000
ROA not after:            Sat 26 Apr 2025 10:20:40 +0000
asID:                     834
IP address blocks:        140.99.79.0/24 maxlen: 24
                          140.99.210.0/24 maxlen: 24
                          140.99.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 22:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:e9:c7:2e:4a:f7:5f:04:a8:96:a1:ce:18:54:91:71:bf:11:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 27 10:15:40 2024 GMT
            Not After : Apr 26 10:20:40 2025 GMT
        Subject: CN=B3F27A7E721CE902311962A49EC68872202AE886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:af:8b:dd:76:53:92:bc:f4:40:a9:a1:39:
                    14:c2:4d:64:84:e4:61:2d:2d:ee:59:7f:d9:8a:06:
                    81:3b:1f:fc:06:f1:f6:89:ec:9b:46:7b:a8:50:7d:
                    6b:14:a2:db:a6:ad:cd:7c:94:0a:df:1b:d8:95:3c:
                    61:cb:a6:97:e6:40:fe:3a:7b:83:bd:0a:e3:15:23:
                    cd:42:3f:a6:3f:28:22:44:64:60:29:67:da:d7:e4:
                    e8:76:05:3d:77:d3:c8:d9:a5:ad:7c:ff:b7:f2:2f:
                    a0:f0:33:45:68:79:b3:b9:d0:7d:17:a5:16:aa:e9:
                    f4:4b:87:70:bf:95:b5:7c:d1:7e:69:33:d0:79:7f:
                    d8:bd:4d:07:f6:14:09:a7:ff:f2:bc:66:dd:6d:f3:
                    72:9f:78:f2:f8:2e:db:96:76:86:70:da:79:85:f1:
                    1f:bb:11:21:d0:fe:b4:f5:7c:13:2c:dc:eb:6b:89:
                    44:65:cc:a9:d8:d5:5b:07:8c:72:a0:1f:61:fc:5a:
                    38:11:02:b8:c7:38:1b:64:e7:2c:e6:48:bc:77:8c:
                    35:b0:ff:7c:91:f4:3e:91:c6:5a:a3:79:26:c0:8a:
                    b4:69:1c:e3:0c:e9:06:28:3f:9a:9d:53:af:a7:cc:
                    52:6e:c0:ef:78:22:d0:39:53:1b:bf:14:42:44:88:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F2:7A:7E:72:1C:E9:02:31:19:62:A4:9E:C6:88:72:20:2A:E8:86
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.79.0/24
                  140.99.210.0/24
                  140.99.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:32:74:a4:4e:f1:22:65:a3:ac:80:ed:79:c1:b1:72:a1:4b:
         d6:70:b9:75:42:7e:d1:6d:73:07:03:21:23:c2:04:04:7b:e0:
         f5:c6:4d:ce:cd:f2:b2:e7:ea:80:35:32:76:dc:c5:d7:9c:18:
         ee:64:42:cb:7a:41:0a:07:8c:b5:fb:77:71:e0:0d:97:57:7c:
         57:79:d9:4a:06:a3:25:8f:15:ac:3a:39:65:96:f8:c1:fe:c4:
         97:dd:fe:b4:ae:ce:8e:67:a7:8f:39:59:de:7d:2f:1b:16:8e:
         ac:72:f4:21:09:c6:d6:ad:8e:01:cf:62:e0:3a:06:eb:e2:b7:
         cd:f3:16:9c:da:91:13:cf:af:91:06:2b:f7:49:f8:a8:9e:0e:
         0a:c4:43:24:ee:94:38:75:b4:51:28:25:66:d5:27:3a:b9:22:
         b0:d2:72:e7:64:85:54:d2:f9:90:cc:a8:d1:28:3f:b6:5b:fa:
         1e:71:09:8b:8c:4d:38:a3:0e:3b:03:c7:91:f4:8b:91:2f:05:
         01:af:16:e7:98:40:cb:36:4b:d9:3a:a6:87:2c:90:dc:68:a9:
         b5:35:dd:ae:f3:16:bb:53:81:e4:a7:c4:d4:20:29:c5:ae:c2:
         18:d4:e6:ef:96:70:a5:cd:84:86:c3:8a:6a:d6:78:13:98:4c:
         93:a0:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:27:53 2024 by rpki-client on console-ams.rpki-client.org