Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399154.roa
File:                     AS399154.roa (raw, json)
Hash identifier:          xTQkR5phSZIhdXkQZ+EBzB9rE8r/zxI71+/iMxLZatM=
Subject key identifier:   26:46:00:D4:1D:90:98:8C:03:50:75:82:1A:86:D9:95:78:34:8E:A7
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       2F0A617754A07C55D2DBEE7EABE45846F09CB813
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399154.roa
Signing time:             Sat 07 Dec 2024 11:13:25 +0000
ROA not before:           Sat 07 Dec 2024 11:08:25 +0000
ROA not after:            Sat 06 Dec 2025 11:13:25 +0000
asID:                     399154
IP address blocks:        2607:fc50:1000:22::/64 maxlen: 64
                          2607:fc50:1000:23::/64 maxlen: 64
                          2607:fc50:1000:24::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 15:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0a:61:77:54:a0:7c:55:d2:db:ee:7e:ab:e4:58:46:f0:9c:b8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Dec  7 11:08:25 2024 GMT
            Not After : Dec  6 11:13:25 2025 GMT
        Subject: CN=264600D41D90988C035075821A86D99578348EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:37:58:7c:ad:ac:03:3f:93:21:8b:55:55:
                    f2:e3:1c:ae:ab:59:da:b0:3b:92:70:46:09:f2:aa:
                    12:1d:cb:30:cd:a4:71:fa:5a:4d:23:1e:88:86:01:
                    14:a2:a0:f7:41:98:a9:f6:85:7c:e2:7c:50:b2:b6:
                    0f:34:4d:4f:c4:b6:fa:c4:bc:ce:2e:71:4b:ad:d5:
                    a5:88:54:15:b4:7b:54:9b:7f:4f:f6:36:d0:4c:45:
                    3d:6c:b9:60:bf:52:0d:8d:49:c5:ba:a7:3e:b2:9f:
                    09:65:fd:da:47:b9:c9:5b:d0:3c:26:b7:51:6a:2d:
                    99:c0:b9:4b:ed:f1:e7:6c:d6:c8:2c:73:3e:6e:eb:
                    85:79:be:df:c6:5d:01:f0:2c:2f:5d:e3:69:ce:72:
                    53:5e:65:cc:55:9f:56:10:40:a5:eb:26:58:21:7e:
                    45:02:d3:06:f0:a6:a7:eb:61:5c:1f:8a:21:c4:25:
                    c5:f3:4d:5a:34:e9:89:90:55:2e:89:39:9d:75:11:
                    0a:b3:d5:56:58:0c:40:63:6f:a7:42:8e:ff:c4:d6:
                    95:97:34:8f:09:93:a3:65:12:00:8c:a9:c1:52:36:
                    b4:fc:87:21:b9:9a:20:d0:f9:0f:e9:3f:70:cc:18:
                    77:16:71:6c:31:4c:4d:33:67:88:3e:a2:64:0f:55:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:46:00:D4:1D:90:98:8C:03:50:75:82:1A:86:D9:95:78:34:8E:A7
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc50:1000:22::-2607:fc50:1000:24:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5e:b4:15:05:cf:44:81:40:24:13:a0:84:fb:f1:ba:48:ef:74:
         1b:08:e3:40:c4:4c:83:27:0e:a1:47:6b:d3:1e:f3:5a:c8:83:
         e6:bb:df:da:52:22:be:2d:05:f2:af:05:8e:5f:87:f3:f9:ca:
         67:ef:88:84:f1:50:cb:0c:a8:49:b6:ae:c5:49:1d:69:5f:e4:
         6d:93:2c:0e:62:95:c4:21:3d:51:c0:af:a0:5d:4f:65:4d:8d:
         78:9b:7a:84:cd:b1:c9:56:0d:d2:05:dd:1d:4b:ad:52:94:cc:
         c3:0b:05:58:c1:f2:e2:29:f2:1a:5f:0f:81:86:66:00:97:1c:
         c8:c8:7c:c6:17:6c:36:a2:bb:00:f6:b4:b7:7f:e7:69:ee:7a:
         41:92:a8:fc:7b:e2:b6:0f:15:29:8b:fa:f2:21:bf:c4:3a:75:
         5a:e3:f9:79:17:09:21:a0:66:0d:5d:5e:29:34:67:35:6f:06:
         91:f8:70:56:f1:b9:96:52:7d:f5:1b:d2:b3:46:eb:0f:80:67:
         79:52:d3:9d:d0:58:36:4d:90:3f:02:76:0b:6e:de:ee:16:41:
         31:c9:da:6a:ad:ac:d7:e2:f3:8d:bc:ce:60:b2:9d:a3:52:19:
         d8:27:fc:98:55:36:30:d2:4e:b6:c9:38:24:1f:3d:b9:8f:86:
         05:67:9c:02
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIULwphd1SgfFXS2+5+q+RYRvCcuBMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQxMjA3MTEwODI1WhcNMjUxMjA2MTExMzI1
WjAzMTEwLwYDVQQDEygyNjQ2MDBENDFEOTA5ODhDMDM1MDc1ODIxQTg2RDk5NTc4
MzQ4RUE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzw3WHytrAM/
kyGLVVXy4xyuq1nasDuScEYJ8qoSHcswzaRx+lpNIx6IhgEUoqD3QZip9oV84nxQ
srYPNE1PxLb6xLzOLnFLrdWliFQVtHtUm39P9jbQTEU9bLlgv1INjUnFuqc+sp8J
Zf3aR7nJW9A8JrdRai2ZwLlL7fHnbNbILHM+buuFeb7fxl0B8CwvXeNpznJTXmXM
VZ9WEECl6yZYIX5FAtMG8Kan62FcH4ohxCXF801aNOmJkFUuiTmddREKs9VWWAxA
Y2+nQo7/xNaVlzSPCZOjZRIAjKnBUja0/IchuZog0PkP6T9wzBh3FnFsMUxNM2eI
PqJkD1WQcQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFCZGANQdkJiMA1B1ghqG2ZV4
NI6nMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzM5OTE1NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAIwGDAWAwkBJgf8UBAAACIDCQAmB/xQEAAA
JDANBgkqhkiG9w0BAQsFAAOCAQEAXrQVBc9EgUAkE6CE+/G6SO90GwjjQMRMgycO
oUdr0x7zWsiD5rvf2lIivi0F8q8Fjl+H8/nKZ++IhPFQywyoSbauxUkdaV/kbZMs
DmKVxCE9UcCvoF1PZU2NeJt6hM2xyVYN0gXdHUutUpTMwwsFWMHy4inyGl8PgYZm
AJccyMh8xhdsNqK7APa0t3/nae56QZKo/Hvitg8VKYv68iG/xDp1WuP5eRcJIaBm
DV1eKTRnNW8GkfhwVvG5llJ99RvSs0brD4BneVLTndBYNk2QPwJ2C27e7hZBMcna
aq2s1+LzjbzOYLKdo1IZ2Cf8mFU2MNJOtsk4JB89uY+GBWecAg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:52:10 2025 by rpki-client