Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137409.roa
File:                     AS137409.roa (raw, json)
Hash identifier:          s5WGO9HwO6W/ujUXsSmNMpqbVs2CMH8bhonnKOcYL3E=
Subject key identifier:   D6:95:83:7E:95:8C:E7:9A:3D:DB:E8:D3:6A:DD:20:44:60:7B:9C:7A
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       65137D73DA147408C5706088A6C2BF14F4BA3A76
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137409.roa
Signing time:             Tue 05 Nov 2024 08:49:21 +0000
ROA not before:           Tue 05 Nov 2024 08:44:21 +0000
ROA not after:            Tue 04 Nov 2025 08:49:21 +0000
asID:                     137409
IP address blocks:        140.99.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:13:7d:73:da:14:74:08:c5:70:60:88:a6:c2:bf:14:f4:ba:3a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Nov  5 08:44:21 2024 GMT
            Not After : Nov  4 08:49:21 2025 GMT
        Subject: CN=D695837E958CE79A3DDBE8D36ADD2044607B9C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:2b:f6:36:f6:49:a2:0e:19:6e:24:3e:ac:
                    15:62:fb:34:22:ec:f3:39:5e:7e:7e:b9:75:76:97:
                    67:c5:93:ad:e5:e6:75:71:57:bf:a4:20:da:36:12:
                    d0:18:93:88:9b:df:eb:75:cd:33:f8:e1:f4:67:ca:
                    a5:2f:9c:92:52:97:20:19:b2:52:ff:df:df:2b:3b:
                    9a:3b:93:b0:60:a0:80:7a:2e:13:c6:1f:3c:0e:0a:
                    92:9d:ea:dc:8c:99:bc:72:6c:43:44:ac:db:3f:49:
                    c0:aa:49:f7:04:57:d3:9b:82:fe:c8:b6:62:29:2f:
                    08:f4:84:8a:d0:8d:d2:10:8a:aa:b3:df:ec:28:67:
                    c5:f0:2f:ab:7c:65:e8:e1:94:5a:db:ad:d8:74:a5:
                    de:06:d5:2e:e2:98:1e:27:ab:69:59:8e:52:e1:3b:
                    6d:f0:0d:6e:27:23:f3:02:3d:7d:cc:21:86:8c:00:
                    b9:cf:97:a3:ef:13:2e:18:b9:fb:65:7e:c2:99:3f:
                    c6:08:c1:d2:7d:ea:40:57:02:b7:4e:11:10:06:b5:
                    54:0e:ad:4c:18:34:b9:68:12:b9:f1:a1:87:a1:ca:
                    b9:02:17:16:b9:b6:0a:17:9e:06:97:39:a4:68:71:
                    05:4c:e7:25:cd:dd:2a:7d:74:a3:6f:2c:a5:9b:0e:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:95:83:7E:95:8C:E7:9A:3D:DB:E8:D3:6A:DD:20:44:60:7B:9C:7A
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137409.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:63:2f:a5:af:13:1e:c9:1d:22:7d:8f:57:f6:a9:31:da:e7:
         5d:93:af:6a:7c:97:f2:93:6e:44:48:29:66:2c:ac:cc:a8:0d:
         a6:65:b8:0d:6e:84:8e:a4:0f:87:72:ff:e4:58:92:90:5a:bd:
         70:c2:ef:1e:5f:a5:b5:7d:1d:53:96:0b:bf:81:36:1c:f9:de:
         0e:61:5d:f5:70:30:17:95:ed:f4:51:d1:ab:56:f4:d6:d5:4c:
         11:7f:25:36:74:cb:ed:ab:99:15:69:87:4a:78:76:08:91:dd:
         ff:14:bb:6a:6d:de:4f:57:a4:5a:aa:cc:e3:0b:d1:9c:6f:e7:
         49:a8:ca:62:95:fc:c8:46:f5:32:4c:28:80:8a:48:a8:05:f2:
         aa:9e:c5:c7:0c:0b:49:28:e5:a3:57:06:08:a0:f4:6f:11:44:
         37:3e:e7:71:2b:a7:68:8a:5e:0c:dc:87:0d:c9:7c:d0:b8:a9:
         99:aa:95:61:0e:46:d1:4b:ff:10:37:85:ac:8b:89:4a:17:ef:
         11:c2:4d:c7:91:39:83:78:aa:c2:a5:68:a2:64:18:05:8b:f1:
         3d:12:51:c7:53:4b:7d:e7:a2:e8:e0:63:d3:c0:5b:f4:31:ad:
         dd:20:28:06:a5:75:b5:98:af:ef:e0:2a:2f:01:9e:6d:65:d3:
         ee:93:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:52 2024 by rpki-client on console-ams.rpki-client.org