Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS138156.roa
File:                     AS138156.roa (raw, json)
Hash identifier:          GkdDS8iPXk5La8ZgGFRoHoRloh8W483shCDdwmAjYH0=
Subject key identifier:   42:19:75:72:7C:D9:8C:C7:70:03:34:D7:A7:C3:CF:76:F4:14:CC:B0
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       20081D3DB9EEECC361EBB2568960EAFDA1262D09
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS138156.roa
Signing time:             Tue 30 Jul 2024 12:48:59 +0000
ROA not before:           Tue 30 Jul 2024 12:43:59 +0000
ROA not after:            Tue 29 Jul 2025 12:48:59 +0000
asID:                     138156
IP address blocks:        140.99.96.0/22 maxlen: 24
                          140.99.96.0/24 maxlen: 24
                          140.99.97.0/24 maxlen: 24
                          140.99.98.0/24 maxlen: 24
                          140.99.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:08:1d:3d:b9:ee:ec:c3:61:eb:b2:56:89:60:ea:fd:a1:26:2d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul 30 12:43:59 2024 GMT
            Not After : Jul 29 12:48:59 2025 GMT
        Subject: CN=421975727CD98CC7700334D7A7C3CF76F414CCB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:37:b6:a2:f2:5b:f9:cf:c8:fa:d4:0a:2e:
                    98:81:cd:e9:53:b0:b5:21:ed:06:0b:1b:a2:cb:86:
                    25:a1:7b:43:45:a5:56:b8:37:f8:d3:72:ff:f3:1f:
                    93:c5:4d:a5:c9:55:f0:2e:00:ed:04:6a:ac:30:bb:
                    9c:63:79:36:c0:35:f7:d9:2c:c1:83:ca:48:86:df:
                    5d:eb:8e:3a:3c:ea:aa:8b:79:6e:47:eb:93:9b:12:
                    70:e7:f0:89:a8:06:20:62:d1:51:57:aa:84:f3:e9:
                    e5:58:da:f5:0c:04:23:0d:87:6c:a5:17:3b:d1:71:
                    cc:5d:85:71:75:98:c2:48:4f:68:26:8f:19:f7:22:
                    e0:a8:e2:1e:44:d1:79:71:7e:8a:59:e1:5c:0d:56:
                    3c:50:1d:85:43:4b:02:aa:c7:11:8b:40:93:9c:32:
                    81:37:07:d8:a7:06:4a:df:1b:02:9d:75:14:e1:db:
                    e0:9b:bf:96:05:3e:e7:07:fa:ab:de:2a:72:e7:82:
                    6a:e1:63:cc:e4:13:f0:df:a9:64:1c:b1:0a:4b:f7:
                    56:a9:ec:96:73:55:2c:1b:79:39:23:de:d7:3f:d5:
                    aa:b0:9c:2b:43:b5:d2:8e:65:d6:82:a2:53:4c:9f:
                    1e:68:09:4f:b9:95:29:13:84:9a:72:07:87:64:66:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:19:75:72:7C:D9:8C:C7:70:03:34:D7:A7:C3:CF:76:F4:14:CC:B0
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS138156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:b2:ff:d7:be:ea:53:e3:37:de:a6:fb:9f:ae:3f:8d:7e:1c:
         77:e9:fc:12:51:b5:d7:88:0e:9e:6f:ea:79:2d:06:fa:14:23:
         c6:11:67:96:0c:13:95:5e:d0:aa:2a:4e:81:11:2b:ea:f5:d3:
         59:48:7b:68:a3:c5:df:3a:53:ae:5b:1f:2b:b0:7f:51:7f:27:
         80:83:99:32:32:55:72:c5:2d:90:76:3a:cc:33:a5:2d:56:71:
         eb:05:b4:b7:84:c0:e7:e1:50:42:1f:ad:96:fd:ce:03:f1:37:
         eb:f0:ec:16:62:17:9b:ad:c5:68:0b:fb:23:11:4b:5c:3a:2e:
         42:4e:d9:3e:5f:23:3e:9a:6b:21:9a:07:45:12:8c:4c:7d:90:
         1c:f0:01:ed:20:df:4b:b8:ed:8f:e5:a2:49:8f:a7:1c:06:65:
         a0:6f:a0:f6:1a:3a:62:64:ed:f7:21:20:4b:cf:d3:a6:f4:ea:
         e3:f2:9a:2d:43:66:c4:a8:e1:18:28:26:f4:45:89:f8:48:c7:
         8b:5e:49:f0:49:dd:c5:7d:e2:bb:36:f4:34:21:85:a6:15:f3:
         ff:d7:5e:05:f8:b2:d1:ec:13:70:d5:aa:4e:6c:37:4c:c1:f9:
         d3:4f:99:ac:5e:ba:48:90:85:61:9c:73:21:2e:6e:a0:73:c4:
         c2:e2:4a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:40 2024 by rpki-client on console-ams.rpki-client.org