Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS138156.roa
File:                     AS138156.roa (raw, json)
Hash identifier:          nTz+qy7twNCX5Q37dBbvIHG2DBSp990fNFTNo/J4SfI=
Subject key identifier:   31:89:66:F3:0E:76:25:8C:06:A7:FC:FB:3A:C2:BE:5D:2D:47:CA:E0
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       578DC96D1D9D2EDC613524305C59845B9C23764F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS138156.roa
Signing time:             Tue 29 Aug 2023 12:37:41 +0000
ROA not before:           Tue 29 Aug 2023 12:32:41 +0000
ROA not after:            Tue 27 Aug 2024 12:37:41 +0000
asID:                     138156
IP address blocks:        140.99.96.0/22 maxlen: 24
                          140.99.96.0/24 maxlen: 24
                          140.99.97.0/24 maxlen: 24
                          140.99.98.0/24 maxlen: 24
                          140.99.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 22:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8d:c9:6d:1d:9d:2e:dc:61:35:24:30:5c:59:84:5b:9c:23:76:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 29 12:32:41 2023 GMT
            Not After : Aug 27 12:37:41 2024 GMT
        Subject: CN=318966F30E76258C06A7FCFB3AC2BE5D2D47CAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:de:5f:28:09:04:f8:08:31:d2:ea:34:20:
                    90:b0:3c:9b:cc:f4:d1:7f:7b:a1:68:91:45:76:b4:
                    83:f5:90:5b:ab:69:8e:f2:3a:56:00:f4:c9:71:83:
                    77:7e:76:c8:0c:e8:0f:1b:35:70:77:5f:49:9e:9d:
                    4d:7c:55:0e:41:33:06:e2:8b:81:bc:70:89:b8:1b:
                    5a:4b:c0:f5:c1:61:30:d5:cc:bc:f7:1a:e7:9c:90:
                    3e:50:c5:78:75:50:ce:11:c4:5b:83:fe:16:9f:07:
                    9e:b4:91:83:ee:bd:fc:f3:d7:22:b9:4f:64:b7:e8:
                    a2:46:2b:b0:d0:6b:28:e3:e7:8f:f9:47:5a:b6:bc:
                    0b:b4:bc:b2:57:0d:9b:28:59:eb:a7:f5:82:ae:04:
                    a5:db:41:0c:ce:af:db:d5:30:73:3b:e5:3d:73:30:
                    56:d0:c6:64:fc:2d:c4:b0:ac:ab:d9:bb:94:8c:09:
                    e4:60:17:0e:00:dd:e9:da:fd:1f:0a:30:65:d1:9c:
                    7b:1e:6b:6e:76:0a:42:6e:d9:ad:0a:55:a2:a3:c7:
                    dc:b0:03:60:db:57:9a:5a:88:0c:c7:05:6d:85:f0:
                    92:c1:86:02:45:0e:ca:75:88:b6:36:61:4c:7c:dd:
                    ba:f3:8b:fa:4b:ee:d7:fc:87:78:0a:70:09:fd:fc:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:89:66:F3:0E:76:25:8C:06:A7:FC:FB:3A:C2:BE:5D:2D:47:CA:E0
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS138156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:81:6d:73:66:37:51:63:2f:c4:b3:88:53:d1:47:37:e8:38:
         7a:9e:cb:e1:28:1d:77:67:68:8a:06:0e:bb:72:d6:58:05:04:
         42:2a:91:bb:98:88:fa:45:25:16:15:42:31:d8:c1:0e:74:d5:
         21:40:9a:95:47:56:3c:b6:97:ab:bf:3e:53:a0:06:6e:a9:d4:
         d3:fa:f8:d1:ac:73:e7:65:a6:56:1e:a8:1f:dc:15:90:9d:91:
         e0:08:4b:5e:75:2e:38:24:04:cd:ea:b9:53:04:3b:0d:13:cf:
         14:35:fe:45:01:c9:4c:ca:b0:f0:2e:00:f6:df:92:ef:c0:eb:
         1c:7e:85:9e:24:17:76:77:79:68:9a:c7:1b:29:aa:5b:90:0b:
         15:49:84:9a:d9:ca:60:ff:ce:f1:21:61:69:4c:72:0c:a8:ab:
         b5:46:29:63:a6:38:03:a6:b8:1a:48:f9:d4:31:a9:08:75:fb:
         ad:82:fa:40:9a:b5:54:c8:ee:fe:42:f4:dd:fc:dd:9b:b8:af:
         95:90:c7:32:cb:8c:98:f6:6b:31:8a:a6:9f:76:5d:86:7e:51:
         a6:cb:25:ca:e4:c7:1f:a8:79:cd:75:f0:60:24:12:ee:30:55:
         03:eb:89:6f:8e:ef:9e:85:ac:48:53:f5:2f:5f:86:17:05:4f:
         8c:d4:47:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:29:39 2024 by rpki-client on console-ams.rpki-client.org