Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140641.roa
File:                     AS140641.roa (raw, json)
Hash identifier:          PSnYZyhmaPq2aWaj6n7wxcVhwROrZq5UJwBtIw5BVjk=
Subject key identifier:   FA:B3:F9:B7:FB:F9:01:DA:09:82:44:4F:6E:9D:EF:E2:0E:72:62:2C
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4247956FBAE7BBA62E1DFD9D45F53BAE6E2569CA
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140641.roa
Signing time:             Fri 15 Mar 2024 08:29:50 +0000
ROA not before:           Fri 15 Mar 2024 08:24:50 +0000
ROA not after:            Fri 14 Mar 2025 08:29:50 +0000
asID:                     140641
IP address blocks:        140.99.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 11:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:47:95:6f:ba:e7:bb:a6:2e:1d:fd:9d:45:f5:3b:ae:6e:25:69:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar 15 08:24:50 2024 GMT
            Not After : Mar 14 08:29:50 2025 GMT
        Subject: CN=FAB3F9B7FBF901DA0982444F6E9DEFE20E72622C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:eb:0f:b2:a4:d6:f8:91:a7:b0:55:d6:4a:
                    2a:ee:be:8a:63:78:68:01:de:79:8c:8a:d2:95:e1:
                    81:cc:79:27:60:70:dd:a9:4d:5b:ec:75:7c:88:68:
                    e9:65:82:d3:98:a6:01:af:84:e4:fb:06:1b:4e:95:
                    10:c1:53:6e:34:5f:3a:51:70:7a:80:11:94:d5:a0:
                    56:5f:38:9a:1a:58:45:30:e8:c5:17:f5:71:16:26:
                    b5:80:f0:14:02:41:78:d4:e2:92:c5:26:f1:3b:c2:
                    6c:23:60:46:9f:e9:52:ae:be:f0:10:fb:a4:fd:15:
                    2a:5c:c1:47:cb:cf:69:78:36:d5:04:0f:68:fd:50:
                    df:41:46:b9:61:5f:cc:05:53:59:49:70:85:da:53:
                    0f:a7:8b:a3:bd:dc:d6:d1:34:e9:72:3c:fa:d2:4d:
                    be:24:ae:c4:de:22:c1:9b:99:39:ae:b6:18:d2:23:
                    f7:ff:25:a3:ef:10:eb:d2:9a:bc:e2:e9:35:78:f4:
                    cd:1a:10:49:2f:5c:f4:eb:f9:06:8b:02:0b:32:4b:
                    c2:8e:54:21:16:83:57:9b:74:12:38:e4:ac:a2:1e:
                    ec:9a:62:ad:2e:a2:0e:9c:2e:25:0f:53:75:87:65:
                    66:4e:99:c9:32:29:2d:f7:d7:47:59:83:81:1a:3f:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:F9:B7:FB:F9:01:DA:09:82:44:4F:6E:9D:EF:E2:0E:72:62:2C
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:20:b6:1e:1f:68:8a:cd:a9:8b:30:25:73:a7:d8:5e:84:ca:
         1e:10:94:1e:d0:ea:33:52:52:1b:7b:8e:f7:0a:55:81:32:5a:
         f4:59:21:fc:eb:01:cb:29:ed:fb:ef:98:04:24:6d:73:49:1c:
         e0:47:91:cb:20:ee:e4:79:61:32:69:cd:f2:5a:78:f4:7a:98:
         0a:0d:f4:57:06:53:71:e4:e1:8b:0c:43:8b:9a:bc:0e:a7:72:
         e1:65:34:db:04:94:b6:f2:80:00:36:55:d2:90:08:74:b5:47:
         44:8a:67:06:2e:d3:ba:bd:6d:6f:f6:56:91:2d:bb:ad:59:b3:
         1c:da:ca:66:90:f9:4c:c6:93:9b:90:69:f4:86:7b:71:23:0e:
         8e:8c:b9:87:6f:1d:58:6a:c2:60:e1:92:57:24:52:fe:26:8e:
         3a:f7:4c:80:3a:a4:f7:a0:ab:c5:bb:33:44:76:a9:1e:b7:e2:
         a0:7a:2b:bf:79:46:31:c3:16:84:12:54:c7:88:1a:8d:ad:89:
         bb:9c:32:57:a8:e4:8c:26:9f:a6:e1:43:51:a6:d5:ae:9e:58:
         51:2b:1f:2a:27:c7:20:fa:29:a4:f5:3d:20:9c:47:3a:7e:b9:
         f8:e5:da:c1:45:b8:77:66:f1:90:51:e5:e5:a6:09:47:66:b4:
         69:8e:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 09:40:29 2024 by rpki-client on console-fra.rpki-client.org