Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS150127.roa
File:                     AS150127.roa (raw, json)
Hash identifier:          xfglInwbXzIth1QEeZO7RHNJyqrGZ1whRL1spNpydPA=
Subject key identifier:   BA:52:CD:0E:DC:77:32:AB:FC:0C:64:A7:CE:E6:6D:BD:0F:FD:4A:FE
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6A36E89BD3C228A2A4D934C80E0100A8DEEAC97C
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS150127.roa
Signing time:             Thu 07 Sep 2023 04:36:47 +0000
ROA not before:           Thu 07 Sep 2023 04:31:47 +0000
ROA not after:            Thu 05 Sep 2024 04:36:47 +0000
asID:                     150127
IP address blocks:        140.99.148.0/23 maxlen: 24
                          140.99.152.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 10:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:36:e8:9b:d3:c2:28:a2:a4:d9:34:c8:0e:01:00:a8:de:ea:c9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep  7 04:31:47 2023 GMT
            Not After : Sep  5 04:36:47 2024 GMT
        Subject: CN=BA52CD0EDC7732ABFC0C64A7CEE66DBD0FFD4AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:4e:17:26:31:26:49:3d:ed:32:46:38:7c:
                    17:96:8a:da:fb:18:bf:33:ce:68:82:05:f9:7a:e3:
                    3d:c0:02:12:d5:b0:bb:fa:b0:5e:f9:ee:46:a6:44:
                    2e:3c:e2:e0:8c:0a:a6:24:07:e2:1c:d2:6b:c9:c9:
                    c8:38:96:48:16:bb:f5:0c:7e:03:8b:19:1a:b7:c2:
                    b1:6d:ff:ee:b4:78:b0:90:bf:ed:dd:33:09:f5:1e:
                    05:1f:a9:91:14:44:7d:2f:cd:cb:a3:ee:19:7a:56:
                    73:76:8a:80:30:db:03:2c:ba:92:17:dc:48:eb:4a:
                    7d:1e:7c:08:1f:3e:4b:5a:f8:3d:75:c4:f2:b3:03:
                    b3:2f:74:e0:d6:f0:d8:1d:68:9b:33:0e:a0:e3:80:
                    ae:a9:ab:51:23:ea:59:78:1e:76:57:16:7f:6b:1a:
                    59:c6:f1:ab:56:5b:80:05:ee:d5:6b:e1:d7:aa:45:
                    c4:4c:3d:b0:1f:e9:06:2e:b4:76:ca:e6:99:2c:ab:
                    fd:a0:17:ff:8e:b6:5b:45:30:90:cf:55:b2:b7:98:
                    d3:f0:ab:3c:8a:4c:f7:aa:ba:27:0a:2e:37:17:30:
                    0c:b4:8b:af:f9:64:20:23:09:13:ed:42:71:08:dd:
                    a5:fe:fb:89:88:55:26:fb:c0:93:10:5f:6a:52:3d:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:52:CD:0E:DC:77:32:AB:FC:0C:64:A7:CE:E6:6D:BD:0F:FD:4A:FE
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS150127.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.148.0/23
                  140.99.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:9a:f3:67:ac:81:09:5d:e0:92:0f:ff:82:e5:79:ba:f5:2d:
         f5:df:16:01:0e:fc:0a:e4:74:10:a4:b0:75:71:53:7d:6e:13:
         2c:27:44:e9:c8:19:45:05:9d:b9:9a:56:18:d7:4d:9b:fe:e7:
         4e:10:0a:1f:ba:a0:fe:5d:ea:57:67:6c:41:81:be:9c:7d:f7:
         65:31:5b:b9:a2:50:f4:f3:3b:21:93:ab:4f:77:f7:59:fd:94:
         ec:3b:aa:ed:50:f8:d4:ab:ad:43:91:f1:e6:de:9e:79:ab:b9:
         8d:7f:0c:bc:6f:a6:6f:e6:37:36:d1:ef:18:4b:51:89:40:a7:
         5e:ca:35:c9:b6:d9:54:43:dc:9a:8d:c6:99:f0:54:39:e9:b4:
         06:36:0a:d8:11:99:b1:6a:6b:f8:b4:87:1f:f7:e1:91:c9:3b:
         62:4d:de:8f:40:18:ae:48:0a:ed:fd:c1:96:b1:de:f5:b8:01:
         be:2d:5a:c2:6a:cf:44:74:4b:88:71:b0:f0:f6:8d:a6:42:87:
         c3:ed:c4:f3:b4:01:8d:63:8b:81:f9:24:be:ce:17:12:1f:04:
         d8:62:ef:a1:a0:d6:2c:14:aa:34:90:39:eb:a4:8e:1e:71:00:
         36:68:50:9e:17:e0:69:49:f5:47:81:6b:51:5e:7a:a1:d7:d3:
         ab:19:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:31:54 2024 by rpki-client on console-ams.rpki-client.org