Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS15377.roa
File:                     AS15377.roa (raw, json)
Hash identifier:          EbFHfjiqByqMreglHua6xT7d8sO83ROq6Uy5M8V2OwE=
Subject key identifier:   03:4F:57:7A:99:24:A0:4A:D3:EB:82:42:DA:CA:4A:35:96:D6:F9:BE
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       24B2C53A41F1C94463E00D64FCD4CF04F07922F0
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS15377.roa
Signing time:             Sun 04 Aug 2024 10:48:59 +0000
ROA not before:           Sun 04 Aug 2024 10:43:59 +0000
ROA not after:            Sun 03 Aug 2025 10:48:59 +0000
asID:                     15377
IP address blocks:        140.99.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b2:c5:3a:41:f1:c9:44:63:e0:0d:64:fc:d4:cf:04:f0:79:22:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug  4 10:43:59 2024 GMT
            Not After : Aug  3 10:48:59 2025 GMT
        Subject: CN=034F577A9924A04AD3EB8242DACA4A3596D6F9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:af:fc:81:12:f2:4f:59:c1:28:7d:35:f9:
                    21:96:0f:b8:86:27:db:8d:6c:97:4f:9b:d1:46:32:
                    b6:6f:f5:75:74:d4:0a:04:2d:19:6e:19:3d:0c:64:
                    97:a9:99:17:11:af:0b:b7:75:2c:23:32:1b:27:14:
                    46:57:f4:0a:ad:42:01:18:93:9c:97:d8:58:8e:6c:
                    84:62:c3:b6:88:8d:8a:e2:96:cf:4b:f2:4b:da:a4:
                    68:b6:4d:b2:30:d9:bb:26:a3:33:3e:08:e2:08:32:
                    4a:cd:19:ea:ed:ab:88:01:ce:d7:eb:30:18:54:19:
                    a9:4b:66:a2:84:a6:95:d7:34:8f:d7:12:d6:75:0e:
                    57:59:3b:36:98:56:35:e5:0c:39:fc:82:8f:15:8a:
                    c6:d9:35:d6:91:13:23:42:0e:53:68:a0:16:8b:a8:
                    2d:cf:2c:d3:c2:89:34:9f:7c:18:81:ed:41:d6:5d:
                    af:b4:92:0c:71:34:39:17:8a:41:eb:1f:11:f2:7d:
                    5a:a4:f9:f0:b2:44:9d:91:60:89:93:32:f3:3c:69:
                    5a:da:d6:05:dc:fa:a2:0e:a6:50:e1:e7:86:7a:31:
                    d6:30:04:f3:14:4b:98:cc:b2:9e:e5:0a:25:bb:aa:
                    89:6b:07:08:e4:af:a2:4d:b7:77:d6:e4:cb:a3:e6:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4F:57:7A:99:24:A0:4A:D3:EB:82:42:DA:CA:4A:35:96:D6:F9:BE
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS15377.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:23:c1:5a:91:70:6e:11:52:6e:42:1a:56:14:b9:69:a5:ec:
         e6:15:59:0d:cf:25:9b:9c:32:04:47:6a:38:a9:7d:dc:80:ac:
         63:46:51:58:5e:76:6a:34:8f:f1:f8:c2:70:52:ca:1e:59:e4:
         ab:3f:a3:1f:62:cd:fe:b7:4e:bc:a5:51:9c:76:43:7d:4e:cd:
         94:f1:77:de:c1:57:93:07:43:49:82:6c:38:67:c7:7b:23:15:
         ca:5c:bb:50:03:f6:94:96:9c:eb:76:ca:bb:95:c1:da:f9:d8:
         43:6f:55:8d:9a:7e:d5:e1:53:d6:b9:2d:ba:18:db:aa:90:d8:
         bd:ff:da:20:24:f2:d4:a1:9f:07:f2:60:c3:d2:37:d6:f3:9b:
         dc:d1:68:69:70:c2:9b:1c:e9:f6:35:3e:2b:72:ed:8a:08:3d:
         d4:7a:cd:82:7e:f8:c8:56:22:3d:f4:ce:2e:7c:cc:15:b5:4b:
         57:c8:58:99:45:9a:18:92:62:48:5f:a7:4a:af:f2:81:5b:66:
         bb:1a:43:08:25:fa:be:5f:2e:ed:8d:1c:0b:5c:07:2d:08:20:
         9b:9b:dc:43:29:cd:de:74:a5:76:a4:7f:2b:46:83:64:4e:76:
         1c:eb:94:47:d5:9a:54:d3:92:f3:71:c5:99:76:50:c1:07:71:
         09:98:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:52 2024 by rpki-client on console-ams.rpki-client.org