Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          hmvT4mXtN/pIWe+25DLa+ZpIpCPpKfRWGHs7Czhv4Y4=
Subject key identifier:   AB:94:C4:69:83:27:51:FE:20:D1:58:11:BE:EF:82:10:0B:FC:DF:FB
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       3FE0F4E82BF3EC1A47863F94534DACD64C536043
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa
Signing time:             Fri 09 Feb 2024 18:32:32 +0000
ROA not before:           Fri 09 Feb 2024 18:27:32 +0000
ROA not after:            Fri 07 Feb 2025 18:32:32 +0000
asID:                     16509
IP address blocks:        140.99.12.0/24 maxlen: 24
                          140.99.50.0/24 maxlen: 24
                          140.99.51.0/24 maxlen: 24
                          140.99.52.0/24 maxlen: 24
                          140.99.53.0/24 maxlen: 24
                          140.99.54.0/24 maxlen: 24
                          140.99.55.0/24 maxlen: 24
                          140.99.56.0/24 maxlen: 24
                          140.99.57.0/24 maxlen: 24
                          140.99.61.0/24 maxlen: 24
                          140.99.63.0/24 maxlen: 24
                          140.99.64.0/24 maxlen: 24
                          140.99.65.0/24 maxlen: 24
                          140.99.66.0/24 maxlen: 24
                          140.99.67.0/24 maxlen: 24
                          140.99.70.0/24 maxlen: 24
                          140.99.71.0/24 maxlen: 24
                          140.99.72.0/24 maxlen: 24
                          140.99.73.0/24 maxlen: 24
                          140.99.74.0/24 maxlen: 24
                          140.99.75.0/24 maxlen: 24
                          140.99.76.0/24 maxlen: 24
                          140.99.123.0/24 maxlen: 24
                          140.99.221.0/24 maxlen: 24
                          140.99.232.0/24 maxlen: 24
                          140.99.234.0/24 maxlen: 24
                          140.99.235.0/24 maxlen: 24
                          2600:3300::/28 maxlen: 28
                          2600:3310::/28 maxlen: 28
                          2600:3320::/28 maxlen: 28
                          2600:3330::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e0:f4:e8:2b:f3:ec:1a:47:86:3f:94:53:4d:ac:d6:4c:53:60:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb  9 18:27:32 2024 GMT
            Not After : Feb  7 18:32:32 2025 GMT
        Subject: CN=AB94C469832751FE20D15811BEEF82100BFCDFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:19:ef:af:d3:11:c4:9a:06:36:d0:cf:20:
                    09:af:18:7d:15:f5:6f:86:6e:70:44:73:2f:c2:b0:
                    bc:65:fd:43:29:d6:f3:22:a1:4a:f6:49:5f:31:f5:
                    dc:b1:7b:bb:43:15:a0:76:99:4c:6e:ef:6e:5a:1f:
                    1e:32:77:0c:d9:b9:ce:64:94:d6:3c:0f:dc:20:05:
                    62:de:b1:9f:49:c9:1c:bc:e2:33:7d:a0:e8:ec:b8:
                    2a:83:16:d1:e2:2f:37:37:13:d5:dd:76:bb:0a:bb:
                    73:db:5d:c9:1d:88:86:23:5d:eb:f5:60:6b:3d:68:
                    4a:7c:1f:7e:9d:73:cc:67:82:f8:4c:1f:88:da:06:
                    29:83:b4:7b:f2:07:b7:d0:c9:f3:2c:9b:41:66:cc:
                    ee:b2:7b:88:f5:2b:9d:c5:2f:a1:e6:bd:58:5c:7b:
                    5f:27:3f:b0:e3:8d:4e:78:66:e6:87:6b:58:ba:1a:
                    20:1d:d7:9e:4a:7d:aa:87:24:39:be:64:28:2c:27:
                    53:2d:85:d7:b6:76:73:2e:72:75:1d:98:6e:3c:46:
                    bf:10:90:39:91:25:83:74:d4:49:8b:69:2a:97:94:
                    fd:1d:73:af:2c:33:70:69:37:e4:ed:d7:86:72:ff:
                    cf:2d:45:40:41:54:e1:f5:ed:05:d2:e9:41:c4:57:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:94:C4:69:83:27:51:FE:20:D1:58:11:BE:EF:82:10:0B:FC:DF:FB
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.12.0/24
                  140.99.50.0-140.99.57.255
                  140.99.61.0/24
                  140.99.63.0-140.99.67.255
                  140.99.70.0-140.99.76.255
                  140.99.123.0/24
                  140.99.221.0/24
                  140.99.232.0/24
                  140.99.234.0/23
                IPv6:
                  2600:3300::/26

    Signature Algorithm: sha256WithRSAEncryption
         71:98:00:c3:2e:e4:5b:98:27:ab:03:9a:c2:9c:f9:76:46:2d:
         e7:27:ee:48:ec:83:31:48:6e:bb:2b:22:7a:89:70:64:bc:2c:
         dd:ad:89:55:05:fb:ad:06:4f:e7:25:bb:77:1f:16:bb:3b:c8:
         36:0e:1d:75:e2:0d:a3:b1:90:3f:be:55:7a:40:a4:3b:67:83:
         0a:25:7e:3b:d9:15:38:3a:2b:85:38:3a:eb:fe:ff:5c:e1:40:
         43:4a:c7:44:3c:30:9d:a1:89:50:43:c3:f3:ce:56:76:5b:23:
         eb:87:28:1d:bf:db:71:02:10:d6:ad:0d:1f:1f:26:ba:a8:0a:
         84:6b:1b:f2:8e:68:c2:b6:02:b8:85:d9:c0:62:18:35:f3:56:
         dc:5b:11:ce:b9:89:c9:0f:0d:b7:c5:7f:f6:5e:55:4a:da:d1:
         b0:cd:c4:09:bd:f3:e1:11:94:a2:12:ca:ad:97:ad:ee:42:cd:
         1c:b8:32:05:eb:4a:60:d9:f7:8e:31:7c:ba:73:1c:b1:eb:19:
         90:4b:8b:3f:8b:96:79:b9:f6:63:06:63:13:68:64:af:a3:1c:
         63:e4:73:79:61:e8:4e:fb:ab:b0:8f:ae:00:80:2d:c2:1c:bb:
         de:8c:28:2f:8e:70:d9:3c:8c:23:08:16:b3:75:0a:bd:65:9a:
         15:3c:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:42:56 2024 by rpki-client on console-fra.rpki-client.org