Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS19446.roa
File:                     AS19446.roa (raw, json)
Hash identifier:          PPj1gDYvJ21HkoYk3j4wFPlWCyRZy84GNnnb1rBI7ps=
Subject key identifier:   5B:7D:54:0F:07:32:F8:58:6D:CD:7F:05:9C:3D:C2:A6:54:A0:59:39
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       73283205AE731D50B02C584F574EDC0BBC80509A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS19446.roa
Signing time:             Fri 17 Jan 2025 16:28:23 +0000
ROA not before:           Fri 17 Jan 2025 16:23:23 +0000
ROA not after:            Fri 16 Jan 2026 16:28:23 +0000
asID:                     19446
IP address blocks:        140.99.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 04:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:28:32:05:ae:73:1d:50:b0:2c:58:4f:57:4e:dc:0b:bc:80:50:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jan 17 16:23:23 2025 GMT
            Not After : Jan 16 16:28:23 2026 GMT
        Subject: CN=5B7D540F0732F8586DCD7F059C3DC2A654A05939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:8d:b1:bd:0a:71:90:f6:a1:5a:3f:b1:82:
                    61:0b:ec:9f:b6:4f:78:fe:f5:17:cb:d0:33:63:f5:
                    71:22:16:8a:39:e1:53:df:2a:7c:af:b8:23:d2:af:
                    51:93:19:d4:b0:4e:f0:0c:cb:c1:ee:10:12:00:20:
                    67:fa:4d:29:ba:73:1e:44:6c:0b:49:dc:c7:9d:c0:
                    31:3e:1a:8d:a8:d5:bf:ee:cb:e8:d5:19:ee:8f:c2:
                    8b:67:74:e8:2a:0d:b4:5d:7e:0a:3d:9f:74:39:74:
                    e0:60:c3:0a:6a:c7:ea:b4:78:18:da:5f:95:57:1c:
                    d6:d6:c7:21:0d:c2:cc:0c:54:a6:03:f1:5c:90:a0:
                    a9:bd:80:91:c5:9d:10:09:c3:a3:23:49:44:28:9f:
                    bc:6f:0c:9b:b7:60:54:49:43:3d:54:f4:f4:44:1d:
                    19:da:47:d8:9c:70:a8:94:16:a9:c2:c6:4f:71:47:
                    d9:d6:0a:4a:c0:42:ab:68:51:73:fc:13:f8:29:68:
                    7f:52:7f:03:f7:4b:d9:81:ca:c6:28:7b:35:9c:b0:
                    5b:e5:bb:03:02:19:e7:6c:8d:04:9c:dc:35:45:f8:
                    03:6b:1d:b9:d8:c2:51:3e:a2:10:44:d7:da:38:61:
                    94:13:94:a6:cc:22:a4:44:bf:da:80:49:2d:f1:1a:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7D:54:0F:07:32:F8:58:6D:CD:7F:05:9C:3D:C2:A6:54:A0:59:39
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS19446.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:c7:a1:d2:b3:02:ac:5d:6e:c3:d4:14:c7:a1:fd:e2:12:
         9d:5e:e2:eb:5c:3a:75:22:7d:82:8c:44:a6:8b:1e:5e:e0:5b:
         28:55:c6:74:79:f5:43:85:2c:69:84:be:61:e0:30:ae:fb:03:
         82:cb:dd:b5:a1:ce:11:80:39:1e:73:79:42:c0:84:24:22:94:
         19:73:9d:48:5a:6e:78:39:31:9f:73:11:d9:81:0b:8b:5b:55:
         0d:f4:00:2b:96:d3:d8:2d:11:06:c3:c1:6b:bb:ff:fe:f0:33:
         57:76:a9:cb:c6:ac:40:fe:c7:d2:76:30:e1:a4:be:e1:e3:b7:
         40:08:57:08:22:ab:d7:5f:e1:bf:84:c8:52:e7:d9:8e:ca:a8:
         a3:98:3a:68:76:c2:3b:fc:f3:ad:db:1a:91:e7:04:b5:06:80:
         69:cf:ae:f3:97:1c:12:6a:38:f3:42:9e:f5:7d:14:6a:70:41:
         02:a2:ea:c9:7c:8b:2e:b8:91:aa:58:43:8d:df:c5:b5:87:3b:
         85:a4:01:48:07:c5:86:12:71:06:84:ed:43:a2:5f:fc:59:11:
         24:f1:bb:6b:96:53:21:d6:d9:86:9f:d4:db:b1:03:8a:0a:ff:
         95:ba:64:ba:ba:c6:64:3a:e9:f5:62:71:48:9e:18:a1:23:fc:
         b4:e0:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:15 2025 by rpki-client