Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197537.roa
File:                     AS197537.roa (raw, json)
Hash identifier:          yyhlGaCAMh0Ri0jbqjYrgU9Vx0wZjEsycUOr21IULkU=
Subject key identifier:   9F:1C:53:EA:3A:0D:5E:AD:42:45:67:98:1D:D6:1D:6B:32:49:C0:CB
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       01220B305A63753AB580D3FB330BD2846861F0B0
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197537.roa
Signing time:             Thu 30 May 2024 11:11:43 +0000
ROA not before:           Thu 30 May 2024 11:06:43 +0000
ROA not after:            Thu 29 May 2025 11:11:43 +0000
asID:                     197537
IP address blocks:        140.99.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 11:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:22:0b:30:5a:63:75:3a:b5:80:d3:fb:33:0b:d2:84:68:61:f0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: May 30 11:06:43 2024 GMT
            Not After : May 29 11:11:43 2025 GMT
        Subject: CN=9F1C53EA3A0D5EAD424567981DD61D6B3249C0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:1d:22:57:77:c2:5e:c7:4a:69:4d:01:e6:
                    7f:b6:d2:33:1c:02:2f:b3:49:85:c0:2f:fc:a6:b9:
                    63:57:36:77:4d:cd:ab:bc:fc:ff:02:8f:ac:5e:8d:
                    0b:f9:af:78:4f:8e:77:53:3f:54:ba:83:45:63:86:
                    c2:8a:37:68:cd:4a:4f:24:1d:07:9b:1c:de:2c:f7:
                    96:5d:b6:82:6d:fb:2c:6f:39:13:ee:b2:3c:7b:65:
                    d6:bd:a9:00:3b:80:61:ab:c7:eb:09:1c:d5:14:09:
                    ac:c9:1b:37:3f:fc:73:b2:43:5b:0e:be:e6:59:67:
                    c8:1c:e7:d2:c0:7c:2c:f5:70:11:0e:35:0f:32:71:
                    19:cd:4e:66:63:f0:3b:88:fa:da:d9:8d:04:72:96:
                    d3:bc:b9:3d:27:4e:c9:f0:a5:71:d8:84:55:93:ce:
                    e5:37:a8:82:c2:86:d7:87:8b:c6:bd:5d:a6:97:31:
                    8e:ef:ba:59:4b:24:14:c2:47:3c:bb:3a:ea:14:28:
                    36:d1:28:0c:2e:ff:9b:c5:fd:f4:d2:b7:c8:eb:02:
                    a0:e2:95:98:4e:82:3d:4e:28:5d:50:43:12:bd:de:
                    6e:3a:67:04:dc:17:01:95:91:a2:e2:4c:e9:67:66:
                    dd:f1:41:1c:98:34:69:02:67:57:94:4c:5e:0a:49:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1C:53:EA:3A:0D:5E:AD:42:45:67:98:1D:D6:1D:6B:32:49:C0:CB
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:42:d0:db:39:65:f2:eb:02:94:28:b8:2f:d5:66:3d:8c:3f:
         69:dd:b0:7b:7e:e6:da:c4:36:7f:06:1c:aa:51:f9:b8:b9:7d:
         e0:7d:80:b9:00:c4:50:15:81:65:e8:b8:45:9f:3a:d2:a2:fd:
         bb:ab:2d:8e:6e:eb:07:db:32:8a:d6:5b:4b:4d:ad:63:dc:d1:
         69:d4:75:5d:2d:f2:c1:98:8b:a1:f5:e2:c7:66:8d:f3:47:60:
         14:5f:a0:23:1c:05:27:a5:62:4f:42:6c:93:cc:90:f2:80:dc:
         8b:6e:22:7a:28:d7:b0:9f:87:18:51:90:0c:6c:b3:13:05:d5:
         e0:98:94:5d:f0:c6:ce:b5:e6:ff:40:2b:3e:07:00:61:be:8c:
         d1:97:1b:99:d0:e3:66:82:ed:a0:79:80:2a:73:6c:8d:d1:fd:
         ef:d4:8f:45:30:0d:17:71:ac:94:1f:bd:76:07:18:9a:a9:81:
         cb:6e:b3:ab:b4:7d:c9:c9:83:3c:76:2f:e7:61:e3:cd:70:85:
         18:8e:be:39:49:bc:86:54:ab:6c:52:e2:5b:92:94:31:c7:55:
         01:69:04:35:b1:1b:9e:6f:ef:f1:75:61:db:4a:2a:15:3e:42:
         f7:1a:58:6b:9b:a1:76:67:b1:b7:5f:d8:16:5d:b1:97:e8:b7:
         19:5f:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 09:45:03 2024 by rpki-client on console-ams.rpki-client.org