Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa
File:                     AS197890.roa (raw, json)
Hash identifier:          ynAurpg+IN6kJojeWL6Hhx0IHLqQi9cN0ADi7AxT6zg=
Subject key identifier:   B9:B0:A7:D3:8A:B4:1B:C8:88:81:7C:C2:36:2B:23:4B:4F:0C:28:93
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       0AFD48A3EDFA4821CCBE1DA4797A086D485CD98F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa
Signing time:             Mon 03 Jun 2024 18:01:19 +0000
ROA not before:           Mon 03 Jun 2024 17:56:19 +0000
ROA not after:            Mon 02 Jun 2025 18:01:19 +0000
asID:                     197890
IP address blocks:        140.99.196.0/23 maxlen: 24
                          140.99.202.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fd:48:a3:ed:fa:48:21:cc:be:1d:a4:79:7a:08:6d:48:5c:d9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun  3 17:56:19 2024 GMT
            Not After : Jun  2 18:01:19 2025 GMT
        Subject: CN=B9B0A7D38AB41BC888817CC2362B234B4F0C2893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:54:2c:26:be:0c:56:51:68:ae:86:33:ab:
                    a7:9d:4c:45:0d:82:c6:86:86:e7:56:2e:b4:02:92:
                    99:c1:a2:32:5e:1b:79:a4:15:f5:1b:ef:90:cc:2f:
                    31:5e:67:70:dd:91:1a:38:1f:42:58:44:e6:09:ab:
                    d1:f6:47:f0:1d:a3:5d:5f:d9:63:0d:3d:a4:95:13:
                    ca:f6:7d:c9:67:c6:e0:b7:32:25:5c:c4:34:f1:26:
                    8d:71:68:2b:f9:1a:c7:bb:47:ad:73:a3:a2:fb:87:
                    10:fa:24:bf:e9:30:c7:9d:9f:a9:0b:6b:c7:ae:de:
                    92:ba:82:af:36:e1:6e:70:e2:8b:5c:09:90:5f:cd:
                    ff:f5:5c:6c:48:06:13:3c:fe:3c:98:e9:79:04:05:
                    05:47:2e:29:d4:6c:24:21:58:96:80:23:10:a5:cc:
                    7b:09:2a:20:bb:52:a8:a8:ee:86:3d:f2:8c:aa:4e:
                    dd:67:d4:40:74:aa:9f:83:53:bf:a8:98:f9:91:bb:
                    38:53:99:bb:8a:56:ba:38:22:24:0e:65:a6:dc:57:
                    94:6f:c2:18:80:7c:ea:50:93:ae:12:a3:84:e8:f7:
                    13:09:da:35:02:4c:86:bb:7b:f0:6e:c9:a0:31:73:
                    52:ea:aa:96:c3:c8:ec:67:6e:6a:8e:a3:55:ef:df:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B0:A7:D3:8A:B4:1B:C8:88:81:7C:C2:36:2B:23:4B:4F:0C:28:93
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.196.0/23
                  140.99.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:58:36:f8:1c:2f:19:7d:bd:d1:f3:ba:87:3a:81:8e:5c:
         e7:b9:01:11:e7:fd:92:d9:d0:86:18:a5:01:b1:9a:55:17:e1:
         5f:17:a9:f0:81:08:74:ce:de:ee:f9:ff:fb:c5:a3:d6:0a:f2:
         89:6e:75:20:3a:9a:ee:af:75:02:0a:63:80:85:68:60:8f:c5:
         42:98:31:18:25:c5:08:10:41:eb:0e:81:7a:c8:2e:b0:ab:8d:
         03:ec:54:ab:a6:e1:80:20:b4:8c:e7:d1:ce:5a:ed:0b:3d:6f:
         eb:b7:c7:06:1c:26:46:c1:66:97:6d:03:01:7e:68:39:45:a6:
         d9:bd:d3:26:f2:b4:85:4d:43:65:78:90:3f:49:d5:49:31:2c:
         28:73:f8:ef:33:bc:20:e4:2f:e2:f4:50:a7:34:b1:f9:71:a4:
         1e:ba:10:8e:24:0f:c2:73:2c:40:6f:17:e2:0a:43:72:f3:a1:
         58:dd:08:04:c7:4d:05:c6:0d:92:33:73:5c:a2:90:d1:06:59:
         8a:38:f5:44:19:e9:80:9a:e9:ba:04:bd:53:3a:b2:4b:83:6f:
         5d:8a:6f:6d:36:1c:ad:44:10:34:a7:34:e5:4a:7b:0f:ae:31:
         3d:05:6d:8a:1e:be:82:c5:da:ba:13:2d:18:d3:09:55:be:ff:
         e9:4a:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:16:13 2024 by rpki-client on console-ams.rpki-client.org