Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa
File:                     AS197890.roa (raw, json)
Hash identifier:          nIlyQ3qI834bYXdNsr6W8dULdnCbTUKwBOCdPSH1SGw=
Subject key identifier:   CA:57:35:97:E4:53:B5:40:19:A5:14:4A:99:06:7C:EC:04:05:D4:25
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       7265EA711135E7D94EEA8A3EDF1CC32810C45C97
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa
Signing time:             Tue 12 Sep 2023 20:39:04 +0000
ROA not before:           Tue 12 Sep 2023 20:34:04 +0000
ROA not after:            Tue 10 Sep 2024 20:39:04 +0000
asID:                     197890
IP address blocks:        140.99.196.0/23 maxlen: 24
                          140.99.202.0/23 maxlen: 24
                          140.99.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 04:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:65:ea:71:11:35:e7:d9:4e:ea:8a:3e:df:1c:c3:28:10:c4:5c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep 12 20:34:04 2023 GMT
            Not After : Sep 10 20:39:04 2024 GMT
        Subject: CN=CA573597E453B54019A5144A99067CEC0405D425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:14:1e:76:3f:cf:ea:67:3d:c4:69:ea:15:
                    5c:0b:b3:41:d0:82:70:c7:68:47:9c:d5:49:28:c4:
                    80:9c:e0:cb:ce:c8:b1:3b:1b:66:36:3f:4f:f6:5b:
                    61:d2:ff:34:75:38:de:7f:fc:51:ef:be:88:1e:69:
                    0f:3d:2e:94:2a:f0:e2:08:5b:dd:b7:5a:bd:f9:20:
                    cd:fe:15:98:b3:58:0b:85:f6:6f:c8:dd:d5:4b:69:
                    75:30:f1:7f:98:ea:3b:8a:c2:27:a8:54:72:13:ee:
                    69:52:24:7b:4b:16:4a:76:58:99:4e:af:8b:02:32:
                    69:5a:f7:75:77:5f:62:1d:06:1f:4f:28:09:03:09:
                    d1:60:d9:3c:0a:fd:5b:e3:2d:d4:4a:fc:f5:d5:5a:
                    dd:47:86:50:24:a9:db:c3:1f:08:c5:5b:12:14:0b:
                    48:1f:32:16:9b:de:60:c0:ac:dc:a8:9b:78:93:da:
                    2b:7f:1e:0f:a9:42:d3:dd:91:97:cf:9a:c1:2f:1c:
                    b3:c8:9a:d8:b7:36:cc:f2:10:bd:83:fb:19:cc:45:
                    9c:f6:8a:8c:c4:21:fe:9f:68:d2:8f:f6:7d:ad:a6:
                    58:b4:c1:2f:7d:fb:fb:5e:cf:84:40:04:7b:f5:16:
                    1d:1b:d2:50:92:a6:dd:f0:eb:02:8b:21:de:4e:e0:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:57:35:97:E4:53:B5:40:19:A5:14:4A:99:06:7C:EC:04:05:D4:25
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.196.0/23
                  140.99.202.0/23
                  140.99.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:53:cb:98:81:f0:73:e3:0b:57:50:76:83:5c:71:24:41:17:
         1e:f7:81:6c:c9:5d:c8:00:b8:9e:f9:e8:31:3b:be:76:df:67:
         66:e6:fc:4c:b8:f7:bb:d7:b8:73:9a:39:71:2c:13:14:2c:53:
         36:69:d1:6b:06:81:ad:29:1e:c4:d3:c8:6e:c0:32:98:40:95:
         cc:77:18:a6:6e:89:4b:5e:2e:e0:39:b3:0b:4c:ec:db:78:54:
         1d:79:22:8b:d7:8b:75:31:80:d6:b3:eb:6b:ed:3f:fd:5f:e3:
         e6:1d:96:44:3d:5e:8c:fc:c9:ee:b7:4d:b0:ea:03:de:7d:ae:
         d7:c7:11:e4:e2:eb:71:2f:bd:53:0f:cc:f7:83:c2:81:2b:51:
         79:f8:85:27:1f:be:e1:ff:b0:ef:71:2a:cd:bb:11:9e:87:d5:
         af:40:20:6f:01:7b:8a:f4:ea:53:f6:df:9a:d7:88:f4:60:74:
         ab:e1:b7:90:77:86:84:cd:2b:34:2a:d4:85:57:32:fd:5d:39:
         6d:7f:d5:bd:d6:15:08:6b:d9:59:a7:c2:b3:a9:81:03:df:70:
         9d:37:b7:ea:b2:28:87:da:3a:8d:db:34:77:32:21:53:95:d5:
         ec:21:83:a4:b3:56:2c:dc:59:9d:44:5c:0e:0c:c3:2b:e1:9a:
         d2:03:23:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:46:21 2024 by rpki-client on console-ams.rpki-client.org