Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20068.roa
File:                     AS20068.roa (raw, json)
Hash identifier:          tpXzJ3jG7UOc7Jbn7mBXVHHwgmQB6lVCaVl33roUJL4=
Subject key identifier:   AA:9E:CB:17:69:80:F1:8D:C9:24:23:7D:ED:FC:30:A9:98:D9:B6:F5
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6BD9D84EDFB9D9BFBE6FD31431491300CB2F9287
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20068.roa
Signing time:             Sat 23 Dec 2023 06:46:33 +0000
ROA not before:           Sat 23 Dec 2023 06:41:33 +0000
ROA not after:            Sat 21 Dec 2024 06:46:33 +0000
asID:                     20068
IP address blocks:        140.99.244.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d9:d8:4e:df:b9:d9:bf:be:6f:d3:14:31:49:13:00:cb:2f:92:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Dec 23 06:41:33 2023 GMT
            Not After : Dec 21 06:46:33 2024 GMT
        Subject: CN=AA9ECB176980F18DC924237DEDFC30A998D9B6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:d9:15:a9:1b:d4:9c:af:82:09:f8:69:64:
                    7d:bb:63:4b:2d:3e:6e:d5:cf:c2:28:88:37:cf:8b:
                    be:7c:99:c4:ef:55:3c:4d:31:d1:2b:8f:37:5e:2a:
                    79:ed:53:96:0d:d2:2f:0e:f4:e8:7b:ea:13:11:8e:
                    78:6b:08:2f:7a:f2:a5:07:16:72:15:9c:e5:42:ad:
                    21:27:e7:77:33:3f:b0:04:89:c7:08:f3:b5:cf:ac:
                    2b:79:98:88:58:23:5f:d9:82:87:69:ff:99:ed:2b:
                    4e:a7:71:e2:0a:ab:02:29:23:2a:10:3d:ca:55:de:
                    80:f1:6f:2e:89:ca:48:ab:6a:30:10:4b:7e:33:e8:
                    43:5a:cd:df:b9:71:aa:09:06:11:ff:a1:ac:6e:6e:
                    c4:79:d0:ba:e5:d9:29:25:fb:97:fd:11:f9:ef:88:
                    e1:ab:f3:98:60:92:79:3d:6f:9e:af:16:26:31:27:
                    ed:d8:dd:23:6d:48:bb:af:ca:0d:22:d1:08:de:76:
                    d1:8f:c9:56:f0:3c:03:68:44:09:04:35:f2:b0:ee:
                    7b:db:9a:02:1b:f1:35:15:03:5f:3f:e6:93:81:45:
                    e2:69:e9:18:a9:61:d0:7d:fd:0c:7c:2d:96:7c:7a:
                    e5:1d:49:b2:ca:43:cb:f2:3b:df:f9:33:2d:e0:62:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9E:CB:17:69:80:F1:8D:C9:24:23:7D:ED:FC:30:A9:98:D9:B6:F5
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20068.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:91:5f:76:89:bc:2b:b2:35:52:78:d7:7a:26:60:47:a2:2a:
         f1:43:44:8f:f7:ec:83:b1:17:10:a8:1c:91:e4:90:52:d5:0f:
         39:55:da:85:53:39:81:67:99:d2:18:d9:05:63:65:42:36:ad:
         2c:b2:d2:14:0a:2b:d8:a0:49:2c:b3:06:51:39:77:22:65:2e:
         f3:44:6e:28:83:77:dc:4f:d8:9f:bc:14:1d:a7:84:07:35:0a:
         87:06:1e:cf:fc:2a:1a:cc:a1:9f:51:91:5a:1c:ed:24:e1:54:
         e5:f4:16:e5:4d:d6:97:1e:73:92:54:7e:8c:02:e5:ce:d3:05:
         5c:30:1a:64:f1:23:88:6f:6a:b0:65:33:b7:64:00:00:d1:e4:
         fd:bb:7f:f7:87:97:24:19:c7:cd:f4:55:a5:89:07:45:bd:22:
         b0:a1:3f:53:0d:07:a9:d9:e2:cd:cd:10:91:83:42:a9:e4:d6:
         73:c7:cf:5c:ba:8c:61:7c:12:cf:62:dc:fe:67:d9:63:e5:ff:
         07:c0:3e:ea:31:ae:e0:3c:2e:2a:f9:27:0e:3d:b4:cf:37:81:
         02:f4:ec:cd:70:65:e6:81:d8:d5:8a:62:33:bc:1e:5b:0e:35:
         2b:ed:1e:9a:3d:55:dd:26:80:8d:bf:8f:fc:25:d7:0b:70:f0:
         4d:59:38:17
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUa9nYTt+52b++b9MUMUkTAMsvkocwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMxMjIzMDY0MTMzWhcNMjQxMjIxMDY0NjMz
WjAzMTEwLwYDVQQDEyhBQTlFQ0IxNzY5ODBGMThEQzkyNDIzN0RFREZDMzBBOTk4
RDlCNkY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+vZFakb1Jyv
ggn4aWR9u2NLLT5u1c/CKIg3z4u+fJnE71U8TTHRK483Xip57VOWDdIvDvToe+oT
EY54awgvevKlBxZyFZzlQq0hJ+d3Mz+wBInHCPO1z6wreZiIWCNf2YKHaf+Z7StO
p3HiCqsCKSMqED3KVd6A8W8uicpIq2owEEt+M+hDWs3fuXGqCQYR/6Gsbm7EedC6
5dkpJfuX/RH574jhq/OYYJJ5PW+erxYmMSft2N0jbUi7r8oNItEI3nbRj8lW8DwD
aEQJBDXysO5725oCG/E1FQNfP+aTgUXiaekYqWHQff0MfC2WfHrlHUmyykPL8jvf
+TMt4GIg+QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKqeyxdpgPGNySQjfe38MKmY
2bb1MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIwMDY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjGP0MA0GCSqGSIb3DQEBCwUAA4IB
AQBkkV92ibwrsjVSeNd6JmBHoirxQ0SP9+yDsRcQqByR5JBS1Q85VdqFUzmBZ5nS
GNkFY2VCNq0sstIUCivYoEksswZROXciZS7zRG4og3fcT9ifvBQdp4QHNQqHBh7P
/CoazKGfUZFaHO0k4VTl9BblTdaXHnOSVH6MAuXO0wVcMBpk8SOIb2qwZTO3ZAAA
0eT9u3/3h5ckGcfN9FWliQdFvSKwoT9TDQep2eLNzRCRg0Kp5NZzx89cuoxhfBLP
Ytz+Z9lj5f8HwD7qMa7gPC4q+ScOPbTPN4EC9OzNcGXmgdjVimIzvB5bDjUr7R6a
PVXdJoCNv4/8JdcLcPBNWTgX
-----END CERTIFICATE-----
Generated at Fri Mar 29 03:42:56 2024 by rpki-client on console-fra.rpki-client.org