Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201341.roa
File:                     AS201341.roa (raw, json)
Hash identifier:          3qWQ38WIdJRfYjDnHWQzR/hQu5+YnW0MNXdJdmWQpHs=
Subject key identifier:   AC:91:B9:1E:1A:AC:46:BE:4B:27:6D:9C:C5:4F:A2:ED:28:01:F0:8F
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       8FB5DB327929CE613E339BC854E74A64BC9B71
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201341.roa
Signing time:             Mon 26 Feb 2024 14:54:50 +0000
ROA not before:           Mon 26 Feb 2024 14:49:50 +0000
ROA not after:            Mon 24 Feb 2025 14:54:50 +0000
asID:                     201341
IP address blocks:        140.99.81.0/24 maxlen: 24
                          140.99.86.0/24 maxlen: 24
                          140.99.140.0/24 maxlen: 24
                          140.99.141.0/24 maxlen: 24
                          140.99.142.0/24 maxlen: 24
                          140.99.143.0/24 maxlen: 24
                          140.99.148.0/24 maxlen: 24
                          140.99.149.0/24 maxlen: 24
                          140.99.150.0/24 maxlen: 24
                          140.99.152.0/24 maxlen: 24
                          140.99.153.0/24 maxlen: 24
                          140.99.154.0/24 maxlen: 24
                          140.99.155.0/24 maxlen: 24
                          140.99.156.0/24 maxlen: 24
                          140.99.157.0/24 maxlen: 24
                          140.99.158.0/24 maxlen: 24
                          140.99.159.0/24 maxlen: 24
                          140.99.160.0/24 maxlen: 24
                          140.99.161.0/24 maxlen: 24
                          140.99.162.0/24 maxlen: 24
                          140.99.163.0/24 maxlen: 24
                          140.99.165.0/24 maxlen: 24
                          140.99.166.0/24 maxlen: 24
                          140.99.167.0/24 maxlen: 24
                          140.99.168.0/24 maxlen: 24
                          140.99.169.0/24 maxlen: 24
                          140.99.170.0/24 maxlen: 24
                          140.99.171.0/24 maxlen: 24
                          140.99.180.0/24 maxlen: 24
                          140.99.181.0/24 maxlen: 24
                          140.99.182.0/24 maxlen: 24
                          140.99.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8f:b5:db:32:79:29:ce:61:3e:33:9b:c8:54:e7:4a:64:bc:9b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb 26 14:49:50 2024 GMT
            Not After : Feb 24 14:54:50 2025 GMT
        Subject: CN=AC91B91E1AAC46BE4B276D9CC54FA2ED2801F08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5a:0a:2f:b7:54:57:ec:c3:69:2a:81:6b:d5:
                    65:69:37:1d:5c:6c:72:f0:5d:80:df:7f:ee:5a:7c:
                    af:96:0e:1d:74:7f:78:d8:5f:b1:da:81:be:a6:a4:
                    76:fb:4b:7f:8d:27:59:8d:b6:2c:af:10:06:c6:36:
                    37:f9:fb:a2:ee:a2:39:d2:b9:7d:1e:82:71:86:77:
                    7f:42:90:bd:2b:75:a6:09:e0:90:67:a8:d4:b1:07:
                    b6:4e:a6:3c:b7:a8:b8:30:65:fb:d5:a8:14:6c:fb:
                    4c:43:a1:5e:c0:af:16:1d:d4:94:32:ae:ce:61:37:
                    67:51:13:ca:3d:71:65:08:89:32:00:92:03:3f:1a:
                    6a:6d:97:f5:71:8c:ff:16:7c:79:63:09:7a:08:e3:
                    3b:4d:ea:dc:14:a4:c6:4b:4a:a7:43:b2:fd:db:a0:
                    92:27:09:ac:75:cc:dc:88:67:c6:88:b5:c7:d8:3a:
                    c5:0d:d6:5b:7a:97:09:c7:08:91:82:99:b2:0f:9f:
                    2b:d1:15:be:66:ef:8f:29:da:a7:19:21:60:e9:16:
                    63:51:67:ef:f7:63:5d:28:24:f7:a8:88:bf:c3:71:
                    b4:c1:e9:9b:39:eb:4d:00:d0:23:6f:f4:ca:fd:af:
                    4a:98:59:60:c9:28:bd:23:90:0b:af:00:75:32:55:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:91:B9:1E:1A:AC:46:BE:4B:27:6D:9C:C5:4F:A2:ED:28:01:F0:8F
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201341.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.81.0/24
                  140.99.86.0/24
                  140.99.140.0/22
                  140.99.148.0-140.99.150.255
                  140.99.152.0-140.99.163.255
                  140.99.165.0-140.99.171.255
                  140.99.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:3f:d6:0c:67:4a:ef:e1:fc:f5:5d:08:a6:da:29:bd:62:ca:
         6b:88:64:71:af:88:61:69:bb:93:69:fc:92:40:06:73:52:b8:
         18:b5:e4:e7:ee:0c:7a:a3:b4:9d:bd:b4:d3:5e:42:10:db:4b:
         74:48:e6:7b:fe:d7:85:f5:d8:0a:fe:33:6d:3a:f8:6b:23:9f:
         2c:cf:01:f3:46:ad:5e:f6:52:7e:6d:3f:53:6e:f2:5f:aa:f7:
         ed:1a:5d:ec:14:f9:fa:e8:01:d2:9c:f1:3d:be:81:7f:96:92:
         d1:ba:b7:b1:65:9e:e6:b7:38:4b:40:9e:c0:0d:e0:7c:86:fd:
         41:b5:44:c4:5c:7e:4d:d8:6a:97:5d:07:10:72:1e:d9:61:9f:
         d9:7f:66:9b:ac:e6:a2:50:1b:0f:13:80:a3:97:27:ad:94:46:
         08:d1:82:6d:3e:06:fa:c2:13:f8:6e:5f:bd:5d:84:fa:e6:7b:
         f7:39:f1:4f:af:a4:54:52:28:1e:e2:02:56:58:17:c1:1d:6e:
         07:ae:fe:73:5f:99:4d:1d:87:f8:b3:08:20:55:a2:a9:81:fd:
         24:0d:71:84:15:56:be:b5:39:6f:95:e3:30:f3:f0:71:d2:11:
         99:ed:dc:d1:54:f1:8f:32:2d:9b:b1:3b:49:a7:a9:1d:f2:58:
         d5:73:fc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:40 2024 by rpki-client on console-fra.rpki-client.org