Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          bUDWmpNxIbQIHJcraoXhySq5AV74NhpxLdFNtyZg1iA=
Subject key identifier:   70:F3:FF:20:80:2A:BD:CA:44:C7:43:0E:0F:CB:48:6A:0C:06:57:AD
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       61D79F429401A45314F21754851045772FD91D67
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa
Signing time:             Sun 24 Sep 2023 12:43:45 +0000
ROA not before:           Sun 24 Sep 2023 12:38:45 +0000
ROA not after:            Sun 22 Sep 2024 12:43:45 +0000
asID:                     212669
IP address blocks:        140.99.7.0/24 maxlen: 24
                          140.99.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 22:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d7:9f:42:94:01:a4:53:14:f2:17:54:85:10:45:77:2f:d9:1d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep 24 12:38:45 2023 GMT
            Not After : Sep 22 12:43:45 2024 GMT
        Subject: CN=70F3FF20802ABDCA44C7430E0FCB486A0C0657AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:8d:d0:39:63:9e:d8:29:38:3f:41:d0:62:
                    1d:d0:5e:19:01:20:e2:99:70:0e:fe:80:18:31:0e:
                    8f:4c:a5:40:36:7d:94:2f:4d:26:66:5b:c4:67:9c:
                    66:1a:75:12:fe:68:b2:c2:5f:66:d1:c5:c6:8f:20:
                    41:21:42:e0:03:43:ef:31:55:52:84:a0:ce:90:2e:
                    36:d6:f7:11:cb:fa:15:8a:71:1b:25:65:22:9b:55:
                    1f:e0:fe:15:d8:20:5f:b2:10:f3:3a:05:4d:cf:f2:
                    bb:31:07:37:39:48:25:82:82:8f:ab:d4:67:e5:98:
                    53:d4:de:82:df:4e:db:8a:62:d5:7b:12:06:1f:14:
                    5c:10:fc:f6:87:24:16:78:53:d8:ae:40:84:e4:31:
                    ef:bc:5c:ed:db:9b:f7:3f:6d:18:28:04:69:bf:41:
                    6b:e6:dc:ed:0d:16:e6:7b:39:51:ff:ba:ba:82:a3:
                    34:c0:cf:b6:44:45:b0:39:7d:f7:98:75:3a:df:60:
                    f8:53:e3:3d:08:4b:1d:bd:2c:4a:67:94:8a:0a:cc:
                    31:c3:44:f4:bb:ac:39:0c:f7:6f:7a:6d:9a:94:0c:
                    76:e0:91:50:b2:27:52:f0:df:ab:f1:fe:96:83:e9:
                    fd:7a:31:b6:d5:d9:5e:f6:46:b0:e6:d0:78:7e:fe:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F3:FF:20:80:2A:BD:CA:44:C7:43:0E:0F:CB:48:6A:0C:06:57:AD
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.7.0/24
                  140.99.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:7c:6d:3b:30:90:56:cd:19:ed:d3:37:bf:eb:c6:62:6f:2d:
         d7:4d:6c:30:a8:ed:94:3e:86:86:c2:29:c9:90:3c:0c:f9:dc:
         c4:99:60:b2:07:99:cf:5d:38:d9:72:a2:00:50:35:d0:c8:0b:
         6d:92:b8:a5:55:1e:9e:70:9e:55:cc:e6:85:43:81:c6:13:95:
         5d:67:7f:03:f3:ab:f3:da:3c:10:04:d8:7b:d1:cf:d9:07:da:
         32:76:e5:ac:15:84:f7:7d:54:92:64:47:6d:c2:f7:4e:62:d2:
         6c:b1:1e:6e:c1:34:05:39:88:9e:2a:97:36:7e:d2:e4:df:e6:
         84:99:ad:71:f5:97:5b:cc:04:0d:1b:b0:0f:31:ff:9e:de:c3:
         e1:64:2d:db:ea:95:1b:d9:66:83:2e:c1:81:7a:0d:1e:f3:70:
         a2:85:90:19:ac:66:aa:dc:29:32:3d:7c:b5:2d:39:5c:e7:04:
         a9:e0:b0:1f:b3:fc:3c:52:73:ee:3b:54:44:7d:0e:6d:23:93:
         5d:a8:cf:16:d3:fa:62:e4:ac:0f:b8:e6:82:c6:37:88:d2:83:
         2c:2b:bf:ef:90:5a:c5:fd:0b:fc:59:7b:ce:34:06:ff:e4:3d:
         8d:d7:b3:3f:65:71:4f:8e:95:89:38:02:05:a4:4a:92:5b:bd:
         bd:ff:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:29:39 2024 by rpki-client on console-ams.rpki-client.org