Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214654.roa
File:                     AS214654.roa (raw, json)
Hash identifier:          H6708ZoJhMMOm9Ui8nANyo7NSz9qHPiv60ONsltPJS8=
Subject key identifier:   5F:76:EC:32:03:17:77:95:D3:D3:5A:43:4F:B6:B4:1A:40:2C:63:4B
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       43FF82CD0EA3218931BB4CBA0D832A0995F0F0E9
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214654.roa
Signing time:             Wed 13 Nov 2024 09:08:39 +0000
ROA not before:           Wed 13 Nov 2024 09:03:39 +0000
ROA not after:            Wed 12 Nov 2025 09:08:39 +0000
asID:                     214654
IP address blocks:        140.99.43.0/24 maxlen: 24
                          140.99.45.0/24 maxlen: 24
                          140.99.47.0/24 maxlen: 24
                          140.99.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ff:82:cd:0e:a3:21:89:31:bb:4c:ba:0d:83:2a:09:95:f0:f0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Nov 13 09:03:39 2024 GMT
            Not After : Nov 12 09:08:39 2025 GMT
        Subject: CN=5F76EC3203177795D3D35A434FB6B41A402C634B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:f8:ac:27:31:3e:fe:2d:22:ea:86:c4:23:
                    27:9b:80:b1:07:3e:67:5e:49:28:a7:ed:b5:07:c9:
                    3c:e6:36:1f:3c:15:4f:44:a5:36:e7:b1:f6:c8:fe:
                    ad:81:f3:8e:4e:46:bf:b7:1e:0e:35:46:e7:32:c9:
                    d7:61:26:57:fe:0c:0b:2d:c1:a2:06:6e:58:3b:76:
                    16:a5:dd:78:79:b5:dc:7d:f4:60:2e:da:d4:a9:42:
                    b9:09:99:26:d7:43:69:2c:44:4b:e5:53:08:0b:ba:
                    94:e8:43:42:9f:b5:ce:1a:ca:14:8e:9a:e8:1b:fb:
                    5a:36:c0:0b:7a:31:75:62:19:e0:80:ab:2c:27:7e:
                    06:16:32:b3:a7:7c:48:38:48:c5:23:a3:3f:76:e6:
                    7e:82:ff:44:f9:87:05:6c:38:6f:7e:65:23:97:d7:
                    5f:d4:c4:05:6f:a4:52:91:4e:a8:98:b1:d6:d2:8b:
                    2c:6b:59:5a:c4:6d:86:b6:a0:52:a3:6b:7c:9f:e1:
                    ad:c4:90:be:7c:7f:42:e8:f1:b7:bd:22:3a:21:7c:
                    2a:32:b3:77:bf:0c:f3:6b:76:aa:7e:80:8f:e5:74:
                    37:df:c3:0a:f3:dc:f7:bd:80:92:bd:55:00:45:cc:
                    4b:a0:7c:68:08:a3:19:86:12:b6:9a:25:bc:ea:73:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:76:EC:32:03:17:77:95:D3:D3:5A:43:4F:B6:B4:1A:40:2C:63:4B
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214654.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.43.0/24
                  140.99.45.0/24
                  140.99.47.0-140.99.48.255

    Signature Algorithm: sha256WithRSAEncryption
         28:0f:b7:69:b3:2b:56:dc:32:20:8d:07:de:72:92:bb:00:fd:
         9e:75:aa:3a:79:05:67:33:cb:89:16:25:06:f1:71:48:cc:b0:
         bb:fa:0e:88:24:02:b0:e4:7d:4a:f2:89:21:7d:91:fa:97:3f:
         ac:f6:73:25:33:14:e8:86:5d:40:48:11:03:69:8d:bb:22:13:
         fa:bd:ef:4b:84:c1:b5:d3:29:ca:c7:d9:55:2d:30:b8:5a:7b:
         35:10:c3:16:3d:90:d9:86:02:da:25:a3:ba:a0:f1:ac:d4:f6:
         90:81:df:ca:ef:23:45:62:4d:91:a9:e2:88:87:0d:33:9a:20:
         15:00:a0:d2:9d:aa:21:1b:a3:2a:66:f3:38:8b:72:47:6f:ae:
         e4:16:bb:01:47:14:e4:d6:e8:32:be:44:ce:fc:dc:f9:a6:da:
         26:80:d7:c7:94:0a:77:1e:45:ab:f0:99:7a:50:33:19:9d:6f:
         b1:20:03:0d:9b:d9:f0:54:3c:7a:0b:01:f0:c0:52:76:7b:08:
         86:8f:86:04:ad:7a:13:18:50:7f:ed:21:d1:8c:6d:0e:97:e8:
         69:45:ba:a1:e1:60:fc:e6:d3:0b:cd:21:08:4c:ba:95:c6:4a:
         3d:3e:42:39:48:6a:51:c8:1a:d6:f0:dd:85:74:a8:f8:46:7e:
         26:eb:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:48 2024 by rpki-client on console-fra.rpki-client.org