Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS215304.roa
File:                     AS215304.roa (raw, json)
Hash identifier:          2m+baFTigDfzlQbo796nJJPH+p07se8KqfcWQiEnMdI=
Subject key identifier:   91:6E:BA:9C:52:97:E6:52:B7:79:66:34:AF:78:05:1F:24:7F:C4:33
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       246B7E01739295C06F337BABC6ABADB8F4A2CBB0
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS215304.roa
Signing time:             Sat 12 Apr 2025 00:00:10 +0000
ROA not before:           Fri 11 Apr 2025 23:55:10 +0000
ROA not after:            Sat 11 Apr 2026 00:00:10 +0000
asID:                     215304
IP address blocks:        140.99.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6b:7e:01:73:92:95:c0:6f:33:7b:ab:c6:ab:ad:b8:f4:a2:cb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 11 23:55:10 2025 GMT
            Not After : Apr 11 00:00:10 2026 GMT
        Subject: CN=916EBA9C5297E652B7796634AF78051F247FC433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1b:44:1e:93:be:e1:f0:ea:56:62:b6:4b:dd:
                    46:73:c9:a0:53:91:8d:8e:e5:7e:bf:1e:2b:e9:2a:
                    2e:f5:33:1d:0a:83:97:7b:29:bb:78:78:5e:51:8a:
                    54:a2:2f:4c:7b:ea:c3:d2:6b:3e:0d:32:ee:e4:6d:
                    71:42:d8:d0:3e:62:56:91:ab:01:2a:5d:40:f9:4f:
                    3d:17:a9:26:98:86:98:7e:c3:7a:73:bc:b2:9e:51:
                    9b:ce:da:65:f3:15:0c:89:b2:0b:b1:1b:23:ed:f5:
                    11:21:8a:0a:ff:62:f2:8a:f2:88:93:19:b4:ff:81:
                    6e:55:7d:65:53:fb:e2:b5:ba:fa:86:d3:4c:fb:91:
                    44:23:e7:32:a2:48:f3:af:d0:23:c5:29:32:7c:dd:
                    a5:12:6c:5d:7d:86:55:5c:8c:00:69:ad:f2:4c:9d:
                    a4:04:3e:44:80:a6:4a:9b:f2:4d:bf:f6:dc:ed:5f:
                    18:e0:3c:24:16:ad:59:82:6c:62:3b:80:e3:f4:cf:
                    40:37:ba:79:af:4c:79:50:05:f1:fd:50:12:5b:35:
                    84:02:37:5d:f8:f0:5c:04:9d:ab:ea:99:d7:4c:4b:
                    0e:54:14:97:7d:45:e5:45:c8:5d:08:c4:6c:3d:ce:
                    ff:c2:c3:db:88:c0:87:1d:f1:a3:ed:7b:c2:cf:e0:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6E:BA:9C:52:97:E6:52:B7:79:66:34:AF:78:05:1F:24:7F:C4:33
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS215304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:c2:50:8f:3d:42:23:fc:4e:60:a1:c3:8a:d3:3f:8e:5d:79:
         8b:e6:0a:a4:b2:19:02:1b:f1:67:2b:84:e3:4b:58:88:64:c4:
         16:0a:5a:6b:c5:33:48:6c:7c:c9:b6:17:3e:c4:cf:19:e9:1a:
         3b:b2:bd:6e:8a:cf:bd:90:16:5f:eb:dd:7f:aa:8e:dd:fe:f9:
         45:86:64:ce:06:7e:c7:53:de:ac:de:06:86:0a:70:17:8c:43:
         87:a2:af:78:fc:ff:61:c5:d9:a7:a8:31:01:ae:60:c9:62:7a:
         a6:77:ab:ee:12:eb:97:73:8c:a6:1e:59:fb:c3:f2:fb:a1:43:
         62:d2:54:a4:3b:aa:8a:fa:b6:be:c5:d7:67:85:1e:fb:72:14:
         1d:d6:81:31:d9:0a:21:f3:a2:57:00:84:bc:41:ff:39:97:3b:
         27:76:11:74:00:96:6c:3c:b8:51:75:35:a7:cd:a5:de:4b:c7:
         67:e2:71:b6:e4:c1:f8:e9:6f:5c:ad:32:62:03:da:da:34:2c:
         c8:48:3a:c8:02:c1:98:e8:8e:01:74:4c:0f:27:79:5b:bd:7c:
         74:92:e1:55:e5:f9:82:27:62:b4:4d:05:72:c1:bc:66:49:14:
         31:fb:fe:a4:b0:ad:f0:b5:b0:de:c1:00:3f:83:d1:dc:78:f4:
         eb:2a:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:02:39 2025 by rpki-client