Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          qneaKojLYPncHEvM5PWLkyjzEdHyI6AWx8RAa2pdeeA=
Subject key identifier:   85:4C:A0:0B:68:07:CB:8E:DE:73:1F:0B:3D:B1:EE:AB:73:74:9C:B1
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       7D5097C204D9BF8741E34E939D8C705791DB6031
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS23470.roa
Signing time:             Tue 27 Feb 2024 10:07:06 +0000
ROA not before:           Tue 27 Feb 2024 10:02:06 +0000
ROA not after:            Tue 25 Feb 2025 10:07:06 +0000
asID:                     23470
IP address blocks:        140.99.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:50:97:c2:04:d9:bf:87:41:e3:4e:93:9d:8c:70:57:91:db:60:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb 27 10:02:06 2024 GMT
            Not After : Feb 25 10:07:06 2025 GMT
        Subject: CN=854CA00B6807CB8EDE731F0B3DB1EEAB73749CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:80:5e:93:b8:ec:6f:4a:ef:a1:9f:b1:db:dd:
                    d1:24:1a:79:d7:d7:1a:ed:ea:50:f3:8b:41:57:f5:
                    40:55:2e:b1:73:a5:fa:3e:1f:1e:7c:44:42:10:84:
                    bb:46:e6:d8:49:2b:8d:e3:bc:56:9b:a8:85:83:80:
                    a9:18:e4:54:2c:5f:9b:25:6e:3a:5a:8c:92:6e:62:
                    6f:57:e4:5b:96:86:62:bf:8c:f0:58:1a:dc:f0:b1:
                    57:fa:96:77:1b:21:55:96:ae:cf:1b:c0:b4:63:c5:
                    a9:48:8d:84:ef:17:06:8a:52:e9:6e:de:e2:06:50:
                    1e:4f:b6:a6:7b:6f:c9:b2:c3:71:9e:ca:9f:e9:12:
                    c2:c6:7f:27:43:4f:6b:0c:29:a2:e1:95:40:7d:c0:
                    91:3d:80:bf:71:33:02:8e:fa:4a:9d:4c:0d:a4:b5:
                    d3:ef:d5:8e:00:ed:ec:80:48:10:59:97:06:47:12:
                    7f:b0:57:58:62:ad:c8:c4:b4:cc:fa:b6:f9:d1:56:
                    8f:af:e8:a6:bb:2d:b4:d3:18:77:67:e7:62:21:c3:
                    22:b6:0e:f8:97:ab:66:38:77:b3:b6:be:92:28:a7:
                    ac:e1:af:4f:d1:b9:5b:c3:85:17:b7:be:98:93:ae:
                    ca:ad:04:21:69:36:75:d1:cc:1d:31:73:15:6e:4b:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4C:A0:0B:68:07:CB:8E:DE:73:1F:0B:3D:B1:EE:AB:73:74:9C:B1
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:38:04:1e:ad:f1:57:f8:12:7c:f4:88:59:80:ac:ff:c3:b1:
         c8:32:68:64:49:97:1f:ec:1c:89:b3:73:b8:6f:40:a0:da:79:
         f6:e3:93:72:e1:2b:87:2d:47:57:1b:3e:4c:49:83:6f:7d:57:
         69:9e:46:d5:c3:f1:4a:db:b9:25:20:d7:b6:09:10:b9:7d:ff:
         2e:36:d8:e5:0c:ed:31:52:e7:8f:f7:19:7b:33:3d:4e:3c:dd:
         4a:2c:00:53:b4:a7:07:6e:ec:2d:55:95:2c:97:4f:4d:0e:36:
         46:05:97:89:85:c2:2f:69:1e:ac:26:65:bf:03:78:3b:85:18:
         14:c5:5d:7e:eb:ca:ed:bc:35:17:a3:63:91:4f:bf:19:db:dc:
         e2:e4:6a:75:b9:13:c2:58:f3:fd:df:1f:df:69:d6:6e:09:32:
         a9:41:eb:bd:50:8c:7c:c8:9b:78:33:5a:7e:55:fa:7f:a9:85:
         e3:f9:4e:96:a2:d5:f2:60:c9:39:73:5c:61:5c:cb:4b:c5:7b:
         91:c1:91:73:28:1b:36:e4:4b:c9:67:35:96:48:20:7a:12:0d:
         c2:b3:0f:6a:ab:a1:6a:8b:cc:aa:74:25:5f:77:6b:ad:ee:18:
         96:16:6e:df:25:f3:3e:95:05:70:c8:a1:03:bf:e3:c9:2e:4b:
         29:1f:51:fc
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUfVCXwgTZv4dB406TnYxwV5HbYDEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwMjI3MTAwMjA2WhcNMjUwMjI1MTAwNzA2
WjAzMTEwLwYDVQQDEyg4NTRDQTAwQjY4MDdDQjhFREU3MzFGMEIzREIxRUVBQjcz
NzQ5Q0IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oBek7jsb0rv
oZ+x293RJBp519ca7epQ84tBV/VAVS6xc6X6Ph8efERCEIS7RubYSSuN47xWm6iF
g4CpGORULF+bJW46WoySbmJvV+RbloZiv4zwWBrc8LFX+pZ3GyFVlq7PG8C0Y8Wp
SI2E7xcGilLpbt7iBlAeT7ame2/JssNxnsqf6RLCxn8nQ09rDCmi4ZVAfcCRPYC/
cTMCjvpKnUwNpLXT79WOAO3sgEgQWZcGRxJ/sFdYYq3IxLTM+rb50VaPr+imuy20
0xh3Z+diIcMitg74l6tmOHeztr6SKKes4a9P0blbw4UXt76Yk67KrQQhaTZ10cwd
MXMVbktEDwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIVMoAtoB8uO3nMfCz2x7qtz
dJyxMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGPfMA0GCSqGSIb3DQEBCwUAA4IB
AQCrOAQerfFX+BJ89IhZgKz/w7HIMmhkSZcf7ByJs3O4b0Cg2nn245Ny4SuHLUdX
Gz5MSYNvfVdpnkbVw/FK27klINe2CRC5ff8uNtjlDO0xUueP9xl7Mz1OPN1KLABT
tKcHbuwtVZUsl09NDjZGBZeJhcIvaR6sJmW/A3g7hRgUxV1+68rtvDUXo2ORT78Z
29zi5Gp1uRPCWPP93x/fadZuCTKpQeu9UIx8yJt4M1p+Vfp/qYXj+U6WotXyYMk5
c1xhXMtLxXuRwZFzKBs25EvJZzWWSCB6Eg3Csw9qq6Fqi8yqdCVfd2ut7hiWFm7f
JfM+lQVwyKEDv+PJLkspH1H8
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:40 2024 by rpki-client on console-ams.rpki-client.org