Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          lI69z89Hqd3tGuVRnbiOOs1oC0Q9Ff9oRb/wD96Uyj4=
Subject key identifier:   F7:2D:C1:51:83:A9:7E:A1:99:6F:63:B6:A5:0B:02:1A:C7:1F:8D:1E
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4309CB946181B80C865AC024965E2C59F54CABB7
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS262287.roa
Signing time:             Thu 27 Jun 2024 12:30:13 +0000
ROA not before:           Thu 27 Jun 2024 12:25:13 +0000
ROA not after:            Thu 26 Jun 2025 12:30:13 +0000
asID:                     262287
IP address blocks:        140.99.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 11:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:09:cb:94:61:81:b8:0c:86:5a:c0:24:96:5e:2c:59:f5:4c:ab:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun 27 12:25:13 2024 GMT
            Not After : Jun 26 12:30:13 2025 GMT
        Subject: CN=F72DC15183A97EA1996F63B6A50B021AC71F8D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:1c:1d:9f:b4:65:d4:ab:bf:e7:47:35:b3:
                    36:5f:83:49:6b:24:ce:99:a7:ae:2d:0b:3b:45:1b:
                    5b:54:a4:eb:1c:0b:a8:0b:26:8a:58:b8:8d:62:a9:
                    f5:61:e1:fe:b3:ee:1b:6d:2f:08:57:3a:45:ad:82:
                    6f:ec:ee:1f:aa:5a:da:0f:0f:97:e9:e9:4e:8e:2e:
                    ac:fa:4d:0a:78:c8:0b:86:8a:2b:2d:fe:0a:11:b1:
                    cc:4c:b6:e0:53:1a:dd:ba:01:19:99:ca:c0:93:9a:
                    15:ac:2b:e5:e6:fe:cc:2d:52:39:7e:36:9a:3a:dd:
                    dc:e5:d6:72:af:5f:be:06:4c:86:af:61:2f:18:77:
                    da:50:a7:22:49:7e:61:91:fe:dd:74:3b:13:1e:e0:
                    90:68:8d:37:73:c1:e8:9e:ad:e4:76:4d:01:02:bc:
                    69:83:3e:02:7a:5d:7d:ee:b6:87:48:3b:f7:01:ad:
                    9b:d6:37:cb:a2:8e:56:48:0c:fd:d2:ef:60:94:cb:
                    78:eb:7e:6d:41:4f:00:b9:0e:2e:d5:c6:80:6e:45:
                    34:96:cf:77:d4:6d:14:d0:e7:3c:a8:d5:67:67:d8:
                    a4:d8:28:06:b7:70:0e:c5:45:96:12:d4:e2:c1:f3:
                    69:16:1b:0a:91:fe:f4:9a:27:24:fd:b4:04:43:34:
                    41:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2D:C1:51:83:A9:7E:A1:99:6F:63:B6:A5:0B:02:1A:C7:1F:8D:1E
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:b6:a9:d3:3a:8b:7b:55:34:77:e4:f9:9e:27:b7:50:b9:
         87:53:ed:8a:f0:55:02:f0:b7:a9:a1:14:88:2b:1a:45:a9:52:
         8d:c9:c0:76:0c:9f:3f:ee:2d:33:7f:f3:59:e0:18:b7:d0:bf:
         c9:ed:a5:39:ce:06:7c:31:9e:93:be:74:ec:7e:9d:50:ab:0a:
         4f:67:a7:fe:68:2d:b8:0a:2a:09:1f:db:4e:78:52:2f:2b:b8:
         ac:96:df:cc:ad:d1:2a:ac:04:0c:c1:27:4b:3c:1a:23:0f:58:
         79:f3:4c:d1:ed:b7:f6:15:b7:59:00:1d:62:c7:58:25:4f:aa:
         49:d4:71:b9:ac:85:69:a1:e4:51:58:2b:93:63:23:92:0f:fc:
         03:35:82:43:2d:56:0b:e6:86:97:48:ff:1a:93:77:72:09:fd:
         55:d1:41:81:e2:5a:cb:e3:f7:c0:1f:33:fa:02:22:46:2b:2a:
         54:22:56:47:ad:1f:07:2b:df:84:b0:df:cc:22:9e:73:c4:8d:
         bf:2b:b4:06:52:a7:0c:7e:5a:e1:45:95:17:65:f3:33:d2:1e:
         75:5b:6d:21:8b:c5:31:a6:45:36:47:c1:f0:26:db:2f:84:a6:
         21:3d:f0:e1:a2:91:d9:07:f8:72:b6:72:68:a1:53:20:ba:7b:
         31:02:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 09:45:03 2024 by rpki-client on console-ams.rpki-client.org