Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29066.roa
File:                     AS29066.roa (raw, json)
Hash identifier:          Lv73YFnpiF4LewTKj6/Hmtqb2Jkqnn9vcSyC4UzShUY=
Subject key identifier:   8D:4E:A4:B8:80:27:54:95:54:0E:D2:4A:1A:0A:FC:D4:FD:EB:55:72
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       7AA080CA65488A161AF2F2550E865F86FFCD97F8
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29066.roa
Signing time:             Sun 28 Apr 2024 03:10:11 +0000
ROA not before:           Sun 28 Apr 2024 03:05:11 +0000
ROA not after:            Sun 27 Apr 2025 03:10:11 +0000
asID:                     29066
IP address blocks:        140.99.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 11:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a0:80:ca:65:48:8a:16:1a:f2:f2:55:0e:86:5f:86:ff:cd:97:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 28 03:05:11 2024 GMT
            Not After : Apr 27 03:10:11 2025 GMT
        Subject: CN=8D4EA4B880275495540ED24A1A0AFCD4FDEB5572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:19:12:24:b7:f3:f3:54:4e:25:06:46:30:
                    57:1a:c1:b3:61:ca:4a:9a:06:a3:69:fb:d8:b5:b7:
                    15:ec:2f:88:05:10:24:51:2b:77:be:95:79:8e:e9:
                    9e:50:83:1a:b5:1e:2b:17:d4:f9:53:eb:6c:6f:b2:
                    2a:9c:a0:e3:ab:9e:20:b6:48:7c:69:b1:90:6d:6e:
                    9a:7e:15:cb:38:07:12:e9:c9:da:7a:cb:c4:d7:87:
                    a7:ec:ab:13:ee:72:77:e1:65:1d:36:c2:9c:3c:f7:
                    12:7c:d0:78:f6:05:02:3d:fb:b6:5d:1c:ec:06:82:
                    0f:b7:da:c7:10:e7:3d:bd:be:73:db:46:b3:e6:2d:
                    ba:d6:ea:18:35:46:bc:86:0b:38:55:14:d4:d6:7d:
                    a9:e3:68:ee:e6:4f:d2:74:d7:76:5f:bd:e5:d0:1b:
                    ce:ba:21:91:39:03:ac:c8:bd:c9:70:2c:ad:6a:42:
                    11:20:6a:3b:3e:4b:1e:3f:1c:02:cd:96:79:1b:4d:
                    34:17:37:b4:c7:a3:72:1a:45:4f:dd:96:87:44:8f:
                    ee:93:88:4f:8d:ec:34:89:9a:fe:79:8b:ce:84:a9:
                    f0:a2:b6:4e:4d:7a:10:62:38:ea:23:1f:37:7e:ff:
                    f4:f4:47:a8:2e:c4:85:f7:d1:5b:ce:71:45:b2:ed:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4E:A4:B8:80:27:54:95:54:0E:D2:4A:1A:0A:FC:D4:FD:EB:55:72
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29066.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:12:32:81:16:01:25:93:47:85:85:6f:8e:67:69:50:88:
         53:32:31:a4:08:b1:29:61:d7:20:1a:be:c9:ea:7d:9a:e3:f3:
         4b:04:ce:db:86:13:f3:68:78:32:de:80:60:55:12:51:8a:ad:
         b3:08:14:23:ef:76:fe:49:eb:0b:06:9b:a8:50:f0:e6:e2:78:
         a9:ce:c9:da:d2:35:26:83:eb:41:56:82:63:e7:39:da:17:b5:
         82:19:a7:41:62:dd:78:7f:6d:64:74:7e:fd:ed:fd:cb:32:a7:
         ea:07:ca:53:18:46:95:91:bf:2b:19:be:26:5e:70:14:97:bd:
         f4:0f:12:11:38:5d:89:60:26:5c:0a:c0:8e:ad:e1:c5:11:ad:
         e2:69:89:65:50:77:a9:9d:f1:36:40:20:2e:ab:24:df:34:f5:
         3a:6a:58:8d:91:3e:d1:c9:0d:66:3a:b9:7c:20:47:84:66:9a:
         52:08:30:29:62:ae:ae:2e:6d:f2:09:94:36:86:6b:da:de:28:
         3c:e2:d8:32:ca:9a:76:d4:6a:a6:32:0b:d5:9c:18:50:d7:69:
         d5:a3:98:d1:66:15:55:41:4d:ae:e8:c5:69:52:1c:ec:63:15:
         6e:1d:0f:2a:bf:d9:82:25:21:71:27:cc:c9:fc:28:7a:9a:4f:
         33:b4:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 09:40:29 2024 by rpki-client on console-fra.rpki-client.org