Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29119.roa
File:                     AS29119.roa (raw, json)
Hash identifier:          H2DYJAZpKn+TDbjHKNGTeXMT5X7H5n1EzWbLLoaB928=
Subject key identifier:   97:8F:43:2C:38:6E:AA:E0:FC:DA:77:5C:5E:4C:6C:42:D6:AB:33:9F
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       3FB5D077412D1B880C35197948B3BD4ACD51A348
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29119.roa
Signing time:             Wed 30 Aug 2023 14:33:45 +0000
ROA not before:           Wed 30 Aug 2023 14:28:45 +0000
ROA not after:            Wed 28 Aug 2024 14:33:45 +0000
asID:                     29119
IP address blocks:        140.99.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b5:d0:77:41:2d:1b:88:0c:35:19:79:48:b3:bd:4a:cd:51:a3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 30 14:28:45 2023 GMT
            Not After : Aug 28 14:33:45 2024 GMT
        Subject: CN=978F432C386EAAE0FCDA775C5E4C6C42D6AB339F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:26:9d:52:0a:33:95:f3:86:6e:0e:92:94:
                    61:df:41:3d:9d:93:59:33:62:45:41:b0:3e:9c:c2:
                    c6:ff:89:fa:d4:61:ce:4b:f7:c4:a6:83:2c:4c:12:
                    2c:44:d9:f3:1c:34:f1:06:34:22:77:ed:88:c0:6e:
                    1a:f8:2b:56:45:48:32:e8:96:13:71:2a:3d:41:be:
                    4a:17:c1:74:29:d7:8b:06:52:96:6d:2f:c9:e7:3e:
                    c3:90:b2:0a:1f:ac:46:0d:bd:21:73:20:51:d0:16:
                    41:d5:ef:c0:d6:18:9a:1b:70:9b:28:c5:72:23:eb:
                    31:8b:79:7e:a5:0a:00:1b:75:7d:c2:eb:33:a7:1b:
                    98:0c:bf:9b:f1:33:1b:fc:81:04:6a:46:75:42:8c:
                    1e:25:17:0a:0c:e1:e7:ad:be:99:72:49:b8:9a:23:
                    88:8b:44:f7:3c:a8:bb:c4:1c:c7:41:f0:43:83:34:
                    c3:3a:e4:44:d1:30:4c:42:af:78:ea:b4:32:f8:eb:
                    e8:5c:f7:0d:79:ea:d9:e9:f6:67:63:df:a8:4b:be:
                    14:f3:9e:5e:6a:87:63:68:42:e6:6b:3c:4b:5f:5d:
                    22:53:dc:97:ea:58:75:48:d9:a7:ab:b4:a2:8e:34:
                    74:ac:4f:a0:4a:7c:6d:fd:b9:e8:5d:89:3a:9d:e8:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8F:43:2C:38:6E:AA:E0:FC:DA:77:5C:5E:4C:6C:42:D6:AB:33:9F
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29119.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:00:7f:86:3f:7d:41:27:bf:9e:d5:b8:c0:4c:4b:28:bb:
         85:74:ce:ac:a1:b9:30:80:e6:de:4a:c3:6c:99:d9:81:4d:5f:
         92:1d:fa:23:cf:12:73:e2:87:b6:e2:c9:a8:67:83:79:00:5b:
         b8:ab:4d:d3:b4:f0:85:2c:81:0a:c8:68:86:ae:ff:ab:6d:44:
         9f:77:e7:00:5a:ab:50:ad:ef:9b:b2:65:a2:61:e4:38:b7:bf:
         74:e2:91:12:e7:73:69:46:96:e7:b3:d0:5e:82:b3:61:a5:a5:
         57:85:71:17:0d:3f:3a:e7:3d:e1:28:41:01:6d:a5:10:e5:a8:
         fb:21:92:24:d3:4b:eb:54:ba:d4:c4:1c:79:e4:be:5c:30:00:
         48:c1:6a:b1:b8:03:cc:f5:cc:43:a2:f1:8e:8f:56:23:83:84:
         bc:88:8b:f8:73:a4:62:e8:cf:7c:9b:06:37:af:1e:82:0d:a1:
         6d:25:66:34:e4:22:65:11:0b:34:ee:ea:c7:a2:44:86:4a:ed:
         55:61:d8:54:70:20:04:5d:b8:64:32:9d:70:8a:d8:e6:c3:8e:
         56:12:88:21:6f:54:95:73:c1:fa:3f:41:70:11:56:cc:bd:cd:
         e5:37:38:ee:46:6a:04:95:6a:47:88:71:b8:b6:e3:6e:ac:93:
         3c:6d:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:24:12 2024 by rpki-client on console-ams.rpki-client.org