Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS2914.roa
File:                     AS2914.roa (raw, json)
Hash identifier:          McptG59MdR8iUFTi6l7T3f+ij7ae08HC/QeI06df1sg=
Subject key identifier:   9A:FC:B1:56:AF:11:C4:F2:1E:E9:FD:F7:56:57:8D:EB:0A:D9:26:68
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       574F5F7410C6394FE81F2406C6E003BF9802CDDB
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS2914.roa
Signing time:             Tue 27 Dec 2022 07:30:06 +0000
ROA not before:           Tue 27 Dec 2022 07:25:06 +0000
ROA not after:            Tue 26 Dec 2023 07:30:06 +0000
asID:                     2914
IP address blocks:        140.99.60.0/24 maxlen: 24
                          140.99.62.0/24 maxlen: 24
                          140.99.64.0/24 maxlen: 24
                          140.99.65.0/24 maxlen: 24
                          140.99.67.0/24 maxlen: 24
                          140.99.68.0/24 maxlen: 24
                          140.99.69.0/24 maxlen: 24
                          140.99.72.0/24 maxlen: 24
                          140.99.74.0/24 maxlen: 24
                          140.99.76.0/24 maxlen: 24
                          140.99.78.0/24 maxlen: 24
                          140.99.80.0/24 maxlen: 24
                          140.99.82.0/24 maxlen: 24
                          140.99.83.0/24 maxlen: 24
                          140.99.89.0/24 maxlen: 24
                          140.99.90.0/24 maxlen: 24
                          140.99.93.0/24 maxlen: 24
                          140.99.101.0/24 maxlen: 24
                          140.99.103.0/24 maxlen: 24
                          140.99.105.0/24 maxlen: 24
                          140.99.106.0/24 maxlen: 24
                          140.99.107.0/24 maxlen: 24
                          140.99.108.0/24 maxlen: 24
                          140.99.109.0/24 maxlen: 24
                          140.99.110.0/24 maxlen: 24
                          140.99.111.0/24 maxlen: 24
                          140.99.113.0/24 maxlen: 24
                          140.99.114.0/24 maxlen: 24
                          140.99.115.0/24 maxlen: 24
                          140.99.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 12:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4f:5f:74:10:c6:39:4f:e8:1f:24:06:c6:e0:03:bf:98:02:cd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Dec 27 07:25:06 2022 GMT
            Not After : Dec 26 07:30:06 2023 GMT
        Subject: CN=9AFCB156AF11C4F21EE9FDF756578DEB0AD92668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:71:8d:2a:36:65:f4:7c:99:ce:20:0a:02:35:
                    85:f8:f0:e7:b2:a2:42:71:10:1b:7b:12:20:61:db:
                    33:74:2a:dd:65:7e:ff:02:89:00:c8:40:19:42:f6:
                    3c:d4:26:2e:3d:5d:a0:52:75:31:c7:c5:d2:ab:15:
                    d9:6c:ba:c8:43:d0:60:39:9f:a9:5a:41:63:78:7d:
                    b7:3e:e2:61:93:35:23:1b:9b:0d:1c:92:9e:20:5a:
                    6e:fb:10:53:4f:b8:2d:bf:e9:08:8f:35:4b:20:cf:
                    db:95:1e:49:f1:e2:e2:bf:c4:4f:2a:2f:5c:33:41:
                    9e:87:4a:1c:51:71:7f:d6:3d:59:a7:d7:b3:4f:94:
                    f9:bc:a0:ce:c5:4d:25:5e:ee:1c:7c:a1:97:e9:76:
                    23:fd:23:60:0a:a2:40:6e:44:7b:9b:9d:39:76:05:
                    ca:55:cb:86:b1:55:c7:e0:22:62:df:8f:3b:ed:7b:
                    a2:c0:ba:c2:87:4a:fe:2b:29:f5:86:76:ee:6e:2b:
                    59:95:91:75:55:fe:48:f1:e4:d6:ba:03:da:99:f8:
                    02:31:47:a3:c7:ca:f9:40:27:a0:86:4c:fb:97:76:
                    7a:e5:e8:1b:06:74:e7:eb:85:14:91:46:3c:75:60:
                    8e:07:c0:58:be:ff:23:7c:1e:02:95:1f:a5:bd:ae:
                    f1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:FC:B1:56:AF:11:C4:F2:1E:E9:FD:F7:56:57:8D:EB:0A:D9:26:68
            X509v3 Authority Key Identifier: 
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS2914.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.60.0/24
                  140.99.62.0/24
                  140.99.64.0/23
                  140.99.67.0-140.99.69.255
                  140.99.72.0/24
                  140.99.74.0/24
                  140.99.76.0/24
                  140.99.78.0/24
                  140.99.80.0/24
                  140.99.82.0/23
                  140.99.89.0-140.99.90.255
                  140.99.93.0/24
                  140.99.101.0/24
                  140.99.103.0/24
                  140.99.105.0-140.99.111.255
                  140.99.113.0-140.99.115.255
                  140.99.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:26:72:cb:6d:af:e4:87:1c:73:db:6e:4a:4b:bd:e0:65:d4:
         08:18:4c:ee:f5:42:c6:c0:de:10:95:f1:e1:22:01:08:18:36:
         f5:2b:e4:fa:8c:a4:9b:ce:97:f1:35:a7:08:23:87:31:7f:d9:
         f5:35:62:f7:6b:1b:16:9a:bf:fa:24:38:20:df:37:cc:03:97:
         a3:d9:1f:8a:63:2b:99:bb:16:8b:5c:c7:fb:74:07:8f:a4:94:
         0a:db:ba:bb:52:84:c7:7f:01:5e:cf:fe:f5:9c:af:5b:27:5b:
         34:75:b3:83:2e:2d:f3:7d:9c:3b:54:03:dd:06:21:57:bf:63:
         fb:82:98:d6:49:ea:06:38:9d:84:43:98:4a:d2:78:1b:57:a1:
         d3:de:8d:17:e6:cd:0a:d4:82:ff:11:0e:e4:f3:ac:48:45:09:
         0e:1d:bc:46:5d:76:8c:41:e1:64:0e:25:81:ba:0b:05:51:57:
         f9:0e:c0:b3:d8:44:ad:ba:84:f2:48:d9:9d:b3:65:ed:a0:9a:
         95:7c:dd:8c:42:07:a8:b4:16:a1:17:72:ed:b0:ac:ba:08:4a:
         d2:74:03:94:ae:45:7e:2d:c6:7b:dc:87:34:1b:88:e8:e6:fa:
         75:78:59:f6:bb:f6:0b:1c:65:d0:16:dd:c8:45:2a:10:76:10:
         85:33:c3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:52:12 2023 by rpki-client on console-fra.rpki-client.org