Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          s9UsgFhHN+QcGT4/duMGKLc0AwVS89TaVVGScVc6DVI=
Subject key identifier:   AC:78:6B:43:FA:8B:02:48:AC:E4:F0:62:49:03:3B:34:24:71:CF:75
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       5DCB885BD92BBCBFAB63EEFC5B301CECBD2FEA1B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33696.roa
Signing time:             Tue 27 Sep 2022 19:58:08 +0000
ROA not before:           Tue 27 Sep 2022 19:53:08 +0000
ROA not after:            Tue 26 Sep 2023 19:58:08 +0000
asID:                     33696
IP address blocks:        140.99.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 12:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cb:88:5b:d9:2b:bc:bf:ab:63:ee:fc:5b:30:1c:ec:bd:2f:ea:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep 27 19:53:08 2022 GMT
            Not After : Sep 26 19:58:08 2023 GMT
        Subject: CN=AC786B43FA8B0248ACE4F06249033B342471CF75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:9f:06:d2:ad:4f:23:ea:64:b9:19:01:37:
                    c7:f5:7a:b5:55:4c:e2:d4:0e:44:38:7d:b1:b5:94:
                    85:dc:61:dd:5e:42:73:a1:07:46:af:95:9c:bd:e9:
                    ef:6a:ec:78:3d:28:14:d6:a0:ce:14:a5:a5:5a:3c:
                    0a:35:49:19:e7:e6:2c:84:48:68:49:c7:5e:5e:76:
                    ba:22:54:46:88:cc:dc:67:0c:38:4b:b9:0d:14:70:
                    68:24:d2:9d:fb:04:0b:36:41:60:76:ec:63:48:25:
                    ee:83:08:73:02:46:fc:90:f1:e1:2b:62:de:39:26:
                    b5:95:1a:bf:14:c4:22:1f:b0:9c:bf:d7:b4:e5:bc:
                    ff:33:e7:e7:38:63:6c:ec:26:24:ba:22:49:27:95:
                    b5:c6:1d:61:52:83:5d:d4:6d:51:ce:c8:73:9b:d7:
                    a0:d8:93:4f:78:6d:14:09:d1:22:74:b3:d9:74:7f:
                    a3:e8:b8:28:a8:7d:a3:fe:f8:17:a3:86:7a:9d:22:
                    d8:de:e5:57:e6:9b:ea:e1:c4:1e:b3:6c:61:37:63:
                    45:fc:c3:fe:20:f7:16:44:3b:0f:e6:69:85:39:2f:
                    65:66:90:a3:d5:6f:d7:c9:fa:7a:42:02:1c:f6:98:
                    41:94:04:0c:bc:20:8a:78:3c:1f:f1:26:2b:4e:ca:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AC:78:6B:43:FA:8B:02:48:AC:E4:F0:62:49:03:3B:34:24:71:CF:75
            X509v3 Authority Key Identifier: 
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:84:bf:a2:14:57:8d:90:e2:01:0f:29:da:80:7d:a3:88:35:
         87:13:a1:69:ba:f2:85:58:1e:91:6a:d5:f0:5e:26:87:08:ee:
         42:e0:78:46:2a:8f:be:4e:fc:28:ad:b0:0b:63:4e:74:b5:d9:
         c5:5d:50:f1:4f:2d:58:6e:74:07:87:e4:6d:38:e5:1b:b9:a5:
         d1:47:84:b4:8d:0c:12:24:cf:66:74:9e:ee:99:6f:22:db:9e:
         10:c8:97:2d:d0:97:7f:e5:d2:5f:31:40:12:99:16:67:5c:3b:
         d8:2f:ba:0a:b1:f1:53:6e:ba:74:6d:13:c2:a7:a2:ec:59:30:
         ab:5f:cc:33:31:92:b3:79:ec:63:e5:47:a5:d3:fc:dc:ac:f0:
         7c:03:49:3c:bf:c0:ae:54:80:a0:ab:c0:9e:30:7a:b1:5b:29:
         00:f6:cc:c8:e4:c0:93:aa:cc:45:57:90:ec:c6:03:1e:6f:e2:
         20:42:94:b1:6e:66:c9:70:b4:f1:ef:7c:55:e2:1d:18:e9:48:
         76:21:77:6d:0f:78:bc:a3:24:99:05:6e:59:d6:5d:0c:99:3d:
         35:b2:1d:75:38:be:b7:c0:29:b4:36:5e:b1:0a:dd:97:30:10:
         30:7b:3e:1e:d3:85:1e:4f:7c:f9:87:35:6b:ee:af:d8:82:af:
         42:05:31:ab
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUXcuIW9krvL+rY+78WzAc7L0v6hswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjIwOTI3MTk1MzA4WhcNMjMwOTI2MTk1ODA4
WjAzMTEwLwYDVQQDEyhBQzc4NkI0M0ZBOEIwMjQ4QUNFNEYwNjI0OTAzM0IzNDI0
NzFDRjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTCfBtKtTyPq
ZLkZATfH9Xq1VUzi1A5EOH2xtZSF3GHdXkJzoQdGr5Wcvenvaux4PSgU1qDOFKWl
WjwKNUkZ5+YshEhoScdeXna6IlRGiMzcZww4S7kNFHBoJNKd+wQLNkFgduxjSCXu
gwhzAkb8kPHhK2LeOSa1lRq/FMQiH7Ccv9e05bz/M+fnOGNs7CYkuiJJJ5W1xh1h
UoNd1G1Rzshzm9eg2JNPeG0UCdEidLPZdH+j6LgoqH2j/vgXo4Z6nSLY3uVX5pvq
4cQes2xhN2NF/MP+IPcWRDsP5mmFOS9lZpCj1W/Xyfp6QgIc9phBlAQMvCCKeDwf
8SYrTsqLYwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKx4a0P6iwJIrOTwYkkDOzQk
cc91MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzMzNjk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGMjMA0GCSqGSIb3DQEBCwUAA4IB
AQCshL+iFFeNkOIBDynagH2jiDWHE6FpuvKFWB6RatXwXiaHCO5C4HhGKo++Tvwo
rbALY050tdnFXVDxTy1YbnQHh+RtOOUbuaXRR4S0jQwSJM9mdJ7umW8i254QyJct
0Jd/5dJfMUASmRZnXDvYL7oKsfFTbrp0bRPCp6LsWTCrX8wzMZKzeexj5Uel0/zc
rPB8A0k8v8CuVICgq8CeMHqxWykA9szI5MCTqsxFV5DsxgMeb+IgQpSxbmbJcLTx
73xV4h0Y6Uh2IXdtD3i8oySZBW5Z1l0MmT01sh11OL63wCm0Nl6xCt2XMBAwez4e
04UeT3z5hzVr7q/Ygq9CBTGr
-----END CERTIFICATE-----
Generated at Wed Mar 15 11:42:38 2023 by rpki-client on console-ams.rpki-client.org