Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS395839.roa
File:                     AS395839.roa (raw, json)
Hash identifier:          9xZXZs+P5w14rF0Nj1ZKZM/WTsMf3a3MtMPsML35h5Y=
Subject key identifier:   59:A8:BE:3C:70:6F:AE:8C:02:5E:13:D2:DD:AE:C7:AB:4C:A1:C0:98
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       030A0B44101B9731CB5B1CE8C6B6A85C71BB24DA
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS395839.roa
Signing time:             Sun 17 Mar 2024 01:22:05 +0000
ROA not before:           Sun 17 Mar 2024 01:17:05 +0000
ROA not after:            Sun 16 Mar 2025 01:22:05 +0000
asID:                     395839
IP address blocks:        140.99.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0a:0b:44:10:1b:97:31:cb:5b:1c:e8:c6:b6:a8:5c:71:bb:24:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar 17 01:17:05 2024 GMT
            Not After : Mar 16 01:22:05 2025 GMT
        Subject: CN=59A8BE3C706FAE8C025E13D2DDAEC7AB4CA1C098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:92:50:2a:7a:dc:c2:5e:22:33:a7:9b:2a:
                    37:8a:d8:a3:8b:fb:f5:4b:d8:e8:02:70:f6:c1:17:
                    64:82:2f:d6:96:4d:02:41:90:58:cf:9e:c0:72:e8:
                    e7:2e:8b:27:27:31:aa:8a:fe:75:14:29:b0:65:a6:
                    64:63:30:1c:d2:51:9a:55:60:c4:c1:13:87:65:c8:
                    40:38:16:50:2d:ef:86:78:36:6f:66:ae:d3:33:67:
                    16:96:30:fb:48:f8:9c:49:f6:52:4d:a8:e5:3b:73:
                    9a:7b:51:17:49:31:72:b2:49:4a:6a:89:36:c2:ee:
                    c7:04:9f:8b:a8:40:d6:31:69:c7:f8:b4:88:c6:0a:
                    22:48:73:c8:f1:9b:94:47:74:73:9c:ba:1c:1c:bd:
                    63:23:5c:27:66:77:89:55:79:54:34:8e:44:a8:ce:
                    d8:f3:9f:30:12:04:b8:23:22:42:71:36:7d:d5:da:
                    40:9e:a2:19:89:db:db:dc:7a:08:c3:2c:ae:5b:36:
                    00:b2:58:26:7e:6f:e3:0d:f0:b2:76:0a:81:b9:65:
                    25:76:c5:6f:fd:60:a4:1e:97:ea:05:9b:f1:d4:2f:
                    3a:a6:1d:c4:38:5b:d9:2b:c7:d0:24:5a:ed:72:f3:
                    3a:dd:d7:19:c0:85:4e:f3:a7:91:9a:fb:7c:df:1f:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:BE:3C:70:6F:AE:8C:02:5E:13:D2:DD:AE:C7:AB:4C:A1:C0:98
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS395839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:94:0b:4a:b0:ab:dd:02:0e:4f:e5:c5:3d:d9:f1:af:78:d1:
         57:54:2d:46:90:39:09:23:af:6d:58:78:a0:8c:6b:f8:32:71:
         b1:bc:f6:7f:89:d6:b0:22:63:fb:03:88:d3:4d:e0:37:e5:9f:
         f1:90:f9:9f:57:c4:02:2a:83:2d:66:0c:da:a0:23:ee:6e:9e:
         c1:ff:f5:c9:d9:66:51:72:3b:bc:63:96:99:57:04:be:52:c3:
         8f:d0:ed:aa:7e:b9:1c:bd:9a:2d:93:8c:c0:d0:a5:9d:20:ad:
         e9:1a:63:9f:81:9c:35:df:fa:8c:c6:87:12:0c:8c:f7:22:42:
         8d:a7:02:2a:c6:c7:3b:d9:4b:91:46:31:ab:76:54:5f:f7:9b:
         e4:bc:2a:66:fd:22:0b:58:9d:f6:3d:f4:64:12:94:a6:f6:8b:
         c5:1f:39:43:f7:8b:3b:ca:77:ae:6e:9f:12:fd:c8:07:4b:9a:
         42:f2:cd:d5:0e:40:29:89:2a:c2:64:eb:6a:05:22:45:5c:9e:
         54:dc:51:3e:25:ca:a6:ef:9b:93:88:52:a9:48:35:95:17:c6:
         50:55:ac:49:6b:54:4a:75:fc:2f:07:3e:bb:34:83:23:30:15:
         b7:fd:f3:44:d7:fd:16:f7:1d:db:65:58:b5:8b:d5:cf:a9:c2:
         bb:a2:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:50:17 2024 by rpki-client on console-fra.rpki-client.org