Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          ck0VqY/O+z3Cm3bcDLEEY9CEKUBqWAN3H/JsB/ENDsI=
Subject key identifier:   D0:A2:41:CA:82:2C:13:69:52:7A:75:59:8D:0A:5E:11:D5:D2:25:7B
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       657190F141F3A2113AC602E19AF5C305EFDE05D4
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa
Signing time:             Mon 29 Jan 2024 17:56:07 +0000
ROA not before:           Mon 29 Jan 2024 17:51:07 +0000
ROA not after:            Mon 27 Jan 2025 17:56:07 +0000
asID:                     396356
IP address blocks:        140.99.164.0/24 maxlen: 24
                          140.99.216.0/24 maxlen: 24
                          140.99.217.0/24 maxlen: 24
                          140.99.218.0/24 maxlen: 24
                          140.99.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:71:90:f1:41:f3:a2:11:3a:c6:02:e1:9a:f5:c3:05:ef:de:05:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jan 29 17:51:07 2024 GMT
            Not After : Jan 27 17:56:07 2025 GMT
        Subject: CN=D0A241CA822C1369527A75598D0A5E11D5D2257B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:ab:6b:a8:d3:c3:68:03:1b:8e:e8:f9:a7:
                    b2:21:76:46:2a:11:6e:7a:d8:00:f7:b2:f3:55:cc:
                    6a:2e:8c:4d:66:ac:6a:13:8f:06:eb:42:b1:36:b1:
                    bb:f4:de:8c:3d:24:a0:aa:d3:13:c9:98:67:f2:9c:
                    58:71:18:15:b8:af:3b:cf:59:ff:fc:d6:ea:69:1b:
                    d6:96:9d:14:10:a5:87:d6:bf:55:9d:f5:72:46:01:
                    3c:a1:9a:09:3c:25:d7:08:a3:dc:f8:09:ec:4e:db:
                    d9:3a:d8:59:02:8a:85:c1:43:37:8c:f2:ee:48:13:
                    80:ed:1c:47:48:2f:83:1e:62:1e:76:a0:88:c9:bb:
                    01:0e:12:18:b5:47:07:a2:27:2b:5a:82:5b:e2:7f:
                    19:af:d3:52:1b:38:fd:a2:6f:11:1a:86:95:60:de:
                    af:16:d1:d0:21:f7:f7:28:ec:89:26:a7:7f:b6:c1:
                    9c:ac:f2:56:00:35:47:c7:d7:09:92:11:f9:cf:58:
                    05:81:c7:0a:e3:cd:ea:91:d9:1b:47:92:15:e5:3e:
                    33:5e:44:fd:2c:c6:c1:3a:87:d2:46:8e:1d:94:2c:
                    e8:6f:2d:31:20:25:0a:52:90:a8:06:82:4f:ab:68:
                    97:8e:22:61:d2:b8:2d:2b:2a:44:b0:6e:11:50:ac:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:41:CA:82:2C:13:69:52:7A:75:59:8D:0A:5E:11:D5:D2:25:7B
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.164.0/24
                  140.99.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:85:43:57:93:9b:cd:c2:a7:70:5e:ee:b4:9c:f3:a2:8d:da:
         89:d4:8a:0c:af:b8:7a:3e:8c:47:a0:38:88:59:e4:58:6d:19:
         6f:73:c9:74:78:83:89:69:98:39:88:10:b1:e3:31:cf:7e:fc:
         83:92:e0:19:83:0d:46:6b:6f:6b:1c:fb:45:29:d0:89:b1:2d:
         4e:7f:02:ef:76:30:4e:a4:5d:b9:c8:a2:f5:dc:24:19:24:3f:
         b0:90:f1:4b:df:2b:cf:6d:87:62:88:84:45:6a:fc:79:2a:6d:
         81:35:63:58:ce:66:29:4a:d4:c7:15:68:c5:79:b4:ad:17:32:
         07:24:03:3c:46:1f:00:a6:de:49:9a:da:78:e4:35:cd:5b:52:
         7e:0e:5c:a1:97:a4:0b:52:93:70:01:5c:13:fe:2c:1a:ed:74:
         f7:09:2f:54:07:d1:3b:c8:88:1a:76:fe:48:92:68:0a:b4:c9:
         40:6a:54:49:bf:82:93:a5:0d:d4:e8:a7:75:64:77:5c:1f:70:
         5c:34:de:78:2b:1b:4d:0e:19:80:e0:8e:84:d1:fb:f7:1c:7e:
         6a:9f:69:37:a3:97:ee:cb:63:d5:48:0d:cb:75:3f:cd:f4:a0:
         e4:7a:94:5f:ed:db:a2:f6:2d:b2:9e:fa:8e:08:fb:cc:90:2b:
         5a:3b:1e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:50:17 2024 by rpki-client on console-fra.rpki-client.org