Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          qHzvZaKCubsEUp1yrkzuop+dR6IGzzC8i41ch4Hk98s=
Subject key identifier:   08:5C:67:74:3C:8A:1A:DB:2D:F3:4F:8A:06:92:48:00:47:F1:77:A6
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       3E98A2302BB4581F3EBB855F8F7C739CDEC54498
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397423.roa
Signing time:             Thu 10 Apr 2025 06:15:46 +0000
ROA not before:           Thu 10 Apr 2025 06:10:46 +0000
ROA not after:            Thu 09 Apr 2026 06:15:46 +0000
asID:                     397423
IP address blocks:        140.99.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:98:a2:30:2b:b4:58:1f:3e:bb:85:5f:8f:7c:73:9c:de:c5:44:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 10 06:10:46 2025 GMT
            Not After : Apr  9 06:15:46 2026 GMT
        Subject: CN=085C67743C8A1ADB2DF34F8A0692480047F177A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:33:33:b1:65:71:78:89:cf:ca:05:ad:fe:ca:
                    34:00:f9:b2:5a:2e:0b:79:7d:95:9f:21:cc:2c:73:
                    b1:5a:9d:54:41:2e:7e:7f:30:14:fd:13:50:7e:cd:
                    a8:0c:9a:1c:57:6b:3b:3c:58:5d:90:34:9f:fb:e6:
                    f0:4c:33:90:5c:e6:ca:6f:d5:3f:5e:cb:5a:a7:3b:
                    a4:28:99:7a:fb:aa:35:2a:5c:ef:d4:f4:c8:82:dc:
                    31:70:17:38:95:8c:db:9f:de:95:37:62:e1:86:0e:
                    70:03:9e:3b:61:46:e5:02:c2:00:c1:e2:0d:f2:27:
                    d3:0d:ce:d7:af:29:23:b7:f8:50:f8:17:ad:7c:ab:
                    28:56:e1:53:40:75:d2:5a:a6:7c:46:ba:da:d9:45:
                    06:c6:c9:1e:53:f4:ef:a0:51:2a:4f:09:91:8d:81:
                    d2:7a:64:44:e2:6e:4e:fa:0c:f2:2a:88:19:a8:e2:
                    e6:ff:09:69:85:97:07:88:81:82:e9:17:6a:fe:36:
                    91:6c:9c:d1:12:e3:00:6b:4b:49:12:32:c2:e2:84:
                    2e:95:7d:e7:ac:3e:b7:24:92:42:06:c4:12:8a:de:
                    fb:f2:3d:fb:f7:c0:74:e4:d0:d9:8f:15:de:89:a8:
                    88:7b:07:0d:db:4d:71:ca:e4:34:66:e7:ee:da:92:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5C:67:74:3C:8A:1A:DB:2D:F3:4F:8A:06:92:48:00:47:F1:77:A6
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:4a:21:ac:31:d5:fa:b9:95:dc:f6:a6:63:e6:e3:3e:f0:74:
         eb:c1:ae:08:cf:88:90:8f:d9:d2:ff:02:09:6b:36:9d:1d:94:
         16:77:35:83:05:29:16:52:d6:a4:bc:26:3c:fd:d2:cb:ca:55:
         e4:33:4a:8e:cd:cd:4d:23:69:f4:7d:53:cd:25:a3:2c:ef:d7:
         1d:20:e7:fb:c9:d9:a2:2c:d9:60:4e:79:d6:41:5f:8b:63:cd:
         b7:3b:72:1f:d9:8a:71:16:8b:26:2a:cf:79:ed:7c:56:f1:e1:
         39:57:71:db:1d:44:72:35:37:c4:95:9e:32:4d:df:22:ec:6f:
         d3:a3:27:ab:a8:eb:27:0d:66:cd:9f:64:b3:18:8b:44:38:04:
         30:05:ad:e6:0f:d2:60:64:cb:71:71:71:e3:be:c4:d6:3c:b1:
         bd:4b:da:27:81:4b:d7:c7:0e:13:09:ae:80:b3:d5:cc:ff:72:
         29:aa:a6:2c:6d:67:0d:4f:39:5a:14:5c:ad:09:39:63:0b:08:
         52:0e:09:da:f2:f2:63:1f:73:0d:06:9d:1e:cb:7a:2b:14:43:
         b3:3b:bb:fd:bd:05:18:a7:70:6a:75:0d:00:08:d9:c6:31:90:
         c1:76:05:1e:1f:66:09:40:dd:dc:c7:52:35:ce:35:79:fd:ec:
         38:8f:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:03:37 2025 by rpki-client