Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa
File:                     AS397630.roa (raw, json)
Hash identifier:          8Be7RnFMJU+My6YHFl14Iw+bJJlYiviVRAG3ldQq6kE=
Subject key identifier:   DB:1B:BA:C1:F8:99:58:CE:8F:43:EC:2A:45:55:37:FD:29:ED:5B:B6
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       48BA8311F1469CFE953256DFF101B1075D2C1447
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa
Signing time:             Fri 15 Mar 2024 16:43:55 +0000
ROA not before:           Fri 15 Mar 2024 16:38:55 +0000
ROA not after:            Fri 14 Mar 2025 16:43:55 +0000
asID:                     397630
IP address blocks:        140.99.115.0/24 maxlen: 24
                          140.99.127.0/24 maxlen: 24
                          140.99.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ba:83:11:f1:46:9c:fe:95:32:56:df:f1:01:b1:07:5d:2c:14:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar 15 16:38:55 2024 GMT
            Not After : Mar 14 16:43:55 2025 GMT
        Subject: CN=DB1BBAC1F89958CE8F43EC2A455537FD29ED5BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:14:16:ad:f5:a0:26:de:88:c6:18:b2:75:
                    09:dc:da:ee:d0:24:eb:3b:f5:46:0b:c2:09:7f:e3:
                    f9:0b:f9:10:41:2b:97:71:78:10:d1:43:ea:91:64:
                    9a:a6:38:1e:e1:4e:6c:15:d4:7e:48:f7:9a:d9:21:
                    fb:23:94:68:61:c1:f1:5d:57:af:e9:ea:76:96:60:
                    8f:94:55:40:bc:1f:51:7a:6c:42:63:80:1e:f8:d5:
                    8d:ac:02:8f:f2:a8:75:be:66:9b:e5:6c:f4:76:35:
                    18:50:5d:ce:e6:1c:99:c3:15:93:7f:c0:d6:e1:0b:
                    e4:4b:b5:e0:73:4a:d3:28:fd:50:d4:e1:b8:71:ec:
                    29:b8:7b:83:e4:aa:1f:24:03:bd:19:c8:5d:5a:82:
                    a3:b9:56:8d:9f:d5:6a:54:bb:37:45:13:ba:c9:71:
                    8e:ac:18:50:41:d3:3f:68:88:82:6f:be:5d:ff:b2:
                    f3:56:44:23:99:d2:5e:b8:18:70:a4:bc:96:50:cc:
                    64:2a:63:b3:89:63:7e:7c:10:5b:3d:a1:d9:6b:30:
                    99:a2:f5:7b:c5:92:5f:4a:33:8c:ac:85:a5:78:01:
                    07:a0:71:86:33:d2:98:33:69:79:76:09:a5:c9:ca:
                    14:42:f3:36:6c:41:85:54:9f:8f:7b:f6:e6:f6:39:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1B:BA:C1:F8:99:58:CE:8F:43:EC:2A:45:55:37:FD:29:ED:5B:B6
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.115.0/24
                  140.99.127.0/24
                  140.99.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:82:4f:8c:42:97:a4:5d:7c:c3:d5:6b:e9:2d:e8:8a:cb:
         af:f5:b7:4b:87:ff:76:0e:f2:fb:be:b8:a9:90:f7:4c:1c:9d:
         6d:77:75:cf:db:31:bb:45:2f:cc:98:f6:91:4e:26:1f:88:c8:
         3a:78:47:1e:71:d4:a3:3d:61:a7:ba:27:21:7e:91:69:3d:bd:
         bf:78:67:0e:c3:da:8d:29:c6:96:db:56:2f:4e:cc:a2:d1:ce:
         53:6a:89:5e:b5:53:2e:c3:6d:a6:73:86:ef:b7:14:c4:0a:89:
         d2:e9:a0:c6:77:45:7a:67:d0:e5:33:44:19:bc:1d:e6:76:b3:
         33:65:d0:65:3c:89:35:9d:ba:46:e1:1d:fb:0c:f7:58:5f:17:
         36:82:63:e9:0a:42:83:f4:1d:f5:a5:4b:0a:4c:c6:5c:14:5e:
         91:4f:f8:a0:e8:90:03:50:b9:d7:73:83:aa:2a:60:5a:b6:41:
         27:aa:d7:81:0d:db:d0:fb:67:26:ac:f0:a9:fc:c0:f3:8b:d4:
         fb:61:5c:28:1c:93:f0:89:29:af:31:fe:15:93:28:8f:4d:a6:
         43:6c:a7:a7:f3:5e:38:93:2f:93:fd:81:ea:70:4b:0d:e9:c5:
         02:09:ec:28:09:d2:cc:be:23:f4:76:23:0f:5d:88:13:a3:8a:
         30:c9:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:55:37 2024 by rpki-client on console-ams.rpki-client.org