Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa
File:                     AS397630.roa (raw, json)
Hash identifier:          hoID4Pv9nLRMsIExUjcMG8cZev8yoO+N3a4xbPNLkWo=
Subject key identifier:   93:5C:0E:C9:EF:BF:E9:C7:7E:D3:D5:5E:0E:B9:AA:09:21:0C:49:4F
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       5AEFA274180A5467A26F7873357F4BB5A223627E
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa
Signing time:             Fri 15 Nov 2024 00:00:11 +0000
ROA not before:           Thu 14 Nov 2024 23:55:11 +0000
ROA not after:            Fri 14 Nov 2025 00:00:11 +0000
asID:                     397630
IP address blocks:        140.99.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ef:a2:74:18:0a:54:67:a2:6f:78:73:35:7f:4b:b5:a2:23:62:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Nov 14 23:55:11 2024 GMT
            Not After : Nov 14 00:00:11 2025 GMT
        Subject: CN=935C0EC9EFBFE9C77ED3D55E0EB9AA09210C494F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:08:27:7c:a3:be:a1:86:72:88:e1:aa:be:ac:
                    b6:cf:b1:ea:07:1b:f7:5c:a0:ee:ac:4b:c5:dd:5c:
                    bc:f4:aa:0e:d6:88:00:65:c3:c7:2d:0c:2f:35:cb:
                    bf:a3:8f:27:f4:de:a5:89:27:76:01:3d:e1:b0:99:
                    04:4d:e9:86:9a:5b:cb:2f:a2:1c:4e:17:b0:c3:b0:
                    24:17:33:5f:37:88:0e:fa:4a:58:d1:40:13:32:55:
                    0f:6a:61:37:4e:48:6d:c6:3f:75:7a:25:32:0d:4c:
                    58:e9:b0:ba:12:1e:1d:ac:95:2e:9d:4e:85:e3:9b:
                    86:35:dc:77:82:06:42:17:1f:6d:f4:26:1f:62:bf:
                    f4:47:3d:cf:c0:98:c7:b8:33:3a:1a:8a:1b:f2:4c:
                    7c:17:89:e0:5c:de:5b:c9:7f:44:6c:9f:96:8f:ae:
                    b5:a3:de:e9:d7:dd:39:fd:48:62:8e:e3:3b:f3:59:
                    e5:f5:de:d1:eb:fe:a6:c4:af:14:b1:81:09:e7:62:
                    b3:e2:06:8c:55:58:36:5b:21:f6:53:65:f8:1f:93:
                    b0:2a:9c:fb:fc:68:6c:b3:5c:21:4a:4c:5e:f6:45:
                    fb:b3:d2:7e:26:65:03:ac:7b:e4:95:f5:2d:48:db:
                    b5:7d:cc:b8:ab:59:e2:25:22:f4:f9:2e:27:6e:a8:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5C:0E:C9:EF:BF:E9:C7:7E:D3:D5:5E:0E:B9:AA:09:21:0C:49:4F
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:f9:bf:8c:22:85:98:86:9a:57:8f:9e:1c:8f:3b:87:35:
         8b:f9:eb:ae:27:16:1d:43:b5:00:4c:fb:bf:34:cf:3f:4b:86:
         14:1a:21:a0:bd:2a:85:d7:84:0a:b8:94:0f:77:71:5c:33:09:
         1c:bd:e3:d5:45:8d:a5:e1:b2:be:3c:c3:99:65:63:ee:46:72:
         6c:a6:64:e9:e4:16:64:da:08:89:c9:78:7b:d6:11:9d:fb:0d:
         a4:55:5d:36:c8:63:7f:ae:9a:21:72:31:99:1c:ee:b5:73:80:
         23:95:dd:78:79:9c:02:5a:f3:e7:32:41:bf:d9:50:7a:f3:a9:
         53:52:f4:1e:9b:c1:8e:7b:b6:1e:e7:fc:a1:a0:37:da:1b:84:
         fa:8d:4a:27:f4:cd:d0:dd:24:f2:7a:94:70:c6:97:94:14:8e:
         3f:91:70:95:a5:64:29:d5:05:ea:4e:6c:69:dd:ca:36:d0:04:
         3b:53:08:4b:4c:8b:cd:11:1e:66:6b:0e:b9:07:a9:98:50:46:
         7c:26:4c:e6:a5:69:dc:3d:c5:78:30:15:b5:5c:d9:e1:47:48:
         9e:af:ed:4a:44:e3:a6:2d:ba:2c:1e:29:e2:4e:c3:04:73:ee:
         e3:19:ee:e2:2e:a4:e0:cf:ba:fd:e0:bb:b0:53:f7:08:35:ad:
         ec:38:d3:d4
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUWu+idBgKVGeib3hzNX9LtaIjYn4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQxMTE0MjM1NTExWhcNMjUxMTE0MDAwMDEx
WjAzMTEwLwYDVQQDEyg5MzVDMEVDOUVGQkZFOUM3N0VEM0Q1NUUwRUI5QUEwOTIx
MEM0OTRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ggnfKO+oYZy
iOGqvqy2z7HqBxv3XKDurEvF3Vy89KoO1ogAZcPHLQwvNcu/o48n9N6liSd2AT3h
sJkETemGmlvLL6IcTheww7AkFzNfN4gO+kpY0UATMlUPamE3Tkhtxj91eiUyDUxY
6bC6Eh4drJUunU6F45uGNdx3ggZCFx9t9CYfYr/0Rz3PwJjHuDM6Goob8kx8F4ng
XN5byX9EbJ+Wj661o97p1905/UhijuM781nl9d7R6/6mxK8UsYEJ52Kz4gaMVVg2
WyH2U2X4H5OwKpz7/Ghss1whSkxe9kX7s9J+JmUDrHvklfUtSNu1fcy4q1niJSL0
+S4nbqho3wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJNcDsnvv+nHftPVXg65qgkh
DElPMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzM5NzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIxjczANBgkqhkiG9w0BAQsFAAOC
AQEALTT5v4wihZiGmlePnhyPO4c1i/nrricWHUO1AEz7vzTPP0uGFBohoL0qhdeE
CriUD3dxXDMJHL3j1UWNpeGyvjzDmWVj7kZybKZk6eQWZNoIicl4e9YRnfsNpFVd
Nshjf66aIXIxmRzutXOAI5XdeHmcAlrz5zJBv9lQevOpU1L0HpvBjnu2Huf8oaA3
2huE+o1KJ/TN0N0k8nqUcMaXlBSOP5FwlaVkKdUF6k5sad3KNtAEO1MIS0yLzREe
ZmsOuQepmFBGfCZM5qVp3D3FeDAVtVzZ4UdInq/tSkTjpi26LB4p4k7DBHPu4xnu
4i6k4M+6/eC7sFP3CDWt7DjT1A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:48 2024 by rpki-client on console-fra.rpki-client.org