Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS398355.roa
File:                     AS398355.roa (raw, json)
Hash identifier:          w9KNYcoq1aB2z35QCSoOco0gSRPWfcMwjDmRnnYy/PQ=
Subject key identifier:   C4:A7:75:83:27:FD:E2:0F:88:12:47:9E:2B:F8:30:8D:8D:33:C1:FA
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       521480DB4145B83DA9F84CF141AAA1335221D8FB
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS398355.roa
Signing time:             Fri 09 Feb 2024 15:45:43 +0000
ROA not before:           Fri 09 Feb 2024 15:40:43 +0000
ROA not after:            Fri 07 Feb 2025 15:45:43 +0000
asID:                     398355
IP address blocks:        140.99.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:14:80:db:41:45:b8:3d:a9:f8:4c:f1:41:aa:a1:33:52:21:d8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb  9 15:40:43 2024 GMT
            Not After : Feb  7 15:45:43 2025 GMT
        Subject: CN=C4A7758327FDE20F8812479E2BF8308D8D33C1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:4c:0e:73:f5:53:ad:c6:2d:c2:0b:4f:dc:
                    7f:e5:40:1c:94:a7:5b:7f:55:ce:31:a3:1f:85:07:
                    c9:20:34:81:da:d5:2d:a6:c9:93:32:5a:51:41:2f:
                    47:8a:b9:51:b2:82:be:ec:b5:4b:f1:a9:c4:b4:51:
                    b2:ac:75:5a:06:fb:35:3a:41:61:e9:15:d4:93:93:
                    4c:e2:3b:da:35:08:69:1a:89:ec:86:74:31:b6:86:
                    37:90:db:53:81:18:8a:f3:e1:77:a5:0e:ae:24:fe:
                    3d:4d:42:c7:27:59:e6:1c:3c:5e:64:d8:11:fd:32:
                    5b:bb:41:f0:81:13:9b:2f:0d:40:8d:8f:62:f2:2f:
                    6c:64:4f:3a:c4:55:77:58:f6:0b:09:80:96:9e:2b:
                    1b:e2:9c:2e:9a:9e:fe:e4:e5:2b:09:32:78:a5:65:
                    1b:c0:81:8b:95:3c:52:bf:c5:09:1a:b0:e7:19:03:
                    28:42:e5:58:3b:c4:68:ba:35:4f:50:ff:8c:67:59:
                    67:00:66:57:dc:6f:b1:0d:da:c0:aa:cd:29:98:ed:
                    a6:ff:11:81:ae:26:2f:9f:e4:10:62:0c:34:e0:7f:
                    3b:8a:b2:9d:ee:49:3b:a5:fd:bd:9d:03:51:30:36:
                    a0:7f:ee:d6:f3:c6:ee:db:ad:d1:06:ac:6d:a9:b9:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A7:75:83:27:FD:E2:0F:88:12:47:9E:2B:F8:30:8D:8D:33:C1:FA
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS398355.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:a5:da:f7:c4:34:da:48:96:c9:6c:0c:59:b3:d5:8d:9c:1a:
         e3:e1:90:a0:d5:62:f4:80:6b:b5:69:97:c8:fd:f1:af:31:0c:
         8c:0d:07:c6:25:2b:3c:a2:f2:6c:42:72:26:76:a8:a3:f4:ea:
         39:6b:df:ad:bc:4b:73:18:59:df:3c:bd:a8:ae:db:e4:e9:40:
         06:cc:fa:c4:f6:56:19:0a:4e:5b:cd:d2:cc:d0:01:da:26:13:
         7b:57:99:eb:f0:14:25:48:20:4d:4b:8c:f0:a1:1c:07:0e:d3:
         d2:b6:b5:60:45:32:83:b7:65:d6:82:a4:96:de:55:4d:0d:4b:
         42:6a:16:fc:9c:80:60:7c:dc:b1:f7:c3:80:1c:cf:32:c4:d8:
         a9:27:ab:66:41:8b:74:25:dc:49:8d:97:1c:d6:81:b3:d1:ac:
         8e:f5:15:5d:3e:42:5d:2c:38:00:56:e2:44:6d:83:ed:68:1d:
         25:37:db:41:95:6a:d1:0f:28:ef:a7:fd:f0:79:c5:fc:a6:8e:
         99:21:3c:26:ed:0d:de:42:3c:3b:c4:bf:a0:a1:ac:b0:82:3a:
         94:7f:ff:8c:9c:21:20:b1:ab:5c:fe:03:4b:17:91:eb:fe:f1:
         be:b9:4b:99:08:6e:ea:a2:c4:50:1e:cf:0b:73:30:f3:4d:93:
         4a:85:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:37:20 2024 by rpki-client on console-ams.rpki-client.org