Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa
File:                     AS399519.roa (raw, json)
Hash identifier:          8aRDZ8StXsBczNCDheW5WX/WDiTeZHExr8lLYGDctf0=
Subject key identifier:   27:DC:35:25:21:FC:79:B4:00:EF:40:81:95:B0:76:18:E9:44:58:F1
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       260DDFD681AAAC5ABF209CA5228DE37DF423DBA2
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa
Signing time:             Fri 09 Feb 2024 12:50:34 +0000
ROA not before:           Fri 09 Feb 2024 12:45:34 +0000
ROA not after:            Fri 07 Feb 2025 12:50:34 +0000
asID:                     399519
IP address blocks:        140.99.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0d:df:d6:81:aa:ac:5a:bf:20:9c:a5:22:8d:e3:7d:f4:23:db:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb  9 12:45:34 2024 GMT
            Not After : Feb  7 12:50:34 2025 GMT
        Subject: CN=27DC352521FC79B400EF408195B07618E94458F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:d1:1c:96:1b:bd:12:5e:5e:e7:0a:e4:59:
                    c8:25:58:cf:c9:4a:0a:d0:b3:c3:9e:7d:8a:ea:b3:
                    23:bd:c3:b7:e0:9e:43:29:07:b1:8d:73:76:4c:ef:
                    69:79:47:4e:58:53:77:7a:b8:82:37:68:bb:82:c4:
                    c8:b2:88:b8:cb:3f:1b:17:81:a4:d4:cc:cc:51:4e:
                    59:e0:ab:8b:8d:5e:f3:d1:c9:66:7b:ab:e9:b3:ea:
                    f9:eb:62:38:d9:12:6e:c1:50:f9:8d:b8:f8:91:e2:
                    15:98:be:93:11:43:d3:73:4e:00:c9:ad:73:51:d2:
                    e8:bd:fe:12:9a:b0:a0:cb:aa:6c:32:ba:ec:08:df:
                    69:fe:e0:d1:70:80:06:23:b9:32:ae:80:58:a9:35:
                    56:5a:3e:f4:9d:61:8f:d2:19:4a:28:56:f5:da:09:
                    0c:8f:46:ba:2f:2a:be:fd:a5:05:00:29:ea:3e:fc:
                    de:04:84:e3:83:96:a2:1e:9a:9a:06:0e:0f:80:1a:
                    8e:f8:39:b4:27:af:5e:1a:ba:4a:62:ec:2f:e3:f6:
                    4f:f4:49:60:17:51:9d:3f:f3:cb:20:44:a9:69:7c:
                    8f:1c:12:a0:5c:c2:97:11:1b:56:81:1e:5b:4f:14:
                    34:d7:3c:09:48:95:b1:f7:e7:b7:47:e4:79:37:3d:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DC:35:25:21:FC:79:B4:00:EF:40:81:95:B0:76:18:E9:44:58:F1
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:61:4e:3a:b9:4a:06:d9:40:3d:be:19:a5:49:91:91:7f:7a:
         4b:57:e3:24:e1:1e:57:91:de:dc:2c:ea:22:da:48:69:2a:36:
         92:e3:15:35:f9:69:be:75:ad:1b:da:7b:f9:14:0d:3a:27:83:
         4c:32:a2:ff:a8:b1:1d:d7:be:26:fe:22:a6:0f:6a:62:ec:48:
         af:0d:94:37:fd:cf:20:75:f6:9a:c9:02:b5:d0:89:de:f5:f9:
         94:84:2c:b6:89:3a:aa:f4:ef:e7:38:2f:a7:e5:b4:31:bc:18:
         9e:1f:5c:bc:d2:e3:d1:f9:f2:35:3e:a5:9c:05:d5:bd:06:c7:
         f5:92:2c:ee:34:13:cb:e3:38:ac:0b:31:05:75:41:cc:b6:9d:
         cb:64:d3:f2:c7:9b:76:0d:ac:20:b8:75:93:90:32:bd:8b:94:
         47:b5:eb:1a:56:5a:ad:7b:8c:48:ef:44:90:be:35:66:d7:58:
         57:2e:8b:d2:f0:16:7b:cf:d1:1b:4b:8e:15:9e:a5:07:45:1d:
         83:ae:87:ff:a2:38:85:19:56:c9:a0:33:89:7b:75:da:3a:37:
         73:1d:ac:9c:54:d5:eb:d5:dd:35:61:74:17:21:c4:db:cd:04:
         40:1a:5b:e6:25:d0:41:68:af:24:ca:50:e7:68:1e:95:90:38:
         c7:24:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:40 2024 by rpki-client on console-fra.rpki-client.org