Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400785.roa
File:                     AS400785.roa (raw, json)
Hash identifier:          l+antnBKEReTbn8WU32lAkBPpsvLwtwLXWFValf3aWI=
Subject key identifier:   C3:0A:9F:D0:23:7D:CB:E0:2D:FE:42:E4:8E:64:D5:A6:32:D8:D0:6B
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       586485A8FC6A634D804B051F5FE2B992B9EB5ABF
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400785.roa
Signing time:             Thu 07 Sep 2023 18:37:01 +0000
ROA not before:           Thu 07 Sep 2023 18:32:01 +0000
ROA not after:            Thu 05 Sep 2024 18:37:01 +0000
asID:                     400785
IP address blocks:        140.99.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 03:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:64:85:a8:fc:6a:63:4d:80:4b:05:1f:5f:e2:b9:92:b9:eb:5a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep  7 18:32:01 2023 GMT
            Not After : Sep  5 18:37:01 2024 GMT
        Subject: CN=C30A9FD0237DCBE02DFE42E48E64D5A632D8D06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:99:26:ca:08:eb:27:b2:62:c7:2c:9f:37:
                    ad:99:04:ab:be:b2:b9:29:48:05:9d:93:a1:ea:ac:
                    0a:38:b3:cf:ae:8b:de:a9:cb:a4:06:72:e9:07:dc:
                    f8:92:1f:28:41:7b:f3:d1:aa:fc:20:f1:f0:a4:3f:
                    2c:f3:a5:cb:f2:c5:48:45:d6:d0:5a:d3:75:74:57:
                    17:f4:bc:81:71:0a:de:f5:af:4a:95:7c:1c:bf:4c:
                    7a:82:b8:0c:59:be:84:d0:89:35:da:e0:00:74:62:
                    74:ea:42:62:59:6b:a4:b4:d8:8f:0a:2c:1b:bb:a3:
                    30:85:d7:53:21:04:a0:c7:a6:bb:8b:d6:e8:01:47:
                    9c:2d:8a:af:54:a4:02:e2:5a:af:b7:85:7a:01:67:
                    f6:92:7f:19:09:ad:ce:42:d6:43:5a:81:de:23:e4:
                    72:0d:0e:e1:5a:1c:e5:68:b2:98:3d:72:46:25:a7:
                    ff:24:9f:b8:d1:3d:5d:4d:cb:4c:9c:47:b2:db:32:
                    e8:49:22:af:48:1e:58:06:21:9e:db:54:5a:0a:5f:
                    b5:14:9a:8e:f4:ac:10:65:1e:3a:a1:d9:12:39:24:
                    ca:c0:54:8f:48:95:a6:47:09:78:19:c8:d9:d6:f0:
                    49:ab:42:28:a4:79:dc:9e:91:2e:34:a7:f0:22:35:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0A:9F:D0:23:7D:CB:E0:2D:FE:42:E4:8E:64:D5:A6:32:D8:D0:6B
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400785.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:44:96:a7:4d:dc:e2:a1:68:5a:bd:8a:39:68:60:64:71:40:
         76:e3:f0:6b:4a:a8:1c:01:69:a4:01:06:5b:8a:d0:32:9e:81:
         db:67:53:ca:1e:48:da:eb:9d:10:91:c7:62:46:22:b9:96:55:
         03:16:62:2b:67:f3:41:db:69:ba:39:a4:fe:52:b2:36:3a:ab:
         12:84:c5:ea:84:c5:ae:c3:12:25:b9:49:93:ef:90:4a:fb:af:
         77:ea:34:00:d0:f4:ad:0a:99:20:91:d5:10:7f:e4:b0:5f:dc:
         01:88:65:20:68:5c:53:ae:90:34:ec:ac:53:76:13:2a:07:ed:
         37:ac:48:48:d2:1d:17:3f:98:7f:0e:62:ac:4e:a8:2c:f6:13:
         47:00:d8:a0:fd:bc:37:de:8a:d4:65:b9:7d:f2:bf:64:18:df:
         da:61:5a:f6:b1:ca:22:a8:66:00:6f:a2:87:dd:cd:8f:1b:ba:
         e6:97:eb:b3:21:a6:98:30:38:a7:2e:0b:38:12:56:d9:30:74:
         f3:c9:5e:18:e3:c2:5a:38:62:b9:ae:40:fb:59:ff:b9:74:5a:
         50:5b:76:4c:a8:ca:36:f5:ab:d6:33:23:f8:3d:f4:bd:42:80:
         97:2f:93:fe:8e:02:46:c9:f5:1a:d1:a8:a1:97:a3:e5:a9:1c:
         21:bc:d8:96
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUWGSFqPxqY02ASwUfX+K5krnrWr8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwOTA3MTgzMjAxWhcNMjQwOTA1MTgzNzAx
WjAzMTEwLwYDVQQDEyhDMzBBOUZEMDIzN0RDQkUwMkRGRTQyRTQ4RTY0RDVBNjMy
RDhEMDZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyGZJsoI6yey
YscsnzetmQSrvrK5KUgFnZOh6qwKOLPProveqcukBnLpB9z4kh8oQXvz0ar8IPHw
pD8s86XL8sVIRdbQWtN1dFcX9LyBcQre9a9KlXwcv0x6grgMWb6E0Ik12uAAdGJ0
6kJiWWuktNiPCiwbu6MwhddTIQSgx6a7i9boAUecLYqvVKQC4lqvt4V6AWf2kn8Z
Ca3OQtZDWoHeI+RyDQ7hWhzlaLKYPXJGJaf/JJ+40T1dTctMnEey2zLoSSKvSB5Y
BiGe21RaCl+1FJqO9KwQZR46odkSOSTKwFSPSJWmRwl4GcjZ1vBJq0IopHncnpEu
NKfwIjW7IQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMMKn9AjfcvgLf5C5I5k1aYy
2NBrMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzQwMDc4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIxjezANBgkqhkiG9w0BAQsFAAOC
AQEAMkSWp03c4qFoWr2KOWhgZHFAduPwa0qoHAFppAEGW4rQMp6B22dTyh5I2uud
EJHHYkYiuZZVAxZiK2fzQdtpujmk/lKyNjqrEoTF6oTFrsMSJblJk++QSvuvd+o0
AND0rQqZIJHVEH/ksF/cAYhlIGhcU66QNOysU3YTKgftN6xISNIdFz+Yfw5irE6o
LPYTRwDYoP28N96K1GW5ffK/ZBjf2mFa9rHKIqhmAG+ih93Njxu65pfrsyGmmDA4
py4LOBJW2TB088leGOPCWjhiua5A+1n/uXRaUFt2TKjKNvWr1jMj+D30vUKAly+T
/o4CRsn1GtGooZej5akcIbzYlg==
-----END CERTIFICATE-----
Generated at Tue Apr 16 00:26:01 2024 by rpki-client on console-fra.rpki-client.org