Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400931.roa
File:                     AS400931.roa (raw, json)
Hash identifier:          qdFc99teseab8jdrWmGP3CCD06p8Dj2WKds+swyd2ns=
Subject key identifier:   BF:2C:39:7B:8F:DC:64:E2:38:29:95:DB:49:87:19:C9:0F:F0:AE:08
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       18F6E5681B14871C16BAB2751BAD86F758627641
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400931.roa
Signing time:             Mon 18 Mar 2024 09:52:33 +0000
ROA not before:           Mon 18 Mar 2024 09:47:33 +0000
ROA not after:            Mon 17 Mar 2025 09:52:33 +0000
asID:                     400931
IP address blocks:        140.99.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f6:e5:68:1b:14:87:1c:16:ba:b2:75:1b:ad:86:f7:58:62:76:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar 18 09:47:33 2024 GMT
            Not After : Mar 17 09:52:33 2025 GMT
        Subject: CN=BF2C397B8FDC64E2382995DB498719C90FF0AE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:d9:e0:ac:94:ed:bb:f8:f6:af:29:b4:82:
                    3d:77:6a:73:1e:45:56:c9:2e:3d:4f:42:a4:b8:07:
                    cf:71:de:ad:1d:96:82:05:ae:23:a8:9e:b9:21:3f:
                    23:fe:e0:a3:46:51:bd:84:1d:1e:b9:d0:59:18:06:
                    c4:fb:2a:ac:03:23:54:d1:99:97:a8:d0:f0:58:4c:
                    c5:06:93:64:04:73:34:e3:8b:d3:e4:a8:0e:ea:04:
                    68:88:3c:43:db:c9:bb:10:e1:da:6b:83:68:b6:c7:
                    0d:3b:1f:b6:6e:4a:5b:5c:4d:df:36:88:f2:55:bc:
                    d0:49:41:cc:75:6d:9b:e6:58:55:8f:4e:ce:e6:ba:
                    db:29:77:ce:7e:f2:be:0b:ce:24:01:ed:c6:75:a1:
                    55:95:19:29:13:c5:75:da:91:9b:e3:14:09:d8:01:
                    45:90:6e:aa:62:c6:57:cb:a8:33:cc:29:8b:9c:d1:
                    c6:0e:b5:a5:0b:b3:9a:52:cf:a6:15:83:af:38:47:
                    83:7b:c0:3b:db:6b:13:e5:d5:33:0b:06:65:7f:f6:
                    b0:84:73:30:76:4d:b2:d6:1d:40:45:16:06:b8:5c:
                    aa:90:8b:1d:51:ca:d4:d9:9b:c2:5c:5e:c7:fd:29:
                    c7:de:33:11:dc:43:7e:8a:94:1f:58:7e:72:dd:3a:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2C:39:7B:8F:DC:64:E2:38:29:95:DB:49:87:19:C9:0F:F0:AE:08
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:56:a3:ba:bd:ad:6c:e9:1e:e8:c0:20:b7:c4:af:7d:ae:47:
         78:6f:c4:5d:69:b5:9c:d4:c1:d4:ba:82:03:38:c4:4d:15:8a:
         19:80:0d:fd:5e:a4:68:0b:29:94:f8:ca:9d:4e:58:f5:a0:3c:
         12:d0:41:b5:03:b8:05:83:4f:ec:a6:a3:3a:3d:f0:98:bb:4a:
         c8:49:da:a7:dd:45:03:fa:1e:4b:0f:b8:79:1d:df:46:c1:35:
         94:f6:65:87:7f:29:05:95:98:f9:98:44:ee:9a:23:37:f4:f1:
         4a:ea:0d:dd:74:96:2a:ed:15:de:a3:c0:b1:54:8e:5c:6e:3b:
         a1:ba:57:cb:a9:1c:68:a7:e8:72:5c:77:b9:d3:5b:d6:31:b8:
         61:ea:2a:23:74:a4:2c:12:84:f6:8b:c8:05:6f:e8:07:f2:61:
         12:db:96:87:49:43:27:ea:87:2a:e9:e9:13:28:9a:05:01:9c:
         15:97:01:ad:a1:c4:bf:6d:c1:9c:d5:9a:5f:10:b5:c9:95:ea:
         93:40:35:b4:7e:4d:02:ae:ef:cb:d7:88:f4:59:8e:69:a0:b5:
         92:7e:40:83:29:e3:19:bb:12:c5:67:bf:94:29:a8:1f:16:95:
         52:52:51:c0:9f:b5:7a:fe:ed:22:8a:15:38:77:d1:61:50:ca:
         3a:fa:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:37:20 2024 by rpki-client on console-ams.rpki-client.org