Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS40501.roa
File:                     AS40501.roa (raw, json)
Hash identifier:          adDfBZYnHB+jwhegE0m+z+2eWxqbFkellXrYoHLAHIo=
Subject key identifier:   C2:61:D4:34:76:13:C0:0C:98:23:8A:FA:19:95:94:1F:CC:12:0E:E9
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       2C99FF8E61E5A11B983F7A241DD91DE7AF7673EC
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS40501.roa
Signing time:             Mon 18 Mar 2024 19:50:12 +0000
ROA not before:           Mon 18 Mar 2024 19:45:12 +0000
ROA not after:            Mon 17 Mar 2025 19:50:12 +0000
asID:                     40501
IP address blocks:        23.142.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:99:ff:8e:61:e5:a1:1b:98:3f:7a:24:1d:d9:1d:e7:af:76:73:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar 18 19:45:12 2024 GMT
            Not After : Mar 17 19:50:12 2025 GMT
        Subject: CN=C261D4347613C00C98238AFA1995941FCC120EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:be:4c:cd:7e:2d:6a:76:16:29:42:1d:5b:
                    e8:68:bd:ac:d1:e4:3e:08:48:26:78:9b:b8:25:0e:
                    8b:49:4f:dc:88:f6:fd:7e:06:a8:05:6d:47:1b:a6:
                    65:53:cc:55:c0:58:eb:9a:72:4a:6f:54:7f:ac:b4:
                    0b:a1:b2:bf:8a:9b:55:89:42:5a:d8:1e:32:36:49:
                    a7:64:a4:b3:ae:f4:86:68:73:7e:ac:86:17:ab:a9:
                    dd:29:2d:ed:bf:85:b0:45:9c:f3:6f:2c:2c:3e:b8:
                    73:0b:20:1f:03:58:89:b2:5c:18:6b:7b:ed:af:ad:
                    16:46:2c:bd:fa:ea:69:0f:32:8b:84:9c:bd:c2:5c:
                    58:49:5a:8b:c5:03:b7:61:6b:7e:9b:d6:74:63:aa:
                    0d:e7:a5:28:0c:17:d4:8a:e4:56:a5:ce:46:6a:d0:
                    01:e3:7b:c0:6c:7d:0d:46:86:19:ec:54:49:05:94:
                    a2:51:02:bc:aa:a0:b2:71:ae:69:38:1b:8b:4b:6c:
                    37:78:eb:09:19:0a:a4:bb:86:a5:af:30:21:06:ae:
                    3a:80:69:2a:64:9a:b8:75:dc:69:0f:9a:30:ad:36:
                    34:62:1f:a0:02:50:16:2f:0d:0c:49:c5:ea:ab:93:
                    47:cb:0b:9c:09:c5:09:ae:b3:bc:2c:95:dc:cf:d3:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:61:D4:34:76:13:C0:0C:98:23:8A:FA:19:95:94:1F:CC:12:0E:E9
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS40501.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:9c:5d:49:31:51:be:4d:65:67:1b:15:5c:cf:46:df:0f:9b:
         70:44:3f:82:9d:0a:3b:50:ee:a4:e0:7a:ae:5c:60:45:32:df:
         2c:7f:80:11:d8:2a:c4:22:c5:d0:e8:b4:c4:4b:c3:73:fd:85:
         7e:cf:70:a8:f6:df:61:d9:95:9c:b8:46:3b:b7:3a:88:c0:e7:
         f1:62:26:f7:d5:14:5a:73:75:33:d7:5c:40:d1:06:d5:f3:2c:
         9f:62:5e:01:f1:d2:db:5b:8e:a7:55:32:f4:de:93:7b:27:4a:
         5c:50:d1:6a:bb:6d:c3:f2:ce:87:f0:3f:03:cf:46:8e:b2:38:
         53:97:7a:67:1b:78:dd:86:72:43:d0:bb:e5:85:96:d4:cb:d5:
         48:fa:9f:3b:88:9f:f1:56:59:20:8c:ab:be:77:05:b8:9d:24:
         50:33:e5:bc:6b:9d:13:dc:80:bd:1d:bc:24:58:25:5d:e7:16:
         11:f4:94:71:0c:92:6e:bf:84:00:af:f3:2f:2a:b8:fc:a7:25:
         33:fa:75:7c:64:c1:f6:9a:2d:d2:a1:e1:0f:eb:9e:d3:0f:58:
         10:e9:6c:3c:bb:e4:db:07:4b:c7:0a:a3:1c:8b:4c:e2:df:cb:
         68:9f:6c:d7:61:d3:d2:72:1b:dc:2e:cb:db:4b:80:39:05:d9:
         d2:17:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:50:18 2024 by rpki-client on console-fra.rpki-client.org