Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          jREQHQHV4YG0Q5YWS49Dz3fh9fQinF+IQXITn7rY+rc=
Subject key identifier:   81:4C:32:40:84:BA:9D:0E:00:D7:E1:22:55:96:4D:DB:C5:8C:29:9C
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4BF3BDA84C559520CF72C55C4321FFA979D42F9F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS5065.roa
Signing time:             Sun 07 Apr 2024 12:53:02 +0000
ROA not before:           Sun 07 Apr 2024 12:48:02 +0000
ROA not after:            Sun 06 Apr 2025 12:53:02 +0000
asID:                     5065
IP address blocks:        140.99.35.0/24 maxlen: 24
                          140.99.186.0/23 maxlen: 24
                          140.99.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f3:bd:a8:4c:55:95:20:cf:72:c5:5c:43:21:ff:a9:79:d4:2f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr  7 12:48:02 2024 GMT
            Not After : Apr  6 12:53:02 2025 GMT
        Subject: CN=814C324084BA9D0E00D7E12255964DDBC58C299C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:ba:a6:46:71:a6:12:2f:72:6b:35:d0:40:
                    74:76:9a:36:04:65:68:e6:34:f1:db:38:a2:24:17:
                    5a:eb:1f:4e:82:11:e5:15:ce:58:8b:da:5f:38:49:
                    7e:ea:60:c2:c0:7e:47:70:b6:fa:a7:4b:18:ab:17:
                    c7:80:af:b4:cd:12:d1:60:fa:d8:d6:e7:d7:6d:4b:
                    a0:24:7e:c2:bd:de:ce:29:75:94:06:ef:5b:d2:9d:
                    88:33:b9:e4:55:d6:e4:e8:6e:83:ee:52:21:3c:11:
                    bd:fd:1e:05:33:08:4f:43:63:4a:56:e7:78:34:94:
                    03:18:e4:24:77:dd:b9:dd:48:01:7b:5d:f8:fb:48:
                    69:48:0d:f4:1b:8c:5d:1f:74:93:8f:36:c5:14:96:
                    cf:66:45:37:90:1f:97:9c:b7:bb:13:ac:e8:67:0c:
                    3d:4d:55:f3:cc:db:c7:b8:bf:41:c9:13:63:6d:2d:
                    5c:22:27:ad:78:6e:cf:2a:80:6f:43:05:05:9d:d9:
                    fd:55:40:45:69:c5:62:87:47:50:6e:40:39:61:54:
                    91:17:8e:5c:5b:36:cc:66:fd:b3:51:0c:46:28:9c:
                    11:1c:40:ca:f1:0c:c7:a9:07:f7:bd:06:a7:ac:79:
                    91:bf:8f:38:5d:f5:0e:f9:38:ca:d8:8e:aa:70:f2:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4C:32:40:84:BA:9D:0E:00:D7:E1:22:55:96:4D:DB:C5:8C:29:9C
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.35.0/24
                  140.99.186.0/23
                  140.99.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:63:c2:0d:36:55:e7:3d:e2:14:59:d4:38:7d:a0:39:bb:d3:
         9a:9d:71:68:55:01:79:50:7e:34:f7:3b:f1:ad:f8:b4:be:f2:
         66:67:4e:00:16:c6:26:67:76:9c:12:14:a3:6a:d2:ce:61:29:
         6a:53:71:9b:72:57:58:99:0a:76:55:dd:08:06:cd:71:fa:91:
         86:14:ec:53:e5:d9:c7:98:10:c7:6c:53:e8:60:d9:83:74:ec:
         bb:bf:0d:03:f5:41:ba:22:88:35:5d:69:43:a0:7f:b8:39:4c:
         14:44:0b:98:d4:29:8c:d5:ed:ea:5f:c7:d3:b9:63:1b:38:88:
         aa:54:63:80:83:e1:cc:1d:be:5f:39:58:1e:cb:8c:dd:ee:38:
         82:59:88:ff:30:f4:1c:6c:fd:c1:de:1d:cc:42:a2:a5:b4:09:
         bc:be:97:f1:6f:ad:41:3f:c8:33:20:80:04:6a:a1:92:c8:36:
         2f:95:94:68:a3:89:9e:09:96:d6:2c:ce:47:d6:b7:c9:e8:9b:
         5a:6f:56:40:06:c1:6d:8f:a6:09:13:6b:5c:e7:80:00:87:13:
         29:7a:09:9e:1a:83:b6:f1:b0:8d:6e:67:3d:92:8c:d2:a3:f8:
         ff:6c:85:cb:ea:5e:75:08:9c:44:04:1f:f0:e6:cc:b6:c4:f2:
         0f:ff:04:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:37:20 2024 by rpki-client on console-ams.rpki-client.org