Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          J1d6XhKBk81CmuPgru/vKtEpfP6eSMObWam/RVz4qyM=
Subject key identifier:   71:95:D8:71:4C:4D:CD:79:93:7A:16:AA:E8:AC:FF:71:6C:06:52:2E
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4093624050236C3B1BA72F91F3C03BAE80560653
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS54252.roa
Signing time:             Wed 07 Feb 2024 14:33:20 +0000
ROA not before:           Wed 07 Feb 2024 14:28:20 +0000
ROA not after:            Wed 05 Feb 2025 14:33:20 +0000
asID:                     54252
IP address blocks:        140.99.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:93:62:40:50:23:6c:3b:1b:a7:2f:91:f3:c0:3b:ae:80:56:06:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb  7 14:28:20 2024 GMT
            Not After : Feb  5 14:33:20 2025 GMT
        Subject: CN=7195D8714C4DCD79937A16AAE8ACFF716C06522E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:00:c6:c6:e9:55:a6:c1:b2:7a:cb:92:10:
                    86:8f:d3:92:06:91:01:3e:57:28:38:f7:c5:e2:77:
                    1d:28:8a:08:91:6c:3f:03:91:40:d7:a2:ce:5f:a9:
                    1f:ab:cd:55:ba:5c:6d:15:8b:be:c8:d8:a4:c8:5f:
                    da:51:a2:5d:dc:4f:2f:cf:a3:0b:2a:25:10:0f:e7:
                    00:fe:64:e9:01:2f:6c:ee:d4:66:79:f1:78:ca:fb:
                    ec:b0:7a:c8:4a:6e:8d:6a:1f:41:86:1a:20:d7:69:
                    54:9a:bd:61:03:68:cf:bc:3e:88:45:ca:4f:58:b4:
                    7a:5a:e8:06:3f:18:9e:b7:52:ac:d8:4b:7d:fa:9f:
                    5e:bc:04:c8:64:2c:67:ba:3d:cb:4b:86:55:34:a8:
                    86:6d:d2:32:10:92:c7:59:97:cd:5f:04:66:14:a3:
                    2d:f2:3c:14:28:64:f5:66:a0:47:6e:e5:4a:c5:b3:
                    12:a5:0a:6c:fc:e6:db:75:90:5d:43:e0:82:54:10:
                    a0:46:ca:b5:56:f0:59:a5:f1:d8:d3:aa:95:75:18:
                    da:15:af:09:0e:30:af:ab:a1:cd:c7:05:c9:0e:4d:
                    6a:98:1d:02:65:b5:53:6a:d2:38:a6:fa:bb:ec:0e:
                    5c:a9:9e:e9:ce:71:c5:5b:87:48:3b:aa:19:9a:8e:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:95:D8:71:4C:4D:CD:79:93:7A:16:AA:E8:AC:FF:71:6C:06:52:2E
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:2d:4e:b6:0c:68:e2:62:85:c6:43:4c:32:69:a1:58:a5:c9:
         3f:d5:d1:01:fd:23:a4:8a:da:26:88:31:2f:af:7d:9f:4c:23:
         96:bd:b9:17:c7:f4:5d:0f:f3:a0:29:68:7b:20:75:af:f9:c2:
         18:83:58:67:ec:06:54:24:34:09:ca:43:e5:0d:46:d5:36:b4:
         49:c0:6b:4d:16:4a:9b:1c:85:3e:d4:21:52:43:da:4d:f2:09:
         3b:a5:87:a9:f1:b1:29:b5:60:e5:3b:87:f7:0a:8d:2e:c1:7e:
         48:c5:5c:68:84:05:fa:d7:5a:c6:0e:d8:81:7a:c0:91:3b:dd:
         1d:1c:9c:d7:8f:a3:e3:e0:de:29:48:29:6c:91:0b:6a:0a:dc:
         72:c1:82:ce:6c:3b:4e:39:3b:75:15:8f:0c:13:ba:05:e6:e0:
         46:67:88:85:0b:52:bf:ff:05:dc:7d:ab:a2:7a:8a:b3:29:db:
         99:cb:4b:1c:0a:b9:7c:da:0b:78:91:a4:a1:eb:28:6b:50:fe:
         e1:e9:a6:d0:de:72:1b:5b:78:c5:86:4c:43:89:29:d9:cc:35:
         99:da:09:76:9c:e3:1b:9b:38:81:73:f6:91:88:80:57:36:fb:
         47:a9:70:8e:dd:99:ab:90:92:b5:88:ea:59:3c:37:1a:82:96:
         96:ac:27:37
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUQJNiQFAjbDsbpy+R88A7roBWBlMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwMjA3MTQyODIwWhcNMjUwMjA1MTQzMzIw
WjAzMTEwLwYDVQQDEyg3MTk1RDg3MTRDNERDRDc5OTM3QTE2QUFFOEFDRkY3MTZD
MDY1MjJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C0AxsbpVabB
snrLkhCGj9OSBpEBPlcoOPfF4ncdKIoIkWw/A5FA16LOX6kfq81VulxtFYu+yNik
yF/aUaJd3E8vz6MLKiUQD+cA/mTpAS9s7tRmefF4yvvssHrISm6Nah9Bhhog12lU
mr1hA2jPvD6IRcpPWLR6WugGPxiet1Ks2Et9+p9evATIZCxnuj3LS4ZVNKiGbdIy
EJLHWZfNXwRmFKMt8jwUKGT1ZqBHbuVKxbMSpQps/ObbdZBdQ+CCVBCgRsq1VvBZ
pfHY06qVdRjaFa8JDjCvq6HNxwXJDk1qmB0CZbVTatI4pvq77A5cqZ7pznHFW4dI
O6oZmo4lxQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFHGV2HFMTc15k3oWquis/3Fs
BlIuMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzU0MjUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGNyMA0GCSqGSIb3DQEBCwUAA4IB
AQB4LU62DGjiYoXGQ0wyaaFYpck/1dEB/SOkitomiDEvr32fTCOWvbkXx/RdD/Og
KWh7IHWv+cIYg1hn7AZUJDQJykPlDUbVNrRJwGtNFkqbHIU+1CFSQ9pN8gk7pYep
8bEptWDlO4f3Co0uwX5IxVxohAX611rGDtiBesCRO90dHJzXj6Pj4N4pSClskQtq
CtxywYLObDtOOTt1FY8ME7oF5uBGZ4iFC1K//wXcfauieoqzKduZy0scCrl82gt4
kaSh6yhrUP7h6abQ3nIbW3jFhkxDiSnZzDWZ2gl2nOMbmziBc/aRiIBXNvtHqXCO
3ZmrkJK1iOpZPDcagpaWrCc3
-----END CERTIFICATE-----
Generated at Sun May 5 09:37:20 2024 by rpki-client on console-ams.rpki-client.org