Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS59895.roa
File:                     AS59895.roa (raw, json)
Hash identifier:          3JDwevQF+GyUELhrUvhwjWSSu+3HIJK5n4Op6ORwH9o=
Subject key identifier:   40:57:AB:A4:64:A0:86:1E:68:F4:F4:BA:9F:2B:C5:A9:82:95:44:51
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       0FAC3D31D9CDA2D773F0650B1428D3A29D9144EC
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS59895.roa
Signing time:             Mon 19 Feb 2024 11:39:31 +0000
ROA not before:           Mon 19 Feb 2024 11:34:31 +0000
ROA not after:            Mon 17 Feb 2025 11:39:31 +0000
asID:                     59895
IP address blocks:        140.99.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ac:3d:31:d9:cd:a2:d7:73:f0:65:0b:14:28:d3:a2:9d:91:44:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb 19 11:34:31 2024 GMT
            Not After : Feb 17 11:39:31 2025 GMT
        Subject: CN=4057ABA464A0861E68F4F4BA9F2BC5A982954451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:10:42:01:a1:33:e4:a6:ed:66:5a:9e:67:
                    b5:12:e8:36:c4:dc:11:b7:0f:38:95:1f:b5:b9:91:
                    55:b7:4d:3e:c0:54:a0:10:18:bf:22:0c:fa:09:92:
                    50:f1:d1:5a:70:80:e5:eb:2f:e5:2e:ab:ff:c6:90:
                    44:1c:78:92:a9:c6:04:ae:b3:09:ce:68:b9:f4:57:
                    aa:c9:06:ff:97:cd:c7:11:0c:6e:6a:4d:0a:5c:4f:
                    29:7b:d2:7b:07:cb:c4:eb:07:99:2e:02:4c:4c:5b:
                    c7:d0:cd:9a:96:89:0f:78:ed:9b:3e:22:bf:6d:5b:
                    03:5d:09:79:44:dd:22:b9:41:98:e7:bd:b2:b5:8e:
                    6c:17:76:d0:ab:43:69:2b:70:8a:04:84:8c:93:11:
                    1a:ee:02:6f:db:68:9d:24:84:2e:29:29:c5:bb:37:
                    7c:a8:1c:5b:7f:15:01:98:3d:e8:1c:6a:d4:f0:c7:
                    ab:c2:c4:a4:50:28:7c:2a:74:34:4f:2c:44:16:bb:
                    b1:a0:98:3d:8a:84:dd:7a:00:d0:4d:21:4d:5c:0a:
                    eb:3c:a8:8d:cd:df:e0:cd:88:50:51:b5:77:44:ef:
                    a6:ea:04:c0:0d:50:16:ba:31:a2:12:5c:02:2b:b3:
                    65:dc:9c:35:f8:60:a4:50:43:a5:ba:40:7f:c4:6b:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:57:AB:A4:64:A0:86:1E:68:F4:F4:BA:9F:2B:C5:A9:82:95:44:51
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS59895.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:7a:9e:c8:66:f4:2e:cb:6f:62:17:93:ea:ff:4d:80:c6:0f:
         fa:bc:9c:88:cd:5e:5b:ad:6c:2b:2f:07:18:56:80:53:ee:7b:
         b8:10:e2:f8:b1:11:d5:a8:5b:ec:f3:64:d3:55:e3:24:c9:e9:
         57:1c:99:cd:09:e8:93:cd:05:07:35:27:f7:4c:06:fa:33:30:
         4a:3d:24:59:87:ea:06:f8:c2:13:57:00:cb:12:57:b0:bc:c6:
         8c:e5:61:f9:d8:a5:2f:0a:14:f3:90:16:c6:bd:2a:76:76:2e:
         8c:df:45:d0:5d:23:ac:03:8c:2e:7f:77:47:0d:ba:cb:f0:1c:
         95:dd:8f:d6:ec:91:6e:e1:08:42:a1:7e:c4:68:9e:15:c2:89:
         8e:71:b8:62:91:0f:13:3e:ef:ed:2c:bd:7a:b6:15:b0:53:85:
         3e:bc:07:b4:ac:a9:e7:87:42:52:a7:8e:86:9d:cb:4a:bb:2a:
         6a:01:73:04:c5:81:f1:ff:98:99:aa:7a:14:f3:d7:7e:00:f4:
         2c:ce:ce:56:e3:de:73:d1:90:37:eb:ed:65:f9:51:2e:12:33:
         20:43:40:f7:1d:2b:4b:13:e1:db:34:27:b1:ef:d9:8e:9b:f3:
         dd:e1:ac:c1:ce:ee:ca:be:c8:4d:21:58:0d:ce:c1:ad:f1:92:
         fe:f9:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:37:21 2024 by rpki-client on console-ams.rpki-client.org