Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60602.roa
File:                     AS60602.roa (raw, json)
Hash identifier:          hXvca8VpBBdaIAlajgwIQDHbnIjQzR2DGgDiVwlt5ko=
Subject key identifier:   75:5C:AE:64:8A:3A:C0:06:B6:B1:E5:14:72:D6:12:A4:A7:C6:7E:53
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       7069BED2DA462DF956C32368014B69A2D5CFEC1E
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60602.roa
Signing time:             Thu 31 Aug 2023 16:34:11 +0000
ROA not before:           Thu 31 Aug 2023 16:29:11 +0000
ROA not after:            Thu 29 Aug 2024 16:34:11 +0000
asID:                     60602
IP address blocks:        140.99.24.0/23 maxlen: 24
                          140.99.142.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 05:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:69:be:d2:da:46:2d:f9:56:c3:23:68:01:4b:69:a2:d5:cf:ec:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 31 16:29:11 2023 GMT
            Not After : Aug 29 16:34:11 2024 GMT
        Subject: CN=755CAE648A3AC006B6B1E51472D612A4A7C67E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:f5:b5:ce:86:e4:74:06:30:22:d4:70:65:
                    e8:6e:51:1f:be:93:b0:9f:01:ca:d5:fb:31:28:9e:
                    1e:ba:8b:f2:39:bf:4c:cd:8c:a8:43:73:eb:a5:72:
                    2b:f5:19:65:7a:59:ea:ce:2d:59:7c:27:76:84:1d:
                    86:83:39:83:c6:9e:36:38:fd:ee:60:50:7f:01:a9:
                    8a:a6:e8:ad:cf:b2:f2:ac:e8:23:33:23:e1:ae:14:
                    26:11:21:d6:e8:06:70:42:62:ff:ee:6e:88:43:09:
                    bf:e6:5b:31:30:81:05:6e:af:70:79:99:bc:37:96:
                    ce:81:b0:00:94:45:1e:85:2e:89:25:1e:47:b9:c4:
                    7e:6b:bb:41:00:6b:96:48:40:e5:f7:f4:c0:60:eb:
                    8f:94:3d:ae:39:44:d1:ac:b9:16:3a:4d:d3:17:57:
                    22:56:93:cf:c6:09:82:b7:85:dc:e0:01:b7:c0:32:
                    5a:9d:3e:57:80:2c:fd:7e:56:ed:8e:17:c7:30:39:
                    9b:98:4c:8f:cd:8a:88:82:2b:ca:4d:4b:6c:74:ec:
                    5f:73:7e:d6:9d:53:f6:e4:65:ed:2e:9a:56:42:f3:
                    f3:87:3f:3a:7c:66:14:64:f3:5b:5d:92:5d:6d:c7:
                    61:37:ba:cc:15:71:a8:03:aa:0d:ed:f8:26:6c:58:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5C:AE:64:8A:3A:C0:06:B6:B1:E5:14:72:D6:12:A4:A7:C6:7E:53
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60602.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.24.0/23
                  140.99.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:66:1c:f6:d6:49:4b:3f:4f:2c:86:a1:0e:2b:b5:23:57:f3:
         84:a5:40:51:63:16:8c:09:31:12:9b:fc:fe:39:e2:af:e2:a7:
         e0:4f:37:a2:48:40:9e:2c:3a:a7:eb:da:18:6a:6c:ef:c5:a3:
         cf:0e:37:bf:93:07:2d:c2:f2:e6:97:6c:21:74:e4:ac:f0:18:
         45:be:54:8a:bc:3e:dd:80:9d:f8:03:40:15:e0:ce:8e:96:77:
         04:28:94:3c:9a:28:3d:16:d9:0f:cb:4f:f0:68:d3:a4:c7:d8:
         ac:62:49:1e:3e:a6:06:05:91:96:17:47:40:f3:58:ea:59:44:
         e7:f2:c8:e9:e9:1b:73:e9:4f:52:73:92:63:23:23:7c:22:a0:
         08:18:f3:40:39:79:76:13:29:7d:14:fe:46:44:73:1a:fb:2b:
         b6:25:78:27:6e:40:d0:82:69:d9:7a:a3:9f:3b:2e:fa:bb:05:
         a2:cf:cb:ef:74:4b:b7:9e:81:e3:aa:e8:a8:87:b6:06:27:ca:
         9e:13:f3:32:5c:eb:e7:46:7b:f4:9e:00:72:76:13:ff:37:28:
         bc:8a:6a:88:f7:72:85:6d:ed:1b:b4:b9:06:09:26:a5:e1:d4:
         48:7a:af:dd:b3:3d:3c:e9:b1:0f:30:5d:20:a5:ed:de:d4:b6:
         6e:f0:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:43:48 2024 by rpki-client on console-fra.rpki-client.org