Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60602.roa
File:                     AS60602.roa (raw, json)
Hash identifier:          vQKOFnujNgjKiXlT/T3OZYh7nkc8mBhoWD3sOx3oSsE=
Subject key identifier:   2C:20:43:40:9C:BA:5D:E7:AA:4E:10:9B:D3:37:6D:F2:C9:0F:5E:1A
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       487B04756AF22923F0891BA540B51CA13296DDDD
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60602.roa
Signing time:             Thu 01 Aug 2024 16:48:59 +0000
ROA not before:           Thu 01 Aug 2024 16:43:59 +0000
ROA not after:            Thu 31 Jul 2025 16:48:59 +0000
asID:                     60602
IP address blocks:        140.99.24.0/23 maxlen: 24
                          140.99.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 04:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7b:04:75:6a:f2:29:23:f0:89:1b:a5:40:b5:1c:a1:32:96:dd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug  1 16:43:59 2024 GMT
            Not After : Jul 31 16:48:59 2025 GMT
        Subject: CN=2C2043409CBA5DE7AA4E109BD3376DF2C90F5E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:e5:ea:5a:4d:5c:59:d4:9d:27:87:82:f4:
                    88:ef:5c:2c:5a:d0:2c:f3:b2:38:12:3e:d0:4d:3e:
                    64:9b:6b:43:75:7a:2e:64:26:85:f0:b7:d9:73:7e:
                    4f:ea:a2:b1:18:fb:fe:9f:4c:95:d0:39:7d:a3:18:
                    24:69:02:45:a4:b3:c4:c3:c0:b7:94:79:e6:90:d1:
                    87:0d:ed:aa:83:be:8a:2b:07:d8:58:13:cf:c9:36:
                    72:f3:5f:a3:9b:69:bd:3e:75:7e:1a:fc:a2:45:ed:
                    88:b8:23:f6:8b:7e:02:80:ba:b6:2b:55:8f:37:96:
                    fb:dc:42:05:d2:22:f7:3e:e0:26:0d:e9:d7:dc:a5:
                    26:36:4d:87:fa:3c:c7:5b:40:46:82:a5:15:85:cd:
                    79:3b:4d:e9:73:31:64:41:41:cf:df:58:3a:d9:46:
                    0b:c2:ab:cf:da:f5:50:83:e2:7b:c6:66:d8:a6:19:
                    ae:5f:7e:bc:f3:b3:58:a6:06:09:dc:61:a5:8f:8e:
                    94:6c:29:b8:30:0a:99:a4:ae:df:a7:b0:de:29:79:
                    f1:bf:e5:ab:d2:ab:55:b2:fd:41:b6:44:f2:73:c4:
                    0c:93:0c:d1:ed:a5:5e:46:21:3e:11:ab:2b:f9:f3:
                    96:1e:26:b9:07:01:8d:2f:96:dc:54:4f:e8:90:74:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:20:43:40:9C:BA:5D:E7:AA:4E:10:9B:D3:37:6D:F2:C9:0F:5E:1A
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60602.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.24.0/23
                  140.99.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:72:3a:68:8d:5b:5f:a6:df:51:9a:ab:ff:f3:a6:16:9c:aa:
         fe:36:93:e2:97:21:86:c0:f3:74:13:50:77:58:2b:22:eb:db:
         b6:b6:1d:93:34:81:ed:22:04:0e:3f:57:b9:20:6a:6b:23:f3:
         ca:c5:90:78:ea:d4:5d:db:d0:e9:43:6c:2c:bc:1c:16:aa:91:
         c1:fa:a3:f9:fa:9f:68:5a:e0:62:48:41:35:9a:2b:0d:19:ca:
         6f:61:7e:ce:46:ea:1d:6f:6d:d0:d0:a0:6a:c1:ac:d5:ad:3b:
         a6:c1:6f:f4:33:18:e2:e9:45:95:f6:33:15:87:43:f1:02:fa:
         89:90:55:bf:f8:b3:25:a0:4a:54:bb:2f:0e:2b:7f:1f:6f:f3:
         e6:f7:8e:60:1d:04:db:77:2c:23:58:dc:f0:24:0a:b1:e1:1a:
         de:95:19:5f:16:dc:ce:bb:c3:c1:d8:01:4a:54:c0:9e:e4:d5:
         97:ce:b1:15:2c:4b:0b:4d:a6:4c:fe:6c:d2:b2:ff:21:bc:62:
         26:1a:10:3c:d3:80:d9:01:9c:3c:bf:3c:f5:ac:9d:14:2e:f1:
         32:43:42:26:21:2d:8b:17:c3:41:be:b2:c7:a7:69:d4:d5:be:
         bf:9b:c4:92:cc:bb:18:bc:31:cc:34:d9:0f:94:bc:49:bc:b0:
         a3:fb:c4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:28 2025 by rpki-client