Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          JovxanfsaOLJpDqZVU98B39hM0uvozxwlijCtWw7u08=
Subject key identifier:   54:74:CF:C7:2E:91:CD:D5:8E:5C:69:25:44:82:16:46:D6:0D:BB:A0
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       54A9D426DAA11CEB4A062DC2ACB4F2DA5A637FF6
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62240.roa
Signing time:             Wed 06 Dec 2023 08:01:11 +0000
ROA not before:           Wed 06 Dec 2023 07:56:11 +0000
ROA not after:            Wed 04 Dec 2024 08:01:11 +0000
asID:                     62240
IP address blocks:        140.99.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 10:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a9:d4:26:da:a1:1c:eb:4a:06:2d:c2:ac:b4:f2:da:5a:63:7f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Dec  6 07:56:11 2023 GMT
            Not After : Dec  4 08:01:11 2024 GMT
        Subject: CN=5474CFC72E91CDD58E5C692544821646D60DBBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:44:b5:99:61:ec:ea:49:d7:c3:38:08:ce:93:
                    e4:cb:b2:50:dd:15:7f:43:ef:8c:78:b2:1f:b7:cb:
                    90:8d:1f:01:34:0e:40:5c:f1:c4:aa:87:12:6a:77:
                    da:82:5c:58:60:05:36:26:b3:4a:1b:6f:1b:e3:01:
                    53:98:5f:a2:b3:05:25:d0:5f:0d:b7:42:b7:64:c9:
                    6d:fe:5a:5a:2d:40:e2:5f:3f:33:49:4f:12:b5:45:
                    bf:c5:64:5f:0d:94:16:c3:78:46:8a:8f:56:d3:f6:
                    7e:dc:d8:8c:64:fd:36:04:41:92:d6:9c:23:84:a8:
                    bc:8f:45:01:39:f9:8e:9f:fb:9b:4d:52:a5:0b:7b:
                    d2:21:d2:a0:d1:b7:27:c2:5d:2d:ea:28:34:b0:50:
                    52:3b:55:f6:85:7c:c6:cf:0b:df:93:16:18:c5:b5:
                    54:04:d3:d2:a0:5e:1c:68:dc:02:b8:4c:0d:72:34:
                    0d:9a:ed:93:20:4f:d5:32:95:7d:f1:e9:9a:6e:b3:
                    03:17:b9:a4:f8:36:79:7a:a2:78:1c:95:61:83:02:
                    41:1c:ed:8e:80:1a:e1:dc:24:f5:0c:51:93:e8:6c:
                    5f:c8:3b:be:f5:23:2c:bc:06:75:62:20:50:64:bf:
                    b8:4c:84:8d:fe:7f:56:d6:ca:e7:8e:1f:8e:d9:f6:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:CF:C7:2E:91:CD:D5:8E:5C:69:25:44:82:16:46:D6:0D:BB:A0
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:9f:22:60:68:64:ec:ec:2c:79:9b:99:ab:d6:2e:3b:77:c7:
         0a:d4:44:62:b4:b6:bd:17:8f:bb:18:2c:14:c8:27:00:ee:ac:
         82:3e:85:fe:65:76:14:97:6f:53:43:2b:ac:c7:63:53:0b:3c:
         17:b0:69:0d:d2:2a:08:a7:a1:c1:27:ee:44:69:e2:aa:f1:b4:
         dd:73:bc:40:c2:57:24:b6:cc:5d:16:7c:9c:5c:ce:5c:44:61:
         6a:89:f6:7d:60:4f:57:31:8a:e0:04:c6:83:f2:66:d6:b1:b2:
         10:ad:ba:9c:a1:9f:bf:f6:95:13:f5:3e:f0:f0:df:70:df:d3:
         51:01:5c:14:eb:b4:23:5f:90:b7:a7:df:63:6c:44:43:18:80:
         37:ac:69:2b:46:f4:87:8e:d8:36:99:4c:93:b2:6a:d0:43:d3:
         a7:f8:77:bf:cf:9c:c6:5c:1c:09:5b:59:61:fa:b8:2b:32:bd:
         6a:e9:22:31:15:8e:30:67:5b:8e:07:d5:f7:e8:f2:61:e9:fe:
         79:91:34:6d:9c:02:33:83:fa:fd:39:24:39:2f:a0:52:f5:6b:
         86:85:ed:12:3c:cc:2c:a5:19:8e:19:3f:eb:09:4c:4d:e9:ff:
         51:da:b0:3e:51:2d:6f:62:0e:6e:b2:08:04:89:8c:2b:39:aa:
         18:bf:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 12:01:47 2024 by rpki-client on console-fra.rpki-client.org