Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          ou40TkLPy6kdQITxIiD4ja6xj9m2c60+mxcl7tpxBuY=
Subject key identifier:   61:5B:14:BF:36:4F:63:42:EC:FE:3F:08:53:D5:EA:B5:75:B7:3C:98
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       7226A34F889EDDFEF4C372186984C4AB1A731B9C
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62240.roa
Signing time:             Wed 06 Nov 2024 08:49:21 +0000
ROA not before:           Wed 06 Nov 2024 08:44:21 +0000
ROA not after:            Wed 05 Nov 2025 08:49:21 +0000
asID:                     62240
IP address blocks:        140.99.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 04:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:26:a3:4f:88:9e:dd:fe:f4:c3:72:18:69:84:c4:ab:1a:73:1b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Nov  6 08:44:21 2024 GMT
            Not After : Nov  5 08:49:21 2025 GMT
        Subject: CN=615B14BF364F6342ECFE3F0853D5EAB575B73C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:83:38:18:f3:14:13:81:e6:05:7b:c3:81:6a:
                    fe:4e:2b:16:7d:09:3d:d8:69:b3:85:5b:c3:e7:45:
                    cf:dd:17:5a:ce:cd:b2:6d:ef:c3:c1:bf:c4:c3:a2:
                    b9:e0:3e:cc:02:ee:f6:9c:5f:6f:d1:74:b0:b2:d5:
                    8f:d0:b9:57:ac:3e:b7:e9:24:7c:58:d4:c8:0c:30:
                    99:c7:21:33:99:24:58:e1:ee:77:72:66:7f:9e:11:
                    2b:55:f6:77:ba:ef:1e:7c:f9:20:df:22:bc:8a:ce:
                    b2:63:9f:fa:6c:74:fb:59:f8:a1:9c:33:5e:92:5f:
                    3f:5b:53:ab:c0:f7:01:fa:e5:1f:ba:47:66:4e:a6:
                    a5:7f:da:2c:e8:6a:d0:25:25:21:56:e2:0c:e6:31:
                    be:a9:f9:a1:d1:65:12:87:07:8c:19:44:80:2c:ea:
                    1f:19:42:80:c1:99:d2:cc:ba:8e:d7:f6:07:7b:72:
                    87:a5:17:1d:28:e4:29:05:bc:a7:97:e7:99:9b:5e:
                    fb:aa:05:90:92:6f:bd:14:3d:64:71:d8:25:4e:6f:
                    6a:fc:f6:9a:9d:b5:f9:aa:7f:7b:19:fa:b9:c4:22:
                    a0:64:a4:f6:1d:47:c3:45:6a:ce:4c:21:ba:06:fa:
                    75:74:1f:95:e4:f4:8f:dc:36:18:35:4e:92:c2:e5:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5B:14:BF:36:4F:63:42:EC:FE:3F:08:53:D5:EA:B5:75:B7:3C:98
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ce:5a:93:1f:12:44:55:ae:ea:d7:b2:b3:f5:77:04:42:94:
         59:03:e7:51:e7:17:b3:0f:c3:79:77:0b:75:34:64:d1:8d:86:
         92:6d:27:f4:e7:92:b4:90:f9:53:10:5a:1d:ad:9f:19:ab:fc:
         c3:05:e6:75:d0:e8:77:36:ab:7d:5b:ef:77:46:ee:b0:88:9c:
         f9:1f:d6:9b:86:40:c7:f5:6f:59:7b:f9:3e:b4:45:0b:34:b4:
         09:71:5a:f5:96:f7:42:15:de:5e:bb:ac:23:5c:c5:45:02:5e:
         9f:f2:6e:d1:e2:0e:86:b8:8a:cd:3e:cc:2d:13:8e:ed:75:db:
         5e:34:e5:98:d7:be:bb:57:1d:68:fa:48:68:80:b4:aa:e8:04:
         83:52:3f:78:cc:86:72:a3:f6:39:5a:29:38:07:66:c7:18:cc:
         45:7c:5d:5e:11:c5:57:6b:39:9e:ca:31:eb:2a:83:2a:9f:97:
         9c:33:b8:e1:0a:7c:c1:cd:8d:f5:5b:17:fb:64:f5:04:16:e5:
         e0:11:ea:e9:89:20:e4:0e:b0:c9:c1:e1:57:b7:a3:e2:82:3a:
         b9:1e:d0:74:fd:96:25:96:56:53:3c:cb:f7:37:ec:81:30:f8:
         6f:e0:52:e1:a9:5e:b6:62:bf:be:68:78:29:5b:44:ee:9e:fd:
         3d:9b:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:38 2025 by rpki-client