Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          p60eS/0ZdHAK149V8mhEV5SamT+59GiiKpVgoDPyr1E=
Subject key identifier:   13:3B:77:F6:97:59:8C:D7:87:3D:5C:20:03:C6:45:9D:2C:11:FC:46
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       79EBBE89B9BB27DCA78EC4DAF60A63BA3139E7EF
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS64267.roa
Signing time:             Thu 18 Jan 2024 17:45:31 +0000
ROA not before:           Thu 18 Jan 2024 17:40:31 +0000
ROA not after:            Thu 16 Jan 2025 17:45:31 +0000
asID:                     64267
IP address blocks:        140.99.43.0/24 maxlen: 24
                          140.99.49.0/24 maxlen: 24
                          140.99.59.0/24 maxlen: 24
                          140.99.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:eb:be:89:b9:bb:27:dc:a7:8e:c4:da:f6:0a:63:ba:31:39:e7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jan 18 17:40:31 2024 GMT
            Not After : Jan 16 17:45:31 2025 GMT
        Subject: CN=133B77F697598CD7873D5C2003C6459D2C11FC46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:f2:e6:3d:c4:d7:60:dc:9f:97:e0:55:a7:
                    37:90:fe:ca:bb:2b:59:c2:b9:ff:a8:b3:32:50:06:
                    84:df:b8:ab:30:0e:d8:de:6d:1f:d3:5d:ce:35:b1:
                    52:4f:90:41:75:e1:7c:87:4e:83:2b:83:38:96:e9:
                    e3:0f:fc:93:4e:7c:99:8a:ac:a7:11:66:36:f3:ff:
                    79:b4:7f:c4:4a:d9:49:11:3c:18:65:bd:b7:e2:e4:
                    64:d9:b2:b1:fb:d4:c6:49:45:04:31:73:f1:fe:ab:
                    71:6d:a7:ec:e9:4a:71:3a:8b:30:49:74:85:db:43:
                    57:99:0a:16:ca:99:c2:8a:d6:f9:44:73:a2:27:d3:
                    fe:1c:d2:ac:7e:63:20:5b:56:ad:29:b7:f5:93:df:
                    8e:e3:79:9e:83:15:e1:dd:1e:5e:07:84:38:ff:e5:
                    12:61:00:fc:44:2d:06:94:cb:c0:5b:a9:97:a8:15:
                    e2:34:ba:02:c2:09:b5:7d:30:dd:5f:40:d9:4d:d6:
                    ee:42:47:8a:2c:fd:16:f1:57:e1:51:39:f6:f7:e2:
                    e9:a3:5a:ca:20:1f:d3:6d:67:2e:ba:af:73:64:c0:
                    69:82:01:bf:31:cf:eb:76:e1:84:09:7e:01:b9:a8:
                    56:bc:1f:f3:fa:10:d0:5c:2a:4d:b1:be:55:9b:f8:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3B:77:F6:97:59:8C:D7:87:3D:5C:20:03:C6:45:9D:2C:11:FC:46
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.43.0/24
                  140.99.49.0/24
                  140.99.59.0/24
                  140.99.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:04:4e:9d:15:89:01:dd:ab:3e:61:4e:a7:44:4d:cc:ab:
         9f:5c:17:91:37:e8:9b:52:3a:64:aa:49:8f:54:1e:cf:6b:1a:
         70:18:9a:19:21:6e:5c:68:dd:4a:7a:86:16:e4:84:8a:46:e1:
         5a:50:67:9f:12:0f:b6:bf:76:a5:c2:6e:c6:e6:58:f6:e5:75:
         eb:b2:e1:3f:25:4b:8b:43:89:aa:b8:ff:87:dd:e7:8a:10:aa:
         be:7c:17:35:24:cb:c7:68:f8:d0:c0:e9:62:3a:e8:55:02:56:
         be:3e:37:8a:03:d3:0c:a3:27:88:17:81:50:52:14:aa:b2:9a:
         20:64:a4:8f:18:0b:2f:ed:a7:10:8b:12:da:8b:74:2a:78:36:
         ab:05:29:ad:bb:2e:18:0b:c3:ea:88:3b:83:35:76:dd:7b:4a:
         5e:be:cb:d5:2d:7b:c4:8d:99:07:27:ca:bc:53:e2:d5:93:10:
         d3:3f:0c:37:05:20:f4:75:e3:e4:a2:28:6d:52:c2:63:fe:c2:
         db:b4:f2:9c:be:75:81:37:d4:0d:00:e8:92:61:57:81:6f:e0:
         f5:87:50:c1:9c:fd:3b:3d:57:b3:0d:69:55:8f:64:10:b5:65:
         cc:e4:ae:f9:10:64:76:25:0b:ba:bd:80:b0:a3:0d:d8:45:59:
         0f:79:9d:d6
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUeeu+ibm7J9ynjsTa9gpjujE55+8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwMTE4MTc0MDMxWhcNMjUwMTE2MTc0NTMx
WjAzMTEwLwYDVQQDEygxMzNCNzdGNjk3NTk4Q0Q3ODczRDVDMjAwM0M2NDU5RDJD
MTFGQzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri3y5j3E12Dc
n5fgVac3kP7KuytZwrn/qLMyUAaE37irMA7Y3m0f013ONbFST5BBdeF8h06DK4M4
lunjD/yTTnyZiqynEWY28/95tH/EStlJETwYZb234uRk2bKx+9TGSUUEMXPx/qtx
bafs6UpxOoswSXSF20NXmQoWypnCitb5RHOiJ9P+HNKsfmMgW1atKbf1k9+O43me
gxXh3R5eB4Q4/+USYQD8RC0GlMvAW6mXqBXiNLoCwgm1fTDdX0DZTdbuQkeKLP0W
8VfhUTn29+Lpo1rKIB/TbWcuuq9zZMBpggG/Mc/rduGECX4BuahWvB/z+hDQXCpN
sb5Vm/iGFwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFBM7d/aXWYzXhz1cIAPGRZ0s
EfxGMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzY0MjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAjGMrAwQAjGMxAwQAjGM7AwQAjGNN
MA0GCSqGSIb3DQEBCwUAA4IBAQAVTAROnRWJAd2rPmFOp0RNzKufXBeRN+ibUjpk
qkmPVB7PaxpwGJoZIW5caN1KeoYW5ISKRuFaUGefEg+2v3alwm7G5lj25XXrsuE/
JUuLQ4mquP+H3eeKEKq+fBc1JMvHaPjQwOliOuhVAla+PjeKA9MMoyeIF4FQUhSq
spogZKSPGAsv7acQixLai3QqeDarBSmtuy4YC8PqiDuDNXbde0pevsvVLXvEjZkH
J8q8U+LVkxDTPww3BSD0dePkoihtUsJj/sLbtPKcvnWBN9QNAOiSYVeBb+D1h1DB
nP07PVezDWlVj2QQtWXM5K75EGR2JQu6vYCwow3YRVkPeZ3W
-----END CERTIFICATE-----
Generated at Sun May 5 09:50:18 2024 by rpki-client on console-fra.rpki-client.org