Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          NSBMnnmZayIOJhg0+kZuwuSDc/iKzxQkKSnSbr6Ray0=
Subject key identifier:   07:BB:79:2E:D7:49:5E:ED:AB:98:20:E2:3E:C1:85:B2:20:B7:05:CA
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       39F0ED6FFAAC0261D07C34951597CE8FB061CBED
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time:             Tue 16 Apr 2024 00:01:45 +0000
ROA not before:           Mon 15 Apr 2024 23:56:45 +0000
ROA not after:            Tue 15 Apr 2025 00:01:45 +0000
asID:                     834
IP address blocks:        140.99.45.0/24 maxlen: 24
                          140.99.79.0/24 maxlen: 24
                          140.99.210.0/23 maxlen: 24
                          140.99.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 04:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f0:ed:6f:fa:ac:02:61:d0:7c:34:95:15:97:ce:8f:b0:61:cb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 15 23:56:45 2024 GMT
            Not After : Apr 15 00:01:45 2025 GMT
        Subject: CN=07BB792ED7495EEDAB9820E23EC185B220B705CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:8a:56:f8:6d:fe:b6:75:19:64:d7:ae:b8:
                    7f:c4:a9:c0:d4:35:f0:eb:e7:7c:33:8f:69:bf:86:
                    3b:84:a2:da:bf:1b:b1:9a:8e:83:e1:14:49:d5:f8:
                    04:2d:ec:14:73:7b:b9:19:f0:76:70:6e:b2:4f:80:
                    c9:4c:50:db:91:3f:f2:1a:6e:45:73:88:ff:16:ba:
                    9c:ac:79:3b:9e:31:37:94:e4:c2:df:56:bc:ac:ca:
                    95:e7:90:0d:e6:08:ef:fc:65:e1:0a:5e:84:f1:b2:
                    40:5c:1f:ec:c5:57:db:b9:38:c0:e4:76:bb:df:b5:
                    c7:53:86:31:74:98:fd:dd:05:10:02:86:cd:63:f7:
                    e6:aa:6b:67:18:95:44:82:6b:a0:2b:7d:86:e4:80:
                    ab:26:29:22:7e:88:cb:6b:0e:fa:da:80:ce:11:bf:
                    fa:bc:18:cd:2e:db:65:15:66:bb:56:04:87:67:b6:
                    51:5a:f9:9a:cc:02:0e:4d:7f:5d:c1:3d:10:25:91:
                    ee:cb:aa:0e:a2:cb:73:2a:21:15:4d:38:9f:9a:d3:
                    d0:09:79:58:be:45:30:27:e2:89:86:9d:fd:9a:9f:
                    cb:9b:db:9b:f9:5a:3c:4e:31:4e:eb:bc:a7:da:2a:
                    89:ba:9d:eb:7c:19:cf:50:df:0e:f7:00:73:e9:6d:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BB:79:2E:D7:49:5E:ED:AB:98:20:E2:3E:C1:85:B2:20:B7:05:CA
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.45.0/24
                  140.99.79.0/24
                  140.99.210.0/23
                  140.99.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:22:63:e1:eb:8e:28:33:5a:b4:fb:c0:21:8a:12:0c:3e:d5:
         c8:b4:ca:3a:0d:52:24:f1:9d:1b:aa:46:e1:11:cf:8e:24:54:
         07:3f:2b:78:08:cc:e9:45:13:2d:1b:cf:cc:3b:89:5c:98:bc:
         f5:7a:fd:5e:48:ed:d8:1f:1d:b4:6a:17:14:2e:3a:b4:9e:ef:
         54:24:db:09:10:e5:25:f3:89:4c:16:1c:38:93:e4:a6:23:54:
         6d:0a:80:b8:4c:ab:cd:f6:b7:f7:d3:90:85:fc:9b:6c:5d:85:
         e1:a9:22:d2:bf:76:8b:9b:14:d6:c7:48:40:ca:9d:43:39:a7:
         47:c1:40:ea:ea:d9:bb:66:eb:e1:f7:69:a2:0c:84:d5:4a:8e:
         97:4f:f3:c2:df:44:a1:f6:9e:8d:91:4b:5c:01:ba:9f:78:f6:
         d3:ef:03:e4:06:fd:b1:54:24:c3:81:9a:2c:22:0e:b5:ae:d1:
         16:e8:bb:17:35:6c:a2:c1:3d:69:5c:0d:06:9b:9a:36:3e:98:
         34:93:ef:a4:c3:f1:e6:8b:2b:71:ce:79:ed:ad:e8:ab:da:87:
         f0:36:b6:93:43:3f:ef:30:5d:df:51:cc:00:c7:a8:ce:a5:8b:
         d3:ae:97:b5:99:61:58:30:ef:02:7d:7e:9a:6f:01:bf:a8:de:
         1e:ef:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:46:21 2024 by rpki-client on console-ams.rpki-client.org