Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399155.roa
File:                     AS399155.roa (raw, json)
Hash identifier:          YMSlgG/tXN2Ox0gvb3PLiZpl6RI/8orpbrIh/VLvdC4=
Subject key identifier:   3A:91:0D:96:02:F2:2F:74:21:CA:95:15:60:15:99:74:64:1A:9E:2D
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       09A8A0A88F34563325EC4684D40FCA402FC0713B
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399155.roa
Signing time:             Sat 06 Jan 2024 10:34:13 +0000
ROA not before:           Sat 06 Jan 2024 10:29:13 +0000
ROA not after:            Sat 04 Jan 2025 10:34:13 +0000
asID:                     399155
IP address blocks:        2607:f740:e:39::/64 maxlen: 64
                          2607:f740:e:40::/64 maxlen: 64
                          2607:f740:e:41::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a8:a0:a8:8f:34:56:33:25:ec:46:84:d4:0f:ca:40:2f:c0:71:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jan  6 10:29:13 2024 GMT
            Not After : Jan  4 10:34:13 2025 GMT
        Subject: CN=3A910D9602F22F7421CA951560159974641A9E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:ea:74:9b:e9:66:14:c7:3c:90:00:09:7c:
                    74:db:cd:8b:76:af:51:d4:f5:9f:78:a7:98:53:82:
                    d4:5d:7c:ab:63:07:18:ee:31:8b:a2:50:9e:c5:87:
                    a2:a1:57:b4:80:c6:95:78:43:48:89:e0:d1:54:0e:
                    2b:ba:fd:3a:74:11:9d:39:6d:06:05:8a:74:e7:21:
                    19:dd:fc:b4:f0:34:fb:cc:38:e6:ef:66:e3:73:29:
                    fe:38:a5:d5:bb:2d:c2:d3:f5:95:4b:3c:57:d6:88:
                    c0:e7:d8:1b:1f:ff:6b:d1:e1:15:62:94:8c:c4:f4:
                    ef:43:61:7c:e9:87:f2:d5:8a:86:ac:6b:8d:10:1f:
                    3c:a7:a4:ef:12:fc:52:9a:b5:c3:b6:f0:18:ad:8f:
                    83:e5:0d:d4:10:9a:af:96:ae:30:29:d5:d4:33:17:
                    4a:d4:6e:2d:bd:46:d5:ea:5d:8e:7a:8f:30:d7:5a:
                    23:81:6e:dd:55:47:23:81:ad:8e:fa:c4:37:80:2e:
                    e7:34:03:04:ae:20:a5:8a:ff:45:e2:23:49:ab:bb:
                    99:98:86:3a:ac:fe:75:9f:05:38:94:38:d9:2e:c5:
                    5f:8e:24:db:da:70:db:41:0b:9c:07:23:3e:65:a1:
                    24:20:4a:ce:2b:38:c0:5d:2a:b9:8f:b1:15:7a:07:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:91:0D:96:02:F2:2F:74:21:CA:95:15:60:15:99:74:64:1A:9E:2D
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399155.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:e:39::/64
                  2607:f740:e:40::/63

    Signature Algorithm: sha256WithRSAEncryption
         42:88:d3:d0:b8:b4:b7:77:96:13:ea:32:ef:98:7a:01:ea:f3:
         83:a6:f2:0d:8c:f7:63:e8:32:25:be:ab:95:be:66:6b:04:73:
         50:85:18:21:f6:8c:91:b0:aa:23:1f:bc:b5:5f:54:12:ee:17:
         62:11:1c:06:4f:98:81:c0:22:3c:57:3d:91:17:c2:c3:56:b2:
         15:a7:b8:79:42:19:b1:22:aa:e7:05:25:c9:ff:c4:6d:db:00:
         e3:52:97:71:8d:25:13:32:ac:ef:1e:45:fb:97:f8:b3:d5:90:
         0c:c6:c6:b2:92:05:7f:21:3c:da:54:41:e6:25:b5:be:50:e2:
         f4:c3:49:ee:3e:50:11:f1:e8:94:7a:c4:cb:48:e9:1f:c2:73:
         d1:d0:30:34:f6:96:cd:ca:ca:9d:ad:d9:1b:6a:1e:1f:89:d4:
         cb:aa:fa:57:5e:e7:4f:5f:ad:14:10:db:3f:3c:82:66:60:84:
         b2:3a:b0:91:c2:14:78:b8:4f:42:0c:e1:a2:0e:8c:ef:b0:58:
         56:64:1e:32:52:8d:0a:5e:7f:32:55:2e:f1:a4:43:02:45:b8:
         0d:44:38:00:e6:70:33:b0:a6:d0:62:29:bb:08:53:63:e0:78:
         89:ea:c4:11:1c:90:d3:93:96:b7:60:d3:d7:00:8c:a5:5c:a9:
         59:46:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:16:04 2024 by rpki-client on console-fra.rpki-client.org