Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399157.roa
File:                     AS399157.roa (raw, json)
Hash identifier:          TCHfJyWo2zrpVRfBKy21h3iv8t2dYPJO5z51A8X2S6E=
Subject key identifier:   38:4E:04:36:FD:2E:8D:30:8D:7D:6A:0D:E0:C1:93:97:02:DF:5B:4E
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       2FEA646BAD975C275932E18B62BFFC2BEFA517F5
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399157.roa
Signing time:             Sat 06 Jan 2024 10:34:13 +0000
ROA not before:           Sat 06 Jan 2024 10:29:13 +0000
ROA not after:            Sat 04 Jan 2025 10:34:13 +0000
asID:                     399157
IP address blocks:        2607:f740:17:38::/64 maxlen: 64
                          2607:f740:17:39::/64 maxlen: 64
                          2607:f740:17:40::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 01:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ea:64:6b:ad:97:5c:27:59:32:e1:8b:62:bf:fc:2b:ef:a5:17:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jan  6 10:29:13 2024 GMT
            Not After : Jan  4 10:34:13 2025 GMT
        Subject: CN=384E0436FD2E8D308D7D6A0DE0C1939702DF5B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:49:b2:6f:04:4c:dd:8d:5c:ef:da:0b:4d:
                    56:88:db:9a:f2:58:c8:8b:46:70:58:36:c6:55:fb:
                    f9:50:24:bc:64:20:d5:5a:74:45:53:77:f7:9b:b6:
                    e4:fe:75:7b:60:0c:64:b5:d7:fd:b2:d3:8d:5e:ed:
                    72:96:34:0a:cd:62:e8:e2:d8:6a:ea:20:39:e4:49:
                    3c:d5:1e:c4:38:19:53:2a:50:aa:dd:6a:7e:58:7e:
                    4b:b9:4c:8a:c7:ae:c5:1c:80:22:85:62:c9:c9:4e:
                    2d:0e:c5:99:11:7e:d3:33:b8:cc:10:c7:1d:f4:59:
                    1a:92:4a:53:f3:fe:bf:bd:84:c2:3a:fa:40:34:ce:
                    fa:a5:03:70:f3:40:4c:78:ab:59:be:83:24:68:30:
                    1c:c6:5c:66:9f:02:89:8d:9c:e8:ca:d4:0b:2c:5b:
                    26:d2:d8:95:dc:fa:4a:fa:12:35:34:d5:0a:c7:39:
                    86:d7:69:e4:06:8d:9e:af:98:2b:37:e8:a7:f4:00:
                    49:f6:8e:3e:db:97:1b:4f:60:78:60:6e:25:1b:d0:
                    ad:d1:6b:35:f9:f2:58:f4:20:02:f9:7f:d1:05:90:
                    8b:6e:98:b8:06:6b:35:67:12:51:00:4f:d7:d3:7b:
                    02:34:ac:9a:c0:cc:c5:76:d0:9f:40:a2:f3:f7:1a:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4E:04:36:FD:2E:8D:30:8D:7D:6A:0D:E0:C1:93:97:02:DF:5B:4E
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399157.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:17:38::/63
                  2607:f740:17:40::/64

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:1c:a4:b4:f8:9c:de:d9:1c:7f:07:f8:8d:4f:67:03:00:
         d6:58:02:fe:2b:48:ea:fb:ab:64:7f:44:28:8f:5e:a6:e1:46:
         51:44:7f:d0:e2:5c:ba:98:85:98:b1:d3:95:06:2f:e0:34:4c:
         bb:30:cf:b8:50:09:ed:8a:91:25:1a:ed:24:2b:63:c8:98:33:
         21:36:52:21:2a:da:16:ca:20:4e:db:84:08:f4:85:b5:7c:49:
         db:10:96:a4:1b:71:19:54:2f:0e:a7:d1:cd:fc:11:cb:24:86:
         92:6c:55:ab:b6:8b:39:72:2c:e8:0b:15:22:04:81:9f:4e:4c:
         0e:be:cd:76:1b:d0:61:62:25:dc:3d:2f:d0:e0:9f:7d:2e:90:
         ef:2c:f5:cc:fa:cf:e3:aa:3f:50:fb:c6:50:bb:f7:d4:9b:8f:
         b7:82:4a:74:c9:60:f8:93:ef:6e:da:e2:fe:d5:1f:b8:45:f2:
         a2:df:20:5c:42:ab:54:4a:eb:4e:4c:84:86:53:ce:0a:24:c7:
         5b:de:15:e6:19:ac:09:b5:1d:f0:21:84:88:f6:e1:2e:37:a6:
         e1:d2:85:9d:ea:6f:78:0d:79:26:aa:de:1c:8c:9c:ae:cf:4a:
         32:4b:64:b1:8a:a0:42:ff:fd:51:5a:96:b6:0b:48:9b:aa:fa:
         c8:96:ea:97
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUL+pka62XXCdZMuGLYr/8K++lF/UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQwMTA2MTAyOTEzWhcNMjUwMTA0MTAzNDEz
WjAzMTEwLwYDVQQDEygzODRFMDQzNkZEMkU4RDMwOEQ3RDZBMERFMEMxOTM5NzAy
REY1QjRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC1Jsm8ETN2N
XO/aC01WiNua8ljIi0ZwWDbGVfv5UCS8ZCDVWnRFU3f3m7bk/nV7YAxktdf9stON
Xu1yljQKzWLo4thq6iA55Ek81R7EOBlTKlCq3Wp+WH5LuUyKx67FHIAihWLJyU4t
DsWZEX7TM7jMEMcd9FkakkpT8/6/vYTCOvpANM76pQNw80BMeKtZvoMkaDAcxlxm
nwKJjZzoytQLLFsm0tiV3PpK+hI1NNUKxzmG12nkBo2er5grN+in9ABJ9o4+25cb
T2B4YG4lG9Ct0Ws1+fJY9CAC+X/RBZCLbpi4Bms1ZxJRAE/X03sCNKyawMzFdtCf
QKLz9xon3QIDAQABo4ICjzCCAoswHQYDVR0OBBYEFDhOBDb9Lo0wjX1qDeDBk5cC
31tOMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzM5OTE1Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wHAQCAAIwFgMJASYH90AAFwA4AwkAJgf3QAAXAEAw
DQYJKoZIhvcNAQELBQADggEBAEu5HKS0+Jze2Rx/B/iNT2cDANZYAv4rSOr7q2R/
RCiPXqbhRlFEf9DiXLqYhZix05UGL+A0TLswz7hQCe2KkSUa7SQrY8iYMyE2UiEq
2hbKIE7bhAj0hbV8SdsQlqQbcRlULw6n0c38EcskhpJsVau2izlyLOgLFSIEgZ9O
TA6+zXYb0GFiJdw9L9Dgn30ukO8s9cz6z+OqP1D7xlC799Sbj7eCSnTJYPiT727a
4v7VH7hF8qLfIFxCq1RK605MhIZTzgokx1veFeYZrAm1HfAhhIj24S43puHShZ3q
b3gNeSaq3hyMnK7PSjJLZLGKoEL//VFalrYLSJuq+siW6pc=
-----END CERTIFICATE-----
Generated at Mon May 13 00:55:00 2024 by rpki-client on console-fra.rpki-client.org