Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399159.roa
File:                     AS399159.roa (raw, json)
Hash identifier:          u1bmAzwDDksjjjlar8WClhjkFw9ZfA2o2uqvpOd4uzM=
Subject key identifier:   5D:63:8A:E0:1F:C9:BD:6C:A7:12:FB:33:E0:AE:28:2E:71:F9:98:50
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       36E5C032AD632E39CD23CC5C73C9926597A78F31
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399159.roa
Signing time:             Sat 06 Jan 2024 11:34:16 +0000
ROA not before:           Sat 06 Jan 2024 11:29:16 +0000
ROA not after:            Sat 04 Jan 2025 11:34:16 +0000
asID:                     399159
IP address blocks:        2607:f740:d:32::/64 maxlen: 64
                          2607:f740:d:33::/64 maxlen: 64
                          2607:f740:d:34::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e5:c0:32:ad:63:2e:39:cd:23:cc:5c:73:c9:92:65:97:a7:8f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jan  6 11:29:16 2024 GMT
            Not After : Jan  4 11:34:16 2025 GMT
        Subject: CN=5D638AE01FC9BD6CA712FB33E0AE282E71F99850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:9d:13:c9:e8:fe:31:3d:15:1a:f0:50:37:
                    ab:cc:a7:cf:35:9d:03:27:82:66:20:d9:77:40:db:
                    c9:01:44:0d:f3:32:48:40:36:c4:ed:1a:ea:4a:3a:
                    77:d3:fe:97:ba:87:ec:4e:b6:de:f8:85:75:46:19:
                    12:6e:b7:11:a8:69:cb:91:0a:3c:a1:fe:51:81:25:
                    1f:c0:d2:0e:a0:c9:37:b2:bf:9a:c1:46:e3:36:77:
                    f3:5d:1b:bf:8a:57:ee:5d:5c:fa:d2:13:05:28:b7:
                    48:dd:5d:16:b9:5e:9c:81:76:74:78:4a:a5:b9:48:
                    fe:66:bc:cd:f4:ba:a9:9f:ce:a4:e6:7f:f2:0c:78:
                    d9:cf:5b:a6:74:6a:01:97:7f:a7:46:2e:0e:e5:f9:
                    c9:61:c3:2e:63:24:aa:e8:8d:05:c8:65:a0:dc:91:
                    43:df:5a:cb:6c:57:d9:5c:a7:fc:5a:df:cc:99:a4:
                    08:1e:03:cb:03:fc:4a:43:39:c7:a2:92:38:1c:8c:
                    ef:dc:2b:91:8d:fe:63:a1:c6:a7:3d:2c:38:5b:61:
                    5b:bd:ef:c6:c4:60:13:bf:d7:5d:b8:ec:ec:a3:dd:
                    36:0d:9d:fe:62:e8:61:11:10:88:be:3a:d2:67:6b:
                    70:57:e4:03:28:69:e8:d1:bc:26:f7:f9:ea:b0:54:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:63:8A:E0:1F:C9:BD:6C:A7:12:FB:33:E0:AE:28:2E:71:F9:98:50
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399159.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:d:32::-2607:f740:d:34:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6d:cd:9d:e4:9d:72:82:6a:c8:d4:a2:ed:89:a8:82:10:20:c0:
         51:23:b4:16:82:79:c0:04:2b:c3:5e:a3:83:fa:c4:13:a1:32:
         15:06:73:74:42:ba:b9:b5:a4:14:ae:81:3f:39:f9:21:35:8c:
         a2:6c:3c:93:0b:77:e8:30:1b:f6:fc:49:57:d8:ca:c1:0e:b4:
         5d:26:03:00:b6:46:e5:c6:27:45:96:43:a5:81:52:94:ea:36:
         7b:1f:42:8f:cd:b0:4b:08:3f:d4:c9:5e:e6:8d:9c:1f:c2:b8:
         e4:98:33:b2:1d:c9:40:f9:16:c3:f2:83:2c:23:f5:6e:e8:24:
         aa:c8:ae:6f:c8:d7:1c:0b:a9:36:49:30:e5:9d:07:13:ad:43:
         35:d3:59:bc:a3:b8:c4:53:84:a1:17:5c:a6:de:d3:c8:0b:a4:
         7d:cf:c8:d7:ca:f2:5a:40:e6:89:77:b8:20:fd:26:42:1b:1a:
         a1:43:6d:5e:40:a8:de:14:4d:e0:0b:fb:6d:db:bf:ae:6d:b7:
         46:7a:ec:a5:e9:b2:7c:5c:47:a7:ba:59:7d:02:dd:ca:e4:d4:
         3c:c4:e8:a0:f6:f6:ea:05:22:04:c4:ef:1b:4f:7a:92:a7:ca:
         65:37:62:6b:da:40:5c:cb:55:e6:cd:d5:4b:f2:d8:44:86:c6:
         ed:d9:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:46:01 2024 by rpki-client on console-ams.rpki-client.org