Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399162.roa
File:                     AS399162.roa (raw, json)
Hash identifier:          rlwEcwO8iey+gBdJf+MScfcR8wDgk1DjLIVZXVtuGp8=
Subject key identifier:   7F:9F:8E:20:8C:20:15:E2:27:25:3F:81:00:13:E9:01:4C:1B:27:2C
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       1702E076BDE6153B7756F4BE3C76A899A970D634
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399162.roa
Signing time:             Sat 06 Jan 2024 11:34:16 +0000
ROA not before:           Sat 06 Jan 2024 11:29:16 +0000
ROA not after:            Sat 04 Jan 2025 11:34:16 +0000
asID:                     399162
IP address blocks:        2607:f740:10:22::/64 maxlen: 64
                          2607:f740:10:23::/64 maxlen: 64
                          2607:f740:10:24::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 08:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:02:e0:76:bd:e6:15:3b:77:56:f4:be:3c:76:a8:99:a9:70:d6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jan  6 11:29:16 2024 GMT
            Not After : Jan  4 11:34:16 2025 GMT
        Subject: CN=7F9F8E208C2015E227253F810013E9014C1B272C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:92:f8:ad:e3:f9:4e:b0:5e:ce:6f:ed:6f:
                    00:ee:46:58:97:d5:d6:cb:61:6a:cb:aa:24:d0:6c:
                    14:dc:5c:ea:6d:da:db:77:86:ff:4e:90:35:96:02:
                    20:c9:67:c2:d0:06:84:68:de:92:78:29:a0:ec:ce:
                    ee:14:f4:68:9b:34:ed:6f:88:74:6a:4d:f0:5a:58:
                    fb:b6:1a:d4:6a:6f:0e:2c:56:a4:17:15:51:5e:bc:
                    f8:df:3a:f0:83:48:21:7f:1a:a7:eb:29:9c:fb:dc:
                    5b:b2:b1:79:f2:fb:8e:c0:fa:16:2e:4c:16:ba:ee:
                    66:4a:23:f8:69:79:19:86:85:8b:ed:3d:32:24:9c:
                    1e:39:b6:75:54:a8:7f:cf:46:2f:76:af:6e:79:f2:
                    8e:9e:62:a0:58:1d:af:6c:45:c9:44:81:fb:5e:4d:
                    4e:4b:db:07:6f:34:e1:93:ff:e3:f7:b6:df:4a:a7:
                    b4:b4:d8:94:3c:ab:f9:a0:6e:13:0d:1b:fc:fd:0e:
                    67:ad:fd:fe:92:8d:e9:d4:1c:2c:6a:28:d4:17:31:
                    b1:8e:a5:19:85:83:0a:49:2e:f1:cb:01:8d:41:50:
                    56:f3:c8:43:1a:59:da:4c:ec:a2:9e:b6:46:1c:92:
                    9b:c0:72:15:35:11:7c:43:ed:0a:4a:f6:04:f6:58:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9F:8E:20:8C:20:15:E2:27:25:3F:81:00:13:E9:01:4C:1B:27:2C
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399162.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:10:22::-2607:f740:10:24:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:17:ee:2d:86:3d:d4:90:85:9e:59:a4:86:56:57:e9:38:
         e1:e1:a7:f6:ad:8d:61:52:a6:24:0a:f3:96:6e:dd:03:b9:c5:
         5d:df:95:ad:48:d8:0f:ec:08:cf:ce:ba:78:c5:73:34:73:6c:
         11:57:92:74:94:ad:40:31:d6:e2:16:3d:1f:14:13:22:c1:c5:
         c3:6d:08:7a:78:11:93:d9:58:87:17:37:b3:5d:64:2c:13:8e:
         90:73:d7:66:44:83:f3:4e:16:3d:09:fa:ac:3d:4d:a3:ae:50:
         80:aa:8b:ae:2b:60:e6:ef:6a:16:64:ed:ae:71:f2:eb:69:dd:
         32:07:f9:df:76:c3:1e:60:60:82:99:8e:80:70:02:8f:a5:f8:
         45:d2:97:d6:af:8f:36:7f:59:90:bd:fc:06:4d:72:42:98:71:
         da:34:02:a6:8e:90:00:a5:e0:8a:4b:b7:b5:68:13:ef:81:10:
         4d:59:78:d6:e0:6c:28:1d:53:53:f1:58:d7:51:03:6b:66:ff:
         36:99:f9:ad:0e:77:66:89:c5:61:56:05:74:d0:06:a5:d5:76:
         f3:ca:0d:7d:0c:6a:7b:77:1a:aa:fb:5e:1c:91:08:59:31:23:
         9d:d0:0a:aa:53:b4:df:6e:03:3c:db:63:bc:33:e3:92:3e:a1:
         a3:80:59:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 07:43:08 2024 by rpki-client on console-fra.rpki-client.org