Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS141968.roa
File:                     AS141968.roa (raw, json)
Hash identifier:          CFCg65slhdX3GmzxguOOh5WBKjqCQD5g1e+2USx23w0=
Subject key identifier:   42:EB:C8:F6:9B:DD:7F:BC:94:FA:F1:1F:C7:BF:99:48:7B:43:44:FB
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4DC4340CA60924DEB2033363D1D77BE86176A43E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS141968.roa
Signing time:             Mon 12 Feb 2024 10:01:14 +0000
ROA not before:           Mon 12 Feb 2024 09:56:14 +0000
ROA not after:            Mon 10 Feb 2025 10:01:14 +0000
asID:                     141968
IP address blocks:        98.142.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c4:34:0c:a6:09:24:de:b2:03:33:63:d1:d7:7b:e8:61:76:a4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 12 09:56:14 2024 GMT
            Not After : Feb 10 10:01:14 2025 GMT
        Subject: CN=42EBC8F69BDD7FBC94FAF11FC7BF99487B4344FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:aa:b4:66:46:95:38:6b:29:23:1e:d6:87:
                    6d:5a:89:aa:86:24:3e:c3:26:ce:ca:f7:62:6e:a6:
                    44:82:55:1b:33:cc:e5:9a:93:9a:82:6f:31:aa:33:
                    14:9d:c1:a4:ee:2f:06:2e:74:01:90:25:a5:87:34:
                    32:f5:42:d3:a9:c0:66:00:7a:00:90:df:f7:ff:20:
                    10:d7:74:36:a9:f9:a9:9b:53:d0:9b:e7:78:8f:b0:
                    67:b6:e1:ce:b1:15:40:47:ce:4f:a2:68:13:5f:be:
                    dd:80:e4:92:fd:6d:e9:f8:ff:99:57:4d:98:17:7e:
                    2c:89:ec:5d:d7:a1:8b:8c:73:6b:d7:53:65:b0:1e:
                    d3:05:5d:49:21:ba:4e:82:b0:5a:75:d4:f5:f4:fd:
                    11:1e:87:4d:9a:6c:81:83:af:48:83:d1:5a:b7:e9:
                    31:fa:b3:e8:2a:b7:44:76:92:6c:5f:35:21:2b:05:
                    77:ac:e9:d5:5b:de:99:83:10:37:c5:2d:09:c1:79:
                    93:76:ee:d2:b2:61:f8:7c:74:d9:0f:cd:fc:a0:c3:
                    28:c1:5b:df:df:b3:fd:4c:0e:c2:62:7e:d8:9c:e0:
                    26:05:e5:64:4a:00:1d:11:29:57:c5:84:27:92:0e:
                    7b:2c:42:d6:c0:ca:58:25:fa:a4:88:fe:a9:5e:54:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EB:C8:F6:9B:DD:7F:BC:94:FA:F1:1F:C7:BF:99:48:7B:43:44:FB
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS141968.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:67:fc:7d:27:1d:92:8f:3f:7c:57:a9:c5:41:1c:0d:ec:39:
         21:de:f1:69:f2:c2:96:62:85:f7:5b:81:49:5a:1b:86:7b:c8:
         c9:bb:4a:69:cf:c2:ca:32:b8:f5:00:0d:57:0f:8a:de:4f:19:
         de:c9:54:cc:70:f5:62:cf:7c:17:2e:3b:46:6f:0e:4d:59:fc:
         1e:a6:fd:a3:61:bd:4d:cc:29:46:9d:4c:58:02:2d:5c:d2:e0:
         f8:70:a4:ba:7d:1a:f1:1b:ac:c9:68:95:e6:ce:6c:c2:b3:a8:
         af:33:e6:e3:6e:02:ce:7a:3a:62:eb:cb:f4:01:c6:65:47:9e:
         5d:44:ab:d8:79:43:0e:76:e2:5b:78:b4:35:54:ec:b3:71:79:
         4b:bc:c2:ee:b4:ac:ad:eb:16:20:d8:7a:72:0c:8e:2a:a8:fd:
         30:71:7c:55:74:3f:df:6f:04:b1:87:03:be:b9:b1:79:5b:8c:
         8e:99:83:d5:80:d5:ed:b2:79:96:46:b9:a2:68:ac:69:21:2c:
         3b:21:10:55:fc:df:4a:f5:ac:a6:a0:26:89:3d:eb:53:6b:8a:
         c9:03:a9:fe:70:32:db:f4:b4:a8:31:5d:cd:42:e1:bd:d3:67:
         54:4b:49:85:b6:c6:e1:f9:86:f9:5d:0e:16:54:33:b1:31:8f:
         47:cc:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:07 2024 by rpki-client on console-fra.rpki-client.org