Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS202015.roa
File:                     AS202015.roa (raw, json)
Hash identifier:          v05HMQ2YT8jfxzUFzAvAYhmTB/Ur5q+HAyVtEHNbT6g=
Subject key identifier:   D5:AA:1A:6F:1F:84:6A:47:E9:9E:86:1D:FE:E6:81:8A:3D:46:C8:AF
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       75B3A83CE5F5FBB225CBAA2DA5F2DD32C79E4E5D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS202015.roa
Signing time:             Fri 12 Apr 2024 10:01:15 +0000
ROA not before:           Fri 12 Apr 2024 09:56:15 +0000
ROA not after:            Fri 11 Apr 2025 10:01:15 +0000
asID:                     202015
IP address blocks:        98.142.240.0/24 maxlen: 24
                          206.53.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b3:a8:3c:e5:f5:fb:b2:25:cb:aa:2d:a5:f2:dd:32:c7:9e:4e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 12 09:56:15 2024 GMT
            Not After : Apr 11 10:01:15 2025 GMT
        Subject: CN=D5AA1A6F1F846A47E99E861DFEE6818A3D46C8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:b4:5c:26:b9:de:40:5b:3a:6b:56:1a:52:
                    6e:b1:17:3d:82:69:37:01:47:95:da:3a:00:46:aa:
                    6a:03:23:3b:1b:7f:d4:05:8a:63:da:2a:a1:30:63:
                    c9:22:e5:ff:41:dd:28:2d:b4:38:dd:bc:9d:dd:c8:
                    c9:a9:52:41:e1:25:b0:b7:0f:26:9d:53:a3:d0:0b:
                    ed:8c:87:11:e1:c2:8b:98:ed:0d:75:97:68:5f:e1:
                    2b:7b:a1:d4:71:dc:ad:be:a1:b4:03:64:93:dd:67:
                    b1:c1:b7:77:0e:ad:da:b7:2c:3e:70:9d:d0:b1:3d:
                    8c:a4:e3:9b:eb:5d:ac:6d:f8:1b:d6:50:6e:87:ed:
                    3e:f6:e3:e6:66:8d:92:16:a9:f3:29:70:50:c8:e5:
                    f5:6f:60:87:c1:11:dd:70:39:0b:ac:60:65:24:b6:
                    01:f8:1d:90:58:8f:e0:5a:95:45:9b:ff:ad:9c:a0:
                    c3:44:64:74:14:af:1d:18:11:e4:4d:7c:21:ea:35:
                    cf:0d:c6:98:cc:0b:ec:ed:48:2e:70:e5:b5:5b:d7:
                    fd:ac:72:9d:77:f1:17:1f:4b:65:62:e3:bd:f5:60:
                    4b:db:7f:c7:86:1e:32:6e:d5:36:0c:1e:26:4a:cd:
                    98:45:ff:64:09:c6:3a:93:80:58:b6:d2:0d:2f:cf:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AA:1A:6F:1F:84:6A:47:E9:9E:86:1D:FE:E6:81:8A:3D:46:C8:AF
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS202015.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.240.0/24
                  206.53.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:02:04:4d:8d:51:44:f1:63:30:e8:2e:f3:2c:4a:ac:6a:e4:
         f0:9a:f7:25:b5:3f:07:5d:f5:1b:56:18:4b:37:2b:ee:11:b5:
         d2:f3:d4:8c:98:7d:e1:4a:64:47:c4:56:fb:05:78:e9:89:2a:
         8c:18:78:4c:c8:a5:fd:91:e7:2b:3a:b6:f1:9a:c8:fb:e6:50:
         29:87:92:39:02:94:09:64:29:d0:ed:56:24:5d:02:97:3e:68:
         70:0d:df:f9:36:68:8a:27:ee:0e:e7:62:b1:46:2b:95:dd:b1:
         81:f3:a5:1a:0c:c1:39:c3:91:fb:26:79:ac:d4:78:97:f2:2c:
         9f:3c:7e:f7:e5:ee:8d:a4:22:df:1c:55:4e:3d:5a:ac:fe:a1:
         8f:8d:fa:1d:76:6c:94:0c:54:af:b2:a4:fa:84:53:f7:b8:3f:
         6e:04:a6:57:fe:d3:ae:11:fd:8d:ac:68:a2:ac:1d:aa:09:95:
         7b:c6:d0:02:08:d6:6a:f6:db:10:3d:02:f9:99:6e:95:cc:8f:
         73:9e:e7:2e:d8:89:c2:e3:6f:e8:3c:e7:b7:23:6b:53:ed:2d:
         ff:ce:db:70:a7:9e:55:aa:05:ef:d8:eb:ca:c2:a3:e2:31:98:
         96:97:e5:05:99:44:10:85:8c:c8:d0:22:86:50:8e:01:62:72:
         04:8d:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:12:27 2024 by rpki-client on console-ams.rpki-client.org