Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
File:                     AS400810.roa (raw, json)
Hash identifier:          BRa7imxuetNwUDMFHlRTpBzUhvcAlGMKbOOHc86CgSg=
Subject key identifier:   57:1F:43:84:FA:DF:D7:A0:29:F4:89:F0:3A:03:D0:C5:0B:68:E9:F1
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       19AE1DFA303032F32EC3EE7E3C0340ADBF6C9F6E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
Signing time:             Wed 20 Dec 2023 18:01:11 +0000
ROA not before:           Wed 20 Dec 2023 17:56:11 +0000
ROA not after:            Wed 18 Dec 2024 18:01:11 +0000
asID:                     400810
IP address blocks:        98.142.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ae:1d:fa:30:30:32:f3:2e:c3:ee:7e:3c:03:40:ad:bf:6c:9f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 20 17:56:11 2023 GMT
            Not After : Dec 18 18:01:11 2024 GMT
        Subject: CN=571F4384FADFD7A029F489F03A03D0C50B68E9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:22:10:68:e6:e1:0b:fe:f6:ee:b0:ee:e9:
                    2d:4c:32:13:56:08:aa:7d:68:9b:10:07:10:c1:62:
                    e8:41:52:b5:f3:8a:fd:1b:cb:0e:bf:1c:d4:e7:be:
                    7c:1f:39:95:11:cc:05:12:4c:83:af:44:a3:3a:c1:
                    2e:10:9e:2c:68:9e:d8:44:f7:f7:ff:c4:fb:b5:dd:
                    0f:13:ad:cd:e9:98:1a:0b:f2:82:d7:6a:5e:23:54:
                    7c:83:49:22:3a:20:88:e1:64:78:19:ac:aa:87:82:
                    98:16:39:bc:e5:b2:14:6d:91:46:ed:0f:fa:cc:44:
                    c7:70:91:a0:e7:a5:5a:31:6a:ce:28:dd:f8:5b:6d:
                    4c:5c:52:72:5b:52:b4:c9:ec:91:c6:7d:66:5c:57:
                    22:5b:ee:ef:64:f9:86:92:11:3c:b8:cc:3a:c0:57:
                    0c:8e:66:43:a2:c7:34:61:d5:61:05:43:85:81:f3:
                    aa:4d:b7:7b:b5:58:ea:8d:31:a9:23:be:b0:8c:35:
                    e6:b5:f6:f1:8e:4a:29:77:b1:d0:94:22:17:82:37:
                    5e:05:7d:91:52:eb:8b:20:fa:0e:1b:29:4b:e1:ad:
                    34:3a:ed:37:8e:29:be:ab:c2:e8:0d:ca:75:8a:e4:
                    2e:0f:37:e3:5b:9a:4b:6c:8e:7c:44:fc:1e:2b:06:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1F:43:84:FA:DF:D7:A0:29:F4:89:F0:3A:03:D0:C5:0B:68:E9:F1
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:fe:6a:5e:77:be:66:54:1e:17:62:93:a7:3c:81:31:ae:ac:
         6c:d2:ba:1d:03:06:7c:e6:5d:dd:55:e1:3b:b7:c5:a4:2e:8e:
         2a:3e:c5:62:08:3d:e9:13:c4:37:53:e2:5d:66:d8:4b:98:81:
         81:46:a2:6d:1e:3f:0f:21:be:2c:4a:ad:38:68:1c:65:7d:50:
         67:75:e1:20:12:a8:aa:4a:64:92:ed:00:05:ec:7e:b3:c3:28:
         b6:f3:d2:22:85:3c:16:e8:2d:44:36:a5:6f:db:f2:d5:0a:de:
         5e:ac:04:ee:ce:80:65:4e:ee:d1:eb:b8:b6:a3:ba:83:94:78:
         64:e9:66:a2:56:f1:4c:65:a7:f6:59:78:ce:6b:72:09:72:81:
         ad:89:98:82:c8:af:a2:04:58:8a:e3:42:98:26:10:26:57:71:
         2b:e9:f8:0b:9e:42:23:bb:fc:03:34:65:ee:ca:e4:ab:f9:9a:
         b1:a2:cb:72:ec:82:b8:d6:9b:42:fc:34:c0:7b:a8:35:45:10:
         13:04:74:56:a6:1a:bc:ad:1b:ac:4d:23:66:6d:11:fe:0e:1e:
         39:a1:de:12:55:f1:89:78:8a:a1:89:d3:5e:0a:f2:c0:fb:16:
         40:c5:e5:4f:d3:91:6f:a5:00:02:19:4e:b5:90:69:8d:8c:b4:
         ef:49:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org