Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS140902.roa
File:                     AS140902.roa (raw, json)
Hash identifier:          MWpfnhaMgV/jNMj6f40tWR/QwOfNvpLJhKmPogQrpZo=
Subject key identifier:   8E:2A:0E:02:56:EF:01:A6:B8:A3:AE:FC:BE:4C:68:74:21:73:08:A6
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       042DAF93059D844FE894DA75D24B0B454817AD4F
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS140902.roa
Signing time:             Thu 26 Oct 2023 08:26:02 +0000
ROA not before:           Thu 26 Oct 2023 08:21:02 +0000
ROA not after:            Thu 24 Oct 2024 08:26:02 +0000
asID:                     140902
IP address blocks:        66.225.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 10:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2d:af:93:05:9d:84:4f:e8:94:da:75:d2:4b:0b:45:48:17:ad:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Oct 26 08:21:02 2023 GMT
            Not After : Oct 24 08:26:02 2024 GMT
        Subject: CN=8E2A0E0256EF01A6B8A3AEFCBE4C6874217308A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:2d:8d:45:7c:39:4c:8a:39:d0:28:f9:3b:
                    56:5a:78:15:f4:e6:af:4b:cf:f7:22:43:e6:47:14:
                    12:5e:84:fa:b6:90:87:3e:1f:a9:6e:eb:8d:ee:1a:
                    94:cc:b1:72:80:2d:76:88:7a:52:9f:62:7b:ee:5a:
                    33:9c:d6:ec:44:9b:6d:0a:ae:c7:13:bb:6b:a1:59:
                    d7:64:7e:66:27:d9:31:9d:a7:9f:c3:88:8a:48:9c:
                    c4:3c:9f:19:f0:ca:e3:16:df:5b:a9:9f:5c:cc:92:
                    f6:40:14:77:d5:da:05:28:1a:2e:37:ac:8f:a6:fc:
                    e7:05:46:37:d2:ea:ac:9a:02:55:35:27:2f:8d:18:
                    87:3a:c5:76:a3:70:dc:a1:d7:4f:2e:54:ad:f7:e1:
                    7b:ae:b3:eb:d7:70:6e:75:c7:5b:b0:14:73:39:14:
                    45:c1:b7:29:83:0a:d6:fc:f7:b5:b2:43:95:f0:61:
                    f1:49:9a:29:c9:cc:83:f0:94:96:96:9c:69:db:7c:
                    87:f2:6b:33:c8:be:aa:7e:83:d9:a2:07:57:f5:26:
                    37:ca:72:7d:b2:51:07:70:4a:ad:71:49:b9:9a:79:
                    8d:37:e7:64:f3:52:78:85:3a:08:d1:5f:0a:39:ea:
                    34:75:0f:70:1b:81:34:63:d2:72:cb:60:a4:7d:46:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2A:0E:02:56:EF:01:A6:B8:A3:AE:FC:BE:4C:68:74:21:73:08:A6
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS140902.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:9e:bc:e0:c4:e3:e1:43:8e:f7:a3:4e:e9:41:22:d2:46:2d:
         dc:c9:06:dd:5b:0a:32:aa:66:a9:11:8b:d6:29:46:72:4e:bc:
         85:90:63:e0:33:98:92:5c:c0:a8:24:4c:02:b9:77:a4:6f:95:
         9e:3e:6a:a9:8f:22:2e:0a:ae:33:19:e4:f6:63:00:0f:e6:42:
         69:fa:db:c2:14:49:67:d3:54:d0:26:c7:65:52:f5:8f:ab:04:
         84:7d:ed:82:ae:e9:49:7e:e8:7f:c0:15:5d:b0:cf:92:14:26:
         dd:6d:43:86:fd:87:77:c7:9b:aa:c2:8a:ce:e0:62:6b:49:79:
         0b:77:c3:7a:2c:1f:a1:e8:86:be:27:c6:75:d8:af:e1:6a:9c:
         78:94:c3:00:92:8a:0d:f2:8c:bb:80:fb:5a:50:d8:b4:44:cf:
         37:4f:f5:a6:3d:32:25:9d:d3:c2:91:ea:1e:90:8d:c7:58:ee:
         08:96:d1:9c:26:6e:2d:bb:c8:8e:63:d2:25:98:41:3b:09:6a:
         68:1b:7e:a5:6c:8e:56:dc:d2:45:91:4e:24:15:54:86:0c:5e:
         f6:3d:ed:97:03:b7:43:86:8c:56:5d:d9:ea:d7:89:9f:ef:cc:
         e4:12:49:15:41:19:26:8e:3c:9b:49:de:4c:7d:d9:82:c7:5b:
         d3:fb:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:51:52 2024 by rpki-client on console-ams.rpki-client.org