Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS399486.roa
File:                     AS399486.roa (raw, json)
Hash identifier:          wM4+6udGQe9MfRPL9FFilW8IzI5bfk3qUVLjVF9/Qhc=
Subject key identifier:   B9:F0:44:B8:09:B4:AE:65:64:1A:A4:A7:2B:7D:D6:55:0D:19:22:08
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       240164676FCD7FD981AE2C3F179ED181A374AD6C
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS399486.roa
Signing time:             Tue 27 Jun 2023 12:01:58 +0000
ROA not before:           Tue 27 Jun 2023 11:56:58 +0000
ROA not after:            Tue 25 Jun 2024 12:01:58 +0000
asID:                     399486
IP address blocks:        66.225.254.0/24 maxlen: 24
                          205.234.144.0/24 maxlen: 24
                          205.234.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 00:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:01:64:67:6f:cd:7f:d9:81:ae:2c:3f:17:9e:d1:81:a3:74:ad:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jun 27 11:56:58 2023 GMT
            Not After : Jun 25 12:01:58 2024 GMT
        Subject: CN=B9F044B809B4AE65641AA4A72B7DD6550D192208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:67:88:c1:73:f0:ea:13:e2:19:70:91:89:
                    c0:8f:fa:39:58:2a:f8:5f:c1:01:32:92:44:5e:94:
                    4d:8f:df:66:8d:bd:a7:8b:d3:b3:1a:ed:85:b1:97:
                    cc:12:ff:18:02:e8:52:1b:32:d8:aa:27:57:0b:0d:
                    8c:68:a6:7f:0e:89:6d:e2:2a:8d:68:3f:94:1b:b3:
                    0f:52:95:6f:70:94:1f:d5:44:50:d4:5f:f9:41:de:
                    d1:81:71:71:ea:01:26:cb:84:90:01:79:db:ab:5b:
                    e3:53:3c:e4:40:6b:76:a3:e9:87:df:f8:a9:c2:cc:
                    d0:f8:45:22:52:16:f0:4e:c3:af:20:64:96:e3:e7:
                    1f:9d:49:3d:60:29:7a:32:8d:0f:77:39:6c:98:88:
                    d5:5a:cd:5f:6f:a6:07:f3:56:e8:53:cd:59:05:64:
                    75:4d:77:a5:aa:e1:d9:0d:69:0d:2b:dd:97:4c:a4:
                    27:4f:32:8f:1c:e7:ab:1a:d0:eb:2a:cd:24:8c:93:
                    b1:6d:08:d6:c5:db:fe:8f:cd:e1:fc:69:d3:d7:7c:
                    5f:d8:4b:87:2c:2d:92:7a:db:e2:45:55:cb:d0:2a:
                    92:40:25:0a:d2:d0:df:17:57:04:e3:26:77:3a:95:
                    bf:5f:14:18:68:6e:c7:0a:6e:c4:09:6c:76:09:32:
                    64:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:44:B8:09:B4:AE:65:64:1A:A4:A7:2B:7D:D6:55:0D:19:22:08
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS399486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.254.0/24
                  205.234.144.0/24
                  205.234.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:41:f0:81:6a:22:a7:82:7f:3b:b6:30:dd:94:2c:08:4c:a2:
         90:dd:6c:33:55:76:d8:1d:60:f3:0c:6d:ac:f5:72:64:b6:f2:
         c1:75:ea:11:f4:d3:cc:e0:bd:12:61:0e:57:2b:69:1c:cf:a9:
         d6:70:c4:29:e8:ad:19:c3:35:bb:b5:db:7b:d9:9c:51:83:fc:
         66:e5:72:d7:7a:22:5d:c9:03:42:92:2c:b9:7a:fc:13:f1:9b:
         3e:2e:6b:17:02:78:33:e6:1c:b5:80:77:2b:89:8b:55:49:61:
         a5:8d:99:50:74:52:57:48:72:a6:90:72:44:02:b3:16:60:97:
         b6:55:3b:63:de:8e:7c:fc:cf:cc:9b:45:da:9e:94:96:15:1c:
         83:7c:d5:e7:af:e3:cf:9c:02:2c:cf:bf:f9:6e:d6:d5:33:f3:
         6d:c1:c3:7a:7d:ae:bf:9b:d2:16:5a:c3:73:4b:39:54:62:93:
         00:7b:41:96:92:95:45:54:a5:4c:da:6d:14:bb:44:2c:29:44:
         c9:e5:8d:05:45:18:54:c6:55:2c:0c:03:97:1a:9b:40:a3:cb:
         44:9e:c2:81:a4:43:cb:6b:c8:93:bc:48:97:d9:c6:f8:e3:ba:
         8c:05:f1:c5:80:84:6d:d0:a6:07:14:3e:6a:a7:79:ab:e7:75:
         4f:25:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:47:21 2024 by rpki-client on console-ams.rpki-client.org