Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS996.roa
File:                     AS996.roa (raw, json)
Hash identifier:          4YepMyInUoDFfwWLL9pA5SPFVPFzRahWDiFfQEpHxcY=
Subject key identifier:   54:F9:F3:D5:15:B5:F1:A0:F7:10:34:94:A0:73:A6:9F:9B:72:2F:10
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5609BA0A9E1E939AA603B75B81651E8E7FD7AE4A
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS996.roa
Signing time:             Sun 30 Jul 2023 16:14:52 +0000
ROA not before:           Sun 30 Jul 2023 16:09:52 +0000
ROA not after:            Sun 28 Jul 2024 16:14:52 +0000
asID:                     996
IP address blocks:        66.225.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 10:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:09:ba:0a:9e:1e:93:9a:a6:03:b7:5b:81:65:1e:8e:7f:d7:ae:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 30 16:09:52 2023 GMT
            Not After : Jul 28 16:14:52 2024 GMT
        Subject: CN=54F9F3D515B5F1A0F7103494A073A69F9B722F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:2b:aa:6a:1d:33:c6:a2:98:9d:22:20:63:
                    10:63:34:a2:77:07:03:79:52:69:40:d9:46:16:85:
                    36:56:61:f0:f3:88:0b:87:e1:8b:0f:4f:8f:b7:71:
                    7f:3e:91:70:06:ae:92:54:24:a6:cf:31:dc:b0:d3:
                    5e:27:5a:d0:28:ae:bb:cf:b0:a6:2e:b3:da:b9:b1:
                    6d:75:fd:f8:b9:36:1f:3f:08:98:95:fa:4f:5e:0b:
                    8c:f4:e2:c1:5a:5a:ec:6b:f4:49:c8:90:d9:ca:c9:
                    09:7c:43:9c:c2:f9:25:a1:09:78:02:d3:a2:13:7a:
                    f3:7c:aa:ed:a1:67:51:77:17:63:8e:ee:c5:c7:2d:
                    55:f4:8f:05:dc:0c:48:6a:8a:06:e9:77:b6:0e:68:
                    9c:a3:03:a6:1f:1b:d7:37:ba:b3:64:fc:59:49:9c:
                    e7:91:3a:70:81:ce:a1:c5:18:76:7e:11:60:74:fb:
                    ff:84:a1:5f:74:ff:c3:95:77:90:4a:ca:02:60:94:
                    c6:97:30:9a:61:2f:0d:a6:ff:79:31:c7:a9:d2:87:
                    10:0f:09:e2:5f:34:c9:1d:5c:95:6c:09:3e:b7:62:
                    ac:aa:7b:05:a7:40:1c:35:e9:26:de:b3:1b:32:da:
                    cf:b6:b8:bc:b0:51:31:d8:b4:86:d9:54:22:ef:30:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F9:F3:D5:15:B5:F1:A0:F7:10:34:94:A0:73:A6:9F:9B:72:2F:10
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:61:31:15:46:cd:95:ae:33:80:a7:b5:1e:e5:bf:90:dd:73:
         e3:24:e9:dd:a7:3f:90:11:8c:48:46:f9:12:e8:81:7d:7c:d3:
         2f:b4:ac:98:69:93:ed:ee:e2:a5:b6:e4:68:9e:d6:fe:7d:de:
         27:2e:15:c6:55:55:91:6e:e3:9c:40:04:42:a7:0e:82:94:4e:
         ff:c4:ca:28:9e:ca:8e:f1:00:f4:f6:ca:72:15:83:d2:65:27:
         73:00:5c:63:c1:ee:6d:44:5e:a3:f1:dc:16:5c:c9:f2:a3:c3:
         eb:bb:33:91:1e:e4:be:73:a0:35:f3:d9:82:7b:68:79:d7:d9:
         5f:48:02:02:c5:25:ff:ef:af:e6:8e:74:e6:c9:c3:e6:ad:08:
         5b:5c:6d:fb:02:8d:6f:d7:3f:da:7e:eb:ff:eb:09:87:8e:9a:
         8d:bb:0b:b0:25:8a:7a:fd:19:ca:37:15:c9:30:9a:45:7d:fa:
         3d:c0:33:40:c2:be:70:cb:b1:ea:ef:4c:01:8f:31:c9:c7:32:
         08:06:73:3c:25:95:e2:8b:a8:c4:8f:9d:3a:fc:c8:ca:34:bb:
         41:be:c2:ed:4d:0a:b6:68:b1:23:1d:c2:bf:c0:bc:04:ad:20:
         ed:07:86:ad:15:cf:1d:5b:de:ce:50:9c:2c:f0:9b:16:d5:9d:
         46:dd:96:a9
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIUVgm6Cp4ek5qmA7dbgWUejn/XrkowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNzMwMTYwOTUyWhcNMjQwNzI4MTYxNDUy
WjAzMTEwLwYDVQQDEyg1NEY5RjNENTE1QjVGMUEwRjcxMDM0OTRBMDczQTY5RjlC
NzIyRjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTorqmodM8ai
mJ0iIGMQYzSidwcDeVJpQNlGFoU2VmHw84gLh+GLD0+Pt3F/PpFwBq6SVCSmzzHc
sNNeJ1rQKK67z7CmLrPaubFtdf34uTYfPwiYlfpPXguM9OLBWlrsa/RJyJDZyskJ
fEOcwvkloQl4AtOiE3rzfKrtoWdRdxdjju7Fxy1V9I8F3AxIaooG6Xe2DmicowOm
HxvXN7qzZPxZSZznkTpwgc6hxRh2fhFgdPv/hKFfdP/DlXeQSsoCYJTGlzCaYS8N
pv95Mcep0ocQDwniXzTJHVyVbAk+t2KsqnsFp0AcNekm3rMbMtrPtri8sFEx2LSG
2VQi7zDjywIDAQABo4ICfDCCAngwHQYDVR0OBBYEFFT589UVtfGg9xA0lKBzpp+b
ci8QMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzk5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAELh/zANBgkqhkiG9w0BAQsFAAOCAQEA
AWExFUbNla4zgKe1HuW/kN1z4yTp3ac/kBGMSEb5EuiBfXzTL7SsmGmT7e7ipbbk
aJ7W/n3eJy4VxlVVkW7jnEAEQqcOgpRO/8TKKJ7KjvEA9PbKchWD0mUncwBcY8Hu
bUReo/HcFlzJ8qPD67szkR7kvnOgNfPZgntoedfZX0gCAsUl/++v5o505snD5q0I
W1xt+wKNb9c/2n7r/+sJh46ajbsLsCWKev0ZyjcVyTCaRX36PcAzQMK+cMux6u9M
AY8xyccyCAZzPCWV4ouoxI+dOvzIyjS7Qb7C7U0KtmixIx3Cv8C8BK0g7QeGrRXP
HVvezlCcLPCbFtWdRt2WqQ==
-----END CERTIFICATE-----
Generated at Fri May 17 08:12:57 2024 by rpki-client on console-fra.rpki-client.org