Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          7Yesol5VbAlmoGyaxeyQ/0gTpj+geZyDHfNJfY8jRts=
Subject key identifier:   7C:93:E4:E4:6F:37:98:A4:89:0A:42:2B:FE:A6:D1:66:2F:6D:65:F0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6338558E176EFD8E61EF8A9CF07677522B8CB0A0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa
Signing time:             Tue 16 Jul 2024 01:46:18 +0000
ROA not before:           Tue 16 Jul 2024 01:41:18 +0000
ROA not after:            Tue 15 Jul 2025 01:46:18 +0000
asID:                     40676
IP address blocks:        107.173.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 06:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:38:55:8e:17:6e:fd:8e:61:ef:8a:9c:f0:76:77:52:2b:8c:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 16 01:41:18 2024 GMT
            Not After : Jul 15 01:46:18 2025 GMT
        Subject: CN=7C93E4E46F3798A4890A422BFEA6D1662F6D65F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:78:9f:88:11:58:26:48:6b:10:ec:cc:a3:
                    5d:4a:50:88:9f:a9:72:15:6c:d4:fa:51:1b:95:af:
                    b7:34:5a:70:88:fe:50:fd:ab:d1:d7:d1:2e:56:17:
                    0f:98:6f:d7:d5:b8:ae:e1:35:b0:49:5e:90:41:ee:
                    21:96:ae:fe:07:bb:bc:37:1a:2e:dd:52:e5:64:00:
                    fb:84:b1:87:88:74:b1:8d:dc:3c:6a:68:e6:8a:30:
                    44:03:50:d1:b3:61:e3:59:24:42:14:a5:bc:3c:ed:
                    32:47:8e:63:22:65:ef:70:e9:bf:24:c3:ad:e9:d5:
                    ce:96:6d:db:cd:31:d4:eb:ed:58:a7:7c:03:85:ee:
                    97:e8:81:1e:4f:82:cb:da:bd:0d:a2:98:6b:73:e5:
                    d8:21:f7:92:43:87:5f:39:ef:a7:64:93:05:78:00:
                    f9:0c:ef:69:f1:a4:59:96:48:22:2d:0f:2d:b5:e7:
                    ce:84:e6:df:2c:21:a4:21:98:0c:ea:1d:6e:39:65:
                    8f:83:db:ad:7d:2d:5a:a8:dd:e3:2c:76:7b:1f:2c:
                    b6:84:8b:e3:15:55:46:a4:fb:51:23:09:c5:d8:d9:
                    86:ad:a4:a5:cb:53:2b:e9:98:61:73:7a:96:6c:e2:
                    c0:f2:11:8e:a8:0a:90:b4:90:bc:c3:d0:70:1a:04:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:93:E4:E4:6F:37:98:A4:89:0A:42:2B:FE:A6:D1:66:2F:6D:65:F0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.173.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:8b:37:8a:8b:d8:0f:b1:a9:c3:da:50:57:e3:70:9c:64:
         5c:72:b2:62:6f:81:95:14:e9:53:0b:4c:fc:c3:08:c4:89:ab:
         af:cb:28:bc:1d:13:98:ca:8c:74:19:ef:3a:75:be:99:88:18:
         f3:df:f0:0e:a7:35:38:2c:2c:ab:84:71:91:2d:f3:4a:33:f3:
         32:9b:e1:6d:24:2d:a4:b5:a1:28:ba:17:f5:fd:40:0c:87:75:
         b2:44:1a:c9:37:36:01:27:cc:23:87:07:cf:b3:f5:02:57:b1:
         b2:6a:bc:c4:d2:b3:4a:2d:f0:fb:df:b8:a8:da:86:70:cd:af:
         88:0c:f1:44:29:fb:07:2e:d3:5a:35:7a:85:cc:b2:42:7f:81:
         0c:08:ee:d0:39:f5:e2:c4:4b:d8:7c:21:38:89:50:9a:22:8f:
         01:96:8e:ce:2e:ce:95:41:62:25:7e:f8:63:b0:71:45:62:e9:
         94:6d:23:e1:e8:53:16:86:14:78:2e:a0:da:6d:a0:52:4d:be:
         9e:7d:83:d7:e7:20:70:e4:9f:d7:f0:e7:5e:58:6a:01:8e:24:
         f0:e8:68:58:db:de:52:db:3d:41:03:c8:42:0f:98:e0:5c:f9:
         c9:6c:80:06:19:37:b2:ce:56:de:d2:dc:b0:2a:c7:41:e5:a1:
         52:30:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 04:24:25 2024 by rpki-client on console-fra.rpki-client.org