Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          ExbfOB2o8qUT/NPUu4ZjKqLuHUzYOo1iwiuR3/c4cIg=
Subject key identifier:   14:B5:9D:B5:E8:FF:F5:22:C0:47:5B:6D:2C:5E:7D:A7:34:91:47:A6
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       19EF86221021035964B6EB6E96F9B201FB003691
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS62240.roa
Signing time:             Mon 25 Mar 2024 00:01:58 +0000
ROA not before:           Sun 24 Mar 2024 23:56:58 +0000
ROA not after:            Mon 24 Mar 2025 00:01:58 +0000
asID:                     62240
IP address blocks:        157.254.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ef:86:22:10:21:03:59:64:b6:eb:6e:96:f9:b2:01:fb:00:36:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 24 23:56:58 2024 GMT
            Not After : Mar 24 00:01:58 2025 GMT
        Subject: CN=14B59DB5E8FFF522C0475B6D2C5E7DA7349147A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:66:e5:b7:09:f2:ff:ad:79:fb:d4:a5:ac:
                    33:dd:9c:30:b9:c9:3f:5e:37:7c:e3:a0:da:05:8a:
                    54:22:25:62:9f:a8:ef:97:d2:da:b3:83:36:b8:5c:
                    ab:d7:83:04:ce:46:2b:b4:20:4e:35:24:f3:4e:7a:
                    b9:39:b0:97:12:4d:f7:62:e7:ce:de:3f:67:94:6d:
                    bf:50:2b:98:e6:44:d2:22:5f:a4:e7:a3:36:e3:4e:
                    1c:45:7b:65:f5:5c:89:17:0a:63:92:92:ea:21:74:
                    5d:a3:16:f1:fb:37:4d:60:c0:21:0d:ad:60:38:5d:
                    a7:80:fa:be:9a:a5:e9:59:19:99:11:58:e9:a7:f9:
                    be:37:5d:64:23:2e:20:03:88:6b:d3:df:02:8a:08:
                    d7:2f:14:d9:ba:8b:df:d5:b5:df:b1:19:8b:15:84:
                    fb:69:2e:38:b7:f6:ec:c8:cd:c2:79:6b:0d:3a:3c:
                    5a:4a:f1:20:c5:27:2f:12:09:7f:9a:c7:59:99:ca:
                    c4:6e:ee:64:32:ea:a1:93:6e:57:9a:8c:d8:63:f3:
                    af:50:bd:76:3e:96:09:43:98:64:5c:6e:81:77:29:
                    e3:7d:23:2e:0c:a0:f2:69:b6:d0:19:0a:07:71:da:
                    8e:fe:0a:89:c2:06:fe:a4:77:aa:eb:df:0f:b4:2b:
                    0e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B5:9D:B5:E8:FF:F5:22:C0:47:5B:6D:2C:5E:7D:A7:34:91:47:A6
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:44:69:54:aa:44:9f:b6:3a:93:18:8b:55:b4:81:24:e3:25:
         0c:0c:e8:bb:e6:2e:f5:11:ab:45:6d:65:aa:0c:bd:f5:5c:25:
         8c:64:f0:0f:5b:31:bb:2b:40:3f:8a:d4:4b:2c:e0:f6:ff:27:
         7c:88:51:cf:a3:43:ba:91:d5:43:86:60:e5:aa:14:88:79:b1:
         5d:09:25:03:ee:c1:b7:c0:af:58:ba:de:24:11:d8:71:7d:69:
         1c:1d:c8:e9:21:50:d4:db:22:3c:9e:99:de:7f:92:09:b6:15:
         1d:10:5c:8b:fb:3c:fc:86:1e:a1:40:24:15:1a:1b:46:c1:a9:
         16:3b:76:cd:f1:64:ff:53:c4:07:b6:fe:b3:ff:41:df:cf:03:
         4f:9a:2d:47:f9:8f:5c:ab:3d:27:2e:f7:d7:c8:db:ff:d7:b7:
         f8:06:51:e0:d7:de:00:53:fa:ca:92:f9:b0:94:57:7b:ec:9f:
         73:5a:dc:ca:a8:d0:ae:93:3c:39:f6:6f:a6:2d:62:8c:4d:36:
         5e:58:b3:1f:c3:b1:1e:99:28:cb:f3:6d:70:25:41:39:6c:21:
         98:24:4f:1d:c8:63:55:02:fd:5d:98:3d:56:f7:29:86:5c:90:
         6e:d0:2a:90:fe:da:66:21:4f:d7:e6:81:82:75:9f:e6:79:94:
         ff:f1:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:25 2024 by rpki-client on console-ams.rpki-client.org