Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS140902.roa
File:                     AS140902.roa (raw, json)
Hash identifier:          1b4+tZmbUgwnz5P6M2ezETnm3CdJDldoiGljRqgW5Nc=
Subject key identifier:   74:9F:6D:3F:B1:0B:43:ED:F4:E7:D1:5D:94:73:67:45:F5:16:63:C6
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       7E4BF42B20B55E4F2EB320551E442AB086957A1C
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS140902.roa
Signing time:             Fri 15 Nov 2024 18:38:32 +0000
ROA not before:           Fri 15 Nov 2024 18:33:32 +0000
ROA not after:            Fri 14 Nov 2025 18:38:32 +0000
asID:                     140902
IP address blocks:        66.225.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4b:f4:2b:20:b5:5e:4f:2e:b3:20:55:1e:44:2a:b0:86:95:7a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:32 2024 GMT
            Not After : Nov 14 18:38:32 2025 GMT
        Subject: CN=749F6D3FB10B43EDF4E7D15D94736745F51663C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:2e:a3:31:45:d8:13:56:f0:da:f4:cb:6e:
                    e3:a3:ae:00:79:e2:39:a4:24:f2:b4:46:6d:e1:33:
                    3e:e2:80:1c:59:9d:51:39:9c:f3:8f:0f:7a:fe:e7:
                    84:cf:3b:83:75:7b:32:31:b2:90:53:8a:08:68:aa:
                    ca:db:a1:1b:d5:c6:0a:ae:dc:ca:59:71:a9:9b:bf:
                    f2:72:91:92:7b:71:5f:3b:e1:5b:e7:48:b4:45:b4:
                    1e:93:99:11:a3:a4:43:e3:55:ef:de:71:03:38:21:
                    31:72:e6:0d:fe:91:e1:be:51:06:32:f8:6a:d3:ff:
                    cd:67:ca:7d:fe:79:fa:80:47:8b:75:60:6d:77:6a:
                    f5:01:c5:2c:21:c8:28:ca:a4:83:3f:ed:17:b4:a1:
                    89:b5:ae:ee:77:70:2d:33:74:de:b9:34:0a:9c:3e:
                    44:1f:93:af:44:c7:3f:25:7c:22:91:26:45:eb:f8:
                    8e:75:b5:8c:af:32:de:4d:16:2c:4c:a4:51:90:c2:
                    53:e7:21:87:02:bf:20:dd:a3:ff:b3:f6:38:6c:29:
                    c3:91:29:7a:f8:72:26:b5:e1:8d:67:a7:a9:bd:05:
                    3f:28:87:8d:17:e3:13:b9:f8:50:1d:d8:cb:f9:f4:
                    a5:e7:46:61:70:82:34:1a:97:7f:a7:3f:0d:b7:de:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9F:6D:3F:B1:0B:43:ED:F4:E7:D1:5D:94:73:67:45:F5:16:63:C6
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS140902.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:b5:ee:76:48:03:3d:07:c2:a9:13:12:d4:b3:96:ab:2c:d1:
         0b:17:41:bf:a9:35:7d:49:6c:cd:e6:38:d2:0c:1d:cc:02:b2:
         c0:30:20:1e:b8:73:41:57:c0:df:e4:69:77:6e:20:d8:73:02:
         e1:2a:da:70:1e:da:92:dd:bb:13:4f:83:41:b0:53:2f:f3:06:
         18:79:71:e2:9b:f4:1f:52:12:45:4d:fb:6b:b9:4f:72:f4:db:
         ab:36:eb:0e:b7:3f:b4:fc:78:de:dc:75:24:d2:6c:d4:d7:37:
         dc:89:0f:82:e7:96:b6:78:43:46:25:37:f4:a0:34:b7:3e:2f:
         5a:82:86:74:40:4c:9b:3c:9f:4a:17:95:4c:49:df:9e:ba:b8:
         d5:52:b7:2a:49:53:ec:56:e4:1f:62:91:b0:32:f3:2d:ab:bb:
         d1:0f:8b:16:77:70:2c:f5:a5:5f:cd:88:5b:09:b3:96:6f:d4:
         fc:6f:ab:60:42:9e:f9:b9:35:1f:46:79:45:de:ad:30:14:bd:
         d8:21:09:dc:76:40:c3:91:e4:44:ed:96:d8:1f:b2:44:3c:04:
         55:78:9e:75:48:55:5a:d2:79:02:43:21:54:6c:99:39:af:0c:
         dd:cd:92:7e:00:7d:ed:07:c6:1b:03:39:27:28:bd:93:a2:84:
         eb:f5:47:a3
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUfkv0KyC1Xk8usyBVHkQqsIaVehwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMTE1MTgzMzMyWhcNMjUxMTE0MTgzODMy
WjAzMTEwLwYDVQQDEyg3NDlGNkQzRkIxMEI0M0VERjRFN0QxNUQ5NDczNjc0NUY1
MTY2M0M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlcuozFF2BNW
8Nr0y27jo64AeeI5pCTytEZt4TM+4oAcWZ1ROZzzjw96/ueEzzuDdXsyMbKQU4oI
aKrK26Eb1cYKrtzKWXGpm7/ycpGSe3FfO+Fb50i0RbQek5kRo6RD41Xv3nEDOCEx
cuYN/pHhvlEGMvhq0//NZ8p9/nn6gEeLdWBtd2r1AcUsIcgoyqSDP+0XtKGJta7u
d3AtM3TeuTQKnD5EH5OvRMc/JXwikSZF6/iOdbWMrzLeTRYsTKRRkMJT5yGHAr8g
3aP/s/Y4bCnDkSl6+HImteGNZ6epvQU/KIeNF+MTufhQHdjL+fSl50ZhcII0Gpd/
pz8Nt964dQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFHSfbT+xC0Pt9OfRXZRzZ0X1
FmPGMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzE0MDkwMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAELh6jANBgkqhkiG9w0BAQsFAAOC
AQEAmrXudkgDPQfCqRMS1LOWqyzRCxdBv6k1fUlszeY40gwdzAKywDAgHrhzQVfA
3+Rpd24g2HMC4SracB7akt27E0+DQbBTL/MGGHlx4pv0H1ISRU37a7lPcvTbqzbr
Drc/tPx43tx1JNJs1Nc33IkPgueWtnhDRiU39KA0tz4vWoKGdEBMmzyfSheVTEnf
nrq41VK3KklT7FbkH2KRsDLzLau70Q+LFndwLPWlX82IWwmzlm/U/G+rYEKe+bk1
H0Z5Rd6tMBS92CEJ3HZAw5HkRO2W2B+yRDwEVXiedUhVWtJ5AkMhVGyZOa8M3c2S
fgB97QfGGwM5Jyi9k6KE6/VHow==
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:39 2024 by rpki-client on console-ams.rpki-client.org