Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS399486.roa
File:                     AS399486.roa (raw, json)
Hash identifier:          6ON1RJ26C2uIEbwG3W6eey/RCqpOPui27sM2HP+muDo=
Subject key identifier:   90:98:7B:95:5D:FC:C2:6C:C0:89:C1:DB:56:D6:B9:31:FC:12:4E:48
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       57451AC28B13E271949CB1ACDD3ED909AE9EF086
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS399486.roa
Signing time:             Fri 15 Nov 2024 18:38:34 +0000
ROA not before:           Fri 15 Nov 2024 18:33:34 +0000
ROA not after:            Fri 14 Nov 2025 18:38:34 +0000
asID:                     399486
IP address blocks:        66.225.254.0/24 maxlen: 24
                          205.234.144.0/24 maxlen: 24
                          205.234.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:45:1a:c2:8b:13:e2:71:94:9c:b1:ac:dd:3e:d9:09:ae:9e:f0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:34 2024 GMT
            Not After : Nov 14 18:38:34 2025 GMT
        Subject: CN=90987B955DFCC26CC089C1DB56D6B931FC124E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:92:9b:4b:2a:39:53:c6:d6:72:33:30:ff:
                    48:34:7f:fe:3c:3a:2c:bf:76:ac:d1:d9:e5:ec:c3:
                    88:6c:bf:5f:20:49:bf:6a:11:7b:3d:e8:0c:4a:b7:
                    17:ce:90:4e:07:b8:13:a0:d2:7d:9e:f9:cf:12:81:
                    ff:2a:f3:aa:a1:4c:79:e4:f1:77:06:f9:3b:89:5d:
                    a0:e0:fb:16:31:f0:ac:33:ed:ce:5d:10:0c:f0:75:
                    47:03:29:f5:3d:b3:cf:7e:86:b7:ad:07:60:d6:39:
                    91:a4:39:5a:36:d6:a2:e0:9b:ec:3a:34:d1:a2:80:
                    8c:ac:5f:87:5c:1b:0f:52:75:89:15:2c:a4:61:d9:
                    81:74:83:39:bd:61:24:88:3f:70:21:5e:3f:42:21:
                    79:2f:9d:ab:92:f8:8e:cc:db:83:cd:5a:5e:ef:3f:
                    27:83:35:0d:04:5c:a3:4e:1c:ec:4e:2a:ec:23:e5:
                    20:18:60:be:00:b2:f6:4a:d6:53:1c:dc:b6:31:2e:
                    74:83:73:3b:39:2d:8b:59:c0:68:31:f7:81:df:97:
                    fc:55:d4:3c:64:aa:90:f6:3f:ea:b4:5c:c2:8c:13:
                    7e:19:0d:ce:92:13:e9:a4:45:cd:54:44:b0:99:46:
                    37:e0:e9:0f:d0:2c:fc:64:4b:03:c5:7d:ee:16:b6:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:98:7B:95:5D:FC:C2:6C:C0:89:C1:DB:56:D6:B9:31:FC:12:4E:48
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS399486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.254.0/24
                  205.234.144.0/24
                  205.234.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:68:37:43:c0:1b:cc:d5:6a:94:9e:71:90:38:04:35:72:
         fb:75:4f:5c:d2:a0:29:db:f3:2f:44:03:69:e7:81:61:8d:68:
         da:c5:d3:1a:fe:67:c2:36:55:62:bc:7a:aa:f8:9a:9b:eb:44:
         c0:c4:85:ec:99:3a:ba:1e:17:b4:00:34:51:ea:51:1f:27:d8:
         e1:e2:d1:62:cb:ef:f4:5d:00:33:21:83:52:f6:f1:e8:df:16:
         39:c4:26:b5:5c:73:4d:74:58:1f:89:85:6d:70:9c:4c:fc:71:
         d1:cb:7e:8f:27:a1:cf:24:47:34:3d:c4:15:15:a2:6d:54:41:
         69:d6:28:91:af:62:2d:be:d3:66:6e:86:be:5a:27:d5:44:10:
         db:41:b3:f6:50:d0:19:8e:9d:ab:da:41:e0:8c:49:54:b8:85:
         42:51:dc:27:84:ac:44:3b:82:47:49:1c:df:6c:a7:e2:18:d2:
         d2:25:12:1b:a3:94:89:f2:01:e1:aa:69:77:98:61:b3:ea:6d:
         d8:a3:65:de:25:a5:5e:a5:f6:76:ea:41:f6:75:b9:9f:d8:3f:
         25:be:01:8e:d2:15:a8:6f:ad:fb:85:d2:cb:cb:b9:ce:f3:05:
         77:cc:bc:f8:33:ab:5a:d9:70:ec:8b:a0:53:8a:30:05:43:c6:
         9b:28:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:00 2024 by rpki-client on console-ams.rpki-client.org