Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210008.roa
File:                     AS210008.roa (raw, json)
Hash identifier:          OcoTcpIixGX+jp0r82qN4YpIh3Jv8F09pTAhdindyaQ=
Subject key identifier:   05:FC:A6:6A:63:B9:03:E2:87:D5:66:B5:9C:99:4D:F8:2F:2E:4F:A9
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       09598971771D979D841415870447E7EAB5B01E79
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210008.roa
Signing time:             Sun 05 May 2024 19:28:59 +0000
ROA not before:           Sun 05 May 2024 19:23:59 +0000
ROA not after:            Sun 04 May 2025 19:28:59 +0000
asID:                     210008
IP address blocks:        209.200.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 00:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:59:89:71:77:1d:97:9d:84:14:15:87:04:47:e7:ea:b5:b0:1e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  5 19:23:59 2024 GMT
            Not After : May  4 19:28:59 2025 GMT
        Subject: CN=05FCA66A63B903E287D566B59C994DF82F2E4FA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:7c:7f:33:d2:cf:ee:f3:39:54:e2:80:c9:
                    22:c3:4e:45:b1:46:cd:d8:31:41:aa:85:d8:f0:59:
                    a4:36:06:1e:99:a2:75:1a:5a:92:93:05:a1:d0:c1:
                    72:44:8f:05:e5:da:82:d8:df:3e:75:a0:20:17:f5:
                    20:27:db:0a:17:80:b4:04:72:65:a8:62:d2:e9:a5:
                    79:a9:d8:59:00:7b:ba:97:3a:71:73:75:4f:63:33:
                    17:03:42:26:46:8a:54:9e:20:db:c1:14:33:0b:6f:
                    89:83:e6:76:4f:02:b6:05:71:59:2e:89:2e:d9:c9:
                    2e:f3:d1:08:a0:e7:d5:a3:7e:e3:14:e3:dd:7f:72:
                    50:b0:10:6a:41:50:84:45:80:d2:af:bc:9e:c2:54:
                    be:e0:a9:71:6e:00:70:50:b9:84:4b:32:87:a3:26:
                    d9:5f:e8:0f:7d:5a:eb:09:6d:3c:31:d8:3a:e4:11:
                    47:40:06:4e:6b:fe:86:01:71:b3:a0:4e:a9:36:3d:
                    4e:88:81:a8:9b:20:3f:ee:cd:ac:56:75:82:6a:c4:
                    e4:f4:95:0c:ef:fc:bc:9b:32:e3:5e:cd:69:fc:8b:
                    ff:ae:15:55:74:97:a0:ff:37:fc:37:4c:41:f3:0b:
                    a0:7c:b7:ad:a0:4d:e8:d4:df:a7:ae:ba:99:ea:5d:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FC:A6:6A:63:B9:03:E2:87:D5:66:B5:9C:99:4D:F8:2F:2E:4F:A9
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210008.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:74:21:ac:0d:f3:a7:17:0c:44:bc:e7:c4:48:35:17:0e:1b:
         78:61:c3:7e:9f:0a:72:a5:ea:ae:1a:df:b9:26:23:6b:26:2f:
         c9:8e:97:fa:8c:0a:a0:93:6c:98:f9:e4:ce:f9:8f:74:7b:9b:
         eb:ac:bc:34:c8:35:bb:2e:36:f8:38:3a:45:6f:81:d3:86:76:
         af:39:8f:de:29:97:fa:d7:86:07:2b:e2:e0:58:b3:cb:2d:8f:
         77:52:a4:1e:b4:c5:14:5e:0e:60:68:eb:50:04:db:d6:09:7a:
         2b:9c:f5:59:39:97:14:ea:55:eb:b2:2f:e0:49:ba:e1:54:5e:
         19:87:a3:68:1a:36:d3:09:d5:51:ab:9b:81:10:75:cf:df:2e:
         f2:fd:22:7a:72:7b:cf:0b:bc:ad:0d:87:2f:48:0f:1b:20:d2:
         25:81:ad:2a:a1:41:24:02:7b:c0:aa:85:60:35:5e:66:f8:1e:
         83:4c:22:da:ea:8b:3a:19:ab:8a:84:f2:cc:d1:56:7b:37:55:
         cc:b9:21:e1:5b:29:2e:b0:18:24:bb:a1:1c:65:67:1a:b3:1d:
         5d:d9:53:21:10:7f:a2:9f:b8:76:a3:00:d4:9a:ed:ec:a6:65:
         cc:14:5a:c1:01:26:05:9b:9d:87:59:bd:19:80:9f:e5:cd:32:
         d5:b1:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:49:15 2024 by rpki-client on console-fra.rpki-client.org