Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa
File:                     AS209242.roa (raw, json)
Hash identifier:          uscSSa+Pop+O8+krtBxaJjCqtpGIKxa6FjkHY6HzCKA=
Subject key identifier:   6F:02:4B:19:09:29:2B:8A:FD:7F:B3:6F:46:64:FF:C1:7B:86:19:7C
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       5152D3D69D745865DB420E58F398934FBABD7F58
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa
Signing time:             Tue 28 Nov 2023 17:20:13 +0000
ROA not before:           Tue 28 Nov 2023 17:15:13 +0000
ROA not after:            Tue 26 Nov 2024 17:20:13 +0000
asID:                     209242
IP address blocks:        140.99.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:52:d3:d6:9d:74:58:65:db:42:0e:58:f3:98:93:4f:ba:bd:7f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Nov 28 17:15:13 2023 GMT
            Not After : Nov 26 17:20:13 2024 GMT
        Subject: CN=6F024B1909292B8AFD7FB36F4664FFC17B86197C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:69:44:ba:e1:61:87:84:fd:ce:c2:b6:ab:
                    5e:51:81:87:ba:43:a9:a7:72:e7:f4:41:7f:d4:e8:
                    92:41:cf:61:ba:99:30:0a:a0:6f:bb:78:42:68:0b:
                    97:03:3d:47:90:04:c4:a5:f5:59:b6:06:70:9e:ed:
                    dc:b3:86:b0:58:83:b3:cf:55:fd:d2:20:ca:03:9b:
                    a6:44:fe:f6:81:c0:48:11:a7:a1:22:0f:32:b2:4c:
                    7e:6d:cc:ef:d8:3f:91:53:08:bf:f6:7a:e4:f6:bd:
                    30:ff:10:73:43:6f:79:66:3f:37:d3:ba:fa:dd:7c:
                    ae:25:08:7a:2e:b4:e7:49:1a:c6:b7:51:18:bc:a8:
                    b0:da:9b:e6:da:c9:42:7d:74:dd:35:6a:d6:e0:df:
                    f2:aa:70:67:4a:f7:31:dc:42:f4:f3:46:6f:1e:47:
                    55:b7:46:dd:34:4f:bc:81:fb:a7:fa:be:64:b5:9e:
                    c1:2f:87:84:95:46:79:e1:56:6e:8e:62:0a:f4:3a:
                    e0:ee:05:2f:bd:cf:84:56:60:01:66:2b:01:53:76:
                    f9:1c:39:3a:72:ef:fd:28:c0:b9:b9:1a:3e:84:7a:
                    92:a7:23:bd:91:d8:6b:23:00:85:fc:79:b8:af:eb:
                    5a:65:e0:14:75:e5:ab:0e:b9:b0:5a:56:da:9c:8e:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:02:4B:19:09:29:2B:8A:FD:7F:B3:6F:46:64:FF:C1:7B:86:19:7C
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:d0:1a:b3:7e:cf:53:a6:c3:53:41:6e:0e:da:0f:89:4b:
         90:c1:4d:83:a0:66:a6:3c:a4:03:0a:52:3c:aa:76:3c:f0:d9:
         05:7f:99:f7:65:42:cf:e7:cf:fb:a5:eb:f1:d2:15:25:3b:81:
         03:13:a9:2e:91:7a:77:80:aa:63:b7:00:62:eb:fd:9c:32:cc:
         63:73:4c:db:ec:e7:42:a8:53:10:06:bd:bf:12:04:98:8f:9e:
         d5:32:cc:c3:0d:85:63:1d:e9:a1:9c:18:a4:c7:23:c8:ca:ca:
         62:9e:0c:73:7a:21:21:0f:7b:a1:d1:94:eb:b0:0b:fe:c1:bd:
         53:fa:78:73:cc:f8:e4:53:12:31:9e:a4:b3:63:a0:7a:7e:a7:
         bf:d2:ab:cd:ed:c4:9c:08:03:fa:9b:35:cf:b1:f8:9f:7a:90:
         aa:cb:e3:ac:6a:30:cf:52:d3:ea:f7:7a:11:11:9d:4d:58:1e:
         82:5b:1b:59:4a:b3:9b:98:ec:38:8a:50:ea:8d:08:36:6d:20:
         43:b5:41:a6:7a:2a:8c:3a:9d:5f:55:df:0c:91:c2:42:f4:05:
         47:0c:fd:33:85:62:05:bf:50:fd:97:ed:4d:75:09:73:79:34:
         11:ea:b4:79:41:4e:f1:7b:24:23:71:5e:19:31:fb:4f:6e:b8:
         5d:da:c7:1b
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUUVLT1p10WGXbQg5Y85iTT7q9f1gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMxMTI4MTcxNTEzWhcNMjQxMTI2MTcyMDEz
WjAzMTEwLwYDVQQDEyg2RjAyNEIxOTA5MjkyQjhBRkQ3RkIzNkY0NjY0RkZDMTdC
ODYxOTdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDJpRLrhYYeE
/c7CtqteUYGHukOpp3Ln9EF/1OiSQc9hupkwCqBvu3hCaAuXAz1HkATEpfVZtgZw
nu3cs4awWIOzz1X90iDKA5umRP72gcBIEaehIg8yskx+bczv2D+RUwi/9nrk9r0w
/xBzQ295Zj8307r63XyuJQh6LrTnSRrGt1EYvKiw2pvm2slCfXTdNWrW4N/yqnBn
Svcx3EL080ZvHkdVt0bdNE+8gfun+r5ktZ7BL4eElUZ54VZujmIK9Drg7gUvvc+E
VmABZisBU3b5HDk6cu/9KMC5uRo+hHqSpyO9kdhrIwCF/Hm4r+taZeAUdeWrDrmw
WlbanI7oowIDAQABo4ICfzCCAnswHQYDVR0OBBYEFG8CSxkJKSuK/X+zb0Zk/8F7
hhl8MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIwOTI0Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIxj6TANBgkqhkiG9w0BAQsFAAOC
AQEAKoTQGrN+z1Omw1NBbg7aD4lLkMFNg6BmpjykAwpSPKp2PPDZBX+Z92VCz+fP
+6Xr8dIVJTuBAxOpLpF6d4CqY7cAYuv9nDLMY3NM2+znQqhTEAa9vxIEmI+e1TLM
ww2FYx3poZwYpMcjyMrKYp4Mc3ohIQ97odGU67AL/sG9U/p4c8z45FMSMZ6ks2Og
en6nv9Krze3EnAgD+ps1z7H4n3qQqsvjrGowz1LT6vd6ERGdTVgeglsbWUqzm5js
OIpQ6o0INm0gQ7VBpnoqjDqdX1XfDJHCQvQFRwz9M4ViBb9Q/ZftTXUJc3k0Eeq0
eUFO8XskI3FeGTH7T264XdrHGw==
-----END CERTIFICATE-----
Generated at Sun May 5 09:37:20 2024 by rpki-client on console-ams.rpki-client.org