Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa
File:                     AS209242.roa (raw, json)
Hash identifier:          xF0nCs8HDW88TkOcshlG+8jWDL9omJbWSIgsJm3TORg=
Subject key identifier:   B2:87:6F:D6:97:5D:CF:50:50:15:6A:A0:93:63:88:19:A6:74:34:6E
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       089DF2227D842BF866097E4CEF643BC9E76C6A3E
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa
Signing time:             Tue 29 Oct 2024 17:49:02 +0000
ROA not before:           Tue 29 Oct 2024 17:44:02 +0000
ROA not after:            Tue 28 Oct 2025 17:49:02 +0000
asID:                     209242
IP address blocks:        140.99.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9d:f2:22:7d:84:2b:f8:66:09:7e:4c:ef:64:3b:c9:e7:6c:6a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct 29 17:44:02 2024 GMT
            Not After : Oct 28 17:49:02 2025 GMT
        Subject: CN=B2876FD6975DCF5050156AA093638819A674346E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:86:2f:2b:02:b8:53:0a:d4:c6:58:fc:a0:
                    94:ec:81:9c:06:2c:82:0f:5d:5e:eb:dd:da:bd:e2:
                    53:14:0b:fa:b7:9f:c9:b3:7b:3c:bf:9a:31:d7:97:
                    b8:9d:98:37:a0:6c:87:15:2f:27:eb:66:0b:43:92:
                    79:9f:9c:17:a4:d0:ec:1e:4a:57:d8:df:29:97:60:
                    3c:53:b8:53:8a:61:6a:f7:9b:04:07:da:4c:f9:17:
                    ec:3a:b0:23:75:97:e1:8e:b3:b4:29:99:64:02:b9:
                    16:f2:2d:f2:56:d2:89:a4:04:6c:69:47:67:29:8b:
                    c4:da:65:ce:8e:09:18:4f:70:64:b1:79:96:dd:c4:
                    87:28:b5:83:6f:cf:0c:81:d0:cf:72:7a:96:99:39:
                    c8:96:9d:3c:8d:3b:3c:b8:12:67:bd:df:fc:ab:11:
                    0e:f0:bf:e6:56:56:0a:25:4b:7d:8c:89:5f:f5:2f:
                    d8:3b:f6:28:e4:a4:53:b7:c3:c4:8c:a1:40:08:b5:
                    c4:7c:37:f1:7b:fb:52:ac:6e:85:4c:37:a1:59:39:
                    3a:46:50:fd:59:4d:4a:85:ce:c4:a9:58:7a:8a:a0:
                    1b:d7:73:8a:77:84:fe:16:15:11:31:48:dd:a7:5b:
                    b9:fd:e5:03:cb:99:65:38:3f:c1:05:90:b0:16:8f:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:87:6F:D6:97:5D:CF:50:50:15:6A:A0:93:63:88:19:A6:74:34:6E
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:9a:fa:d3:a2:bb:06:ee:9e:21:72:3a:1a:59:dc:f1:54:15:
         f3:b1:68:ca:69:b4:b1:2b:8f:f8:da:9d:fa:57:68:80:c0:9f:
         7d:54:c8:ec:a3:c1:08:08:3c:85:59:f7:7f:f5:9e:e1:6b:e6:
         22:c2:e5:bd:52:0e:e9:0c:67:7a:7e:3b:2d:eb:92:1d:8b:16:
         4b:2f:a4:74:1b:2c:da:28:f6:a6:30:bd:fd:89:32:0c:c5:4d:
         c4:f5:a7:09:4a:e5:8e:cf:32:0c:0d:32:5f:8a:19:c2:dd:74:
         35:2c:e6:78:bc:83:de:94:f3:26:8b:5a:73:84:28:82:9f:ce:
         50:fe:85:fa:73:7b:de:98:56:02:a2:8d:87:cd:68:a0:fc:e2:
         4f:f2:b7:87:89:47:3f:c6:25:63:fa:2e:ec:8a:cd:07:0c:79:
         0a:db:b9:25:2f:0f:f5:2a:70:dc:d1:8b:88:c5:d5:68:cf:3a:
         1b:60:97:5b:e1:2e:67:d6:da:af:99:13:4b:81:e1:be:e1:3a:
         b7:1d:e0:19:2c:b1:c7:1d:ec:a3:7a:f0:4d:ec:b1:98:40:0f:
         e5:c2:a2:38:d5:a8:c6:ff:3f:86:ad:c6:7d:9d:72:08:25:3d:
         fa:81:95:28:14:4e:eb:9f:a1:9f:c6:17:8b:0a:26:4f:ed:9b:
         80:90:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:45 2024 by rpki-client on console-fra.rpki-client.org