Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa
File:                     AS209737.roa (raw, json)
Hash identifier:          DmPU8kYBwH/3ALmD+tnK1dEVqdd1/8IkQAE48WWYPvg=
Subject key identifier:   77:9F:31:D7:F6:77:0A:55:7D:EB:1D:0F:BF:93:DE:AE:B9:FF:71:54
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       51B560AFA95E5AA5B9E1463BF3D34DFEAEA2D9D6
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa
Signing time:             Tue 05 Sep 2023 21:36:16 +0000
ROA not before:           Tue 05 Sep 2023 21:31:16 +0000
ROA not after:            Tue 03 Sep 2024 21:36:16 +0000
asID:                     209737
IP address blocks:        140.99.44.0/22 maxlen: 24
                          140.99.180.0/22 maxlen: 24
                          140.99.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 10:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b5:60:af:a9:5e:5a:a5:b9:e1:46:3b:f3:d3:4d:fe:ae:a2:d9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep  5 21:31:16 2023 GMT
            Not After : Sep  3 21:36:16 2024 GMT
        Subject: CN=779F31D7F6770A557DEB1D0FBF93DEAEB9FF7154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:23:1b:20:89:e0:be:6d:20:48:f8:a6:a3:
                    ab:d1:23:33:4c:68:1d:be:cc:08:fb:a7:0f:c5:a0:
                    bd:1e:b3:6c:dd:f1:c8:39:40:7e:a0:12:8b:dd:61:
                    82:35:30:6f:df:77:eb:97:cb:8d:9b:a8:75:61:4f:
                    92:50:3f:b7:d9:7d:79:37:e5:96:c7:27:e8:a7:1c:
                    5b:fc:7d:bd:37:e3:5f:6b:7a:d6:c6:1a:d4:ae:fc:
                    9c:96:26:21:34:59:70:83:3c:ed:f2:3e:c9:35:df:
                    87:7d:5e:37:d5:29:f5:8c:03:03:00:71:ae:8f:f6:
                    fb:77:2f:bf:6d:40:83:d9:c7:4f:92:fa:9b:6c:27:
                    2b:fa:24:39:54:df:f2:4d:c4:f3:97:7b:81:79:76:
                    c5:f2:7b:a5:18:98:99:59:ee:d9:04:7e:2a:42:d9:
                    a5:fc:6b:41:af:b8:44:74:75:32:1f:fa:8b:93:15:
                    be:83:7d:85:21:1e:51:09:44:d2:f8:eb:59:b0:9d:
                    ad:cd:07:c0:c2:bd:0f:5b:1c:00:55:6f:00:99:75:
                    92:2b:88:2d:a4:57:4c:26:d3:57:b2:58:5e:77:38:
                    b4:ef:14:cc:8e:74:54:4a:42:6a:e8:28:e5:61:2a:
                    3a:42:be:49:d8:49:a7:c5:6f:49:95:41:f0:6b:40:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9F:31:D7:F6:77:0A:55:7D:EB:1D:0F:BF:93:DE:AE:B9:FF:71:54
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.44.0/22
                  140.99.180.0/22
                  140.99.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:2c:b6:61:e6:6e:4a:ef:88:71:2e:c0:da:1e:52:3f:b1:dd:
         07:48:c8:f5:d0:0e:e6:39:0f:d8:b1:9f:1f:af:2b:77:aa:2e:
         5a:fd:91:a8:35:12:9e:78:d9:35:70:d0:08:c0:b6:98:13:97:
         9a:83:5b:b0:4f:33:b2:1e:19:22:e1:8f:f1:6a:b1:f3:5a:da:
         8b:28:48:de:94:47:6c:14:7f:bf:ea:05:4f:d2:18:0a:e7:0c:
         53:91:42:c1:f7:42:85:5b:c2:9f:44:cd:45:75:8a:59:a5:86:
         4e:aa:58:cd:a4:e9:26:9a:8d:fb:b9:72:e0:e2:d4:af:f4:2f:
         a0:4c:ac:19:c6:8a:75:77:df:70:b1:f2:33:a4:1c:d2:50:3b:
         a0:cc:3c:ad:a7:fe:40:c8:e1:5c:55:5d:3c:c1:bd:d9:ee:70:
         9d:35:54:77:3b:65:d2:6a:bf:f8:2b:ca:37:f4:40:b3:ec:1e:
         94:e0:a9:e6:0c:e7:33:c2:4a:bd:e5:81:eb:04:70:04:aa:f2:
         10:7a:39:58:ad:d7:a4:21:fa:96:84:e7:98:1f:a6:69:eb:7c:
         1f:28:86:58:dd:f7:e0:5d:ea:4a:0b:6d:00:21:89:57:1f:6c:
         93:af:2f:3e:99:1c:f9:b3:87:5a:25:23:26:49:75:92:fa:e5:
         3c:55:4c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:31:55 2024 by rpki-client on console-ams.rpki-client.org