Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211440.roa
File:                     AS211440.roa (raw, json)
Hash identifier:          bMQZUno6pAcYXdtRo7icRL5KqCEMZlYLV9iTMApA/Zc=
Subject key identifier:   23:93:ED:30:A9:94:15:7A:7B:94:D0:61:65:97:BF:E3:4D:46:41:6B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1EB36C15D07F52FED0F15A366F7E942C8958A2C1
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211440.roa
Signing time:             Wed 20 Nov 2024 18:49:21 +0000
ROA not before:           Wed 20 Nov 2024 18:44:21 +0000
ROA not after:            Wed 19 Nov 2025 18:49:21 +0000
asID:                     211440
IP address blocks:        206.53.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b3:6c:15:d0:7f:52:fe:d0:f1:5a:36:6f:7e:94:2c:89:58:a2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov 20 18:44:21 2024 GMT
            Not After : Nov 19 18:49:21 2025 GMT
        Subject: CN=2393ED30A994157A7B94D0616597BFE34D46416B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:53:d9:01:53:a6:4f:61:81:bf:62:8b:b7:
                    a9:16:01:72:29:2a:ce:f8:1e:28:59:e6:c2:22:18:
                    85:84:e8:3c:9b:46:86:6e:ab:09:20:fb:cb:46:c7:
                    c5:64:bc:cb:84:57:6e:f0:99:6d:62:85:cd:0f:3e:
                    41:a4:fa:43:85:a7:f5:41:20:02:44:80:2a:d3:9a:
                    20:13:8e:f7:c0:8b:ba:03:04:1f:f2:1f:3e:31:44:
                    71:fa:22:21:e2:d7:5d:d0:38:19:24:78:ec:4f:06:
                    43:ac:2c:9a:f0:69:77:c9:5b:2e:a6:96:ba:ef:ba:
                    13:0d:d6:96:56:74:c2:b3:80:50:dc:0e:27:e3:45:
                    19:f6:8c:cb:fe:fa:f7:d4:27:40:32:7d:71:0c:1a:
                    aa:91:cf:ac:10:93:25:51:7e:a5:89:8b:32:76:01:
                    76:c0:62:99:1b:74:f9:12:92:70:01:d4:f1:94:8d:
                    f1:a1:c6:a0:ee:48:5b:3b:80:4b:6a:56:72:2e:7d:
                    d5:46:80:da:6d:ca:28:fd:24:f1:46:75:b1:b0:1f:
                    4d:d3:6c:87:4d:c7:57:e5:f2:b4:fb:a4:7e:d7:26:
                    df:f4:d9:aa:6f:7c:fa:3f:e0:dc:2e:f2:e4:b1:67:
                    a9:fc:26:88:83:28:b2:69:81:62:e8:13:3e:5b:0a:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:93:ED:30:A9:94:15:7A:7B:94:D0:61:65:97:BF:E3:4D:46:41:6B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:13:65:6a:00:0f:aa:18:3b:52:cc:e1:e1:09:fe:1f:86:
         72:bf:a5:2f:02:a8:c3:55:81:e7:50:a3:7b:12:6b:0f:73:18:
         c9:d0:4a:ec:ef:3f:14:d5:c3:20:55:b5:dd:ec:63:c0:87:a7:
         7a:6e:0c:0e:0a:b8:38:a1:31:68:ba:30:1d:c7:00:7b:1f:b8:
         9f:ec:a9:9d:ca:a5:1a:98:df:de:3a:14:5f:a4:41:24:80:b2:
         08:8a:39:d7:6d:48:a4:df:75:19:15:15:86:a1:18:43:70:ed:
         2e:f5:06:ce:0a:3e:c0:53:b2:ad:53:b0:b0:f7:67:b0:10:0e:
         1c:3c:69:b0:16:63:5c:a9:16:22:5f:a1:d2:bf:11:b1:96:cb:
         78:d8:af:29:4b:96:dc:ae:4e:e1:d6:18:e4:6c:9c:03:3f:16:
         c4:08:94:8b:bb:36:ce:cb:a2:c0:47:80:97:2a:b2:01:bd:d3:
         1b:44:c9:2b:fc:ed:32:ae:ce:a9:75:82:11:69:9c:0e:29:a4:
         4c:f3:5e:2e:7b:54:1f:32:48:06:6f:0c:b9:ee:d2:13:13:b8:
         d1:39:60:e9:68:52:3a:fd:e4:92:75:63:09:56:f2:54:e9:d5:
         4f:b8:00:a3:51:c7:1c:57:fa:98:f8:49:26:22:62:ed:28:37:
         b5:a9:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org