Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211440.roa
File:                     AS211440.roa (raw, json)
Hash identifier:          bWnLh3sWoQgS1gT324mT7uM+zAwIKe7Lm6S+EY6wndg=
Subject key identifier:   97:A6:14:8E:FE:ED:F0:C0:7A:88:FC:DB:FE:E1:04:E9:F7:1F:8F:A0
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       131DB2D8A850AC931B6176E37C4A103FC696ACC8
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211440.roa
Signing time:             Wed 20 Dec 2023 18:01:12 +0000
ROA not before:           Wed 20 Dec 2023 17:56:12 +0000
ROA not after:            Wed 18 Dec 2024 18:01:12 +0000
asID:                     211440
IP address blocks:        206.53.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1d:b2:d8:a8:50:ac:93:1b:61:76:e3:7c:4a:10:3f:c6:96:ac:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 20 17:56:12 2023 GMT
            Not After : Dec 18 18:01:12 2024 GMT
        Subject: CN=97A6148EFEEDF0C07A88FCDBFEE104E9F71F8FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:88:2c:d3:11:9d:73:33:eb:12:17:d9:28:
                    4d:b7:66:12:6a:95:2a:ba:cb:8f:08:16:2d:fd:db:
                    eb:d9:f8:5a:d2:a3:49:24:b1:ab:7a:59:7f:7e:81:
                    ed:2f:b6:4f:e2:ba:a5:98:bc:ce:be:c0:27:72:72:
                    a6:53:40:e2:50:75:58:dc:0a:26:8f:0d:e1:66:39:
                    65:49:d8:1e:48:d3:3f:1f:14:33:2d:8c:93:73:6e:
                    7d:1b:52:5f:e1:4d:bb:34:ec:e0:89:ca:95:ed:70:
                    59:fb:29:39:64:04:3b:8c:a8:5e:d2:08:29:d7:23:
                    ad:8a:c0:28:51:93:f9:f4:20:75:db:4d:9c:8d:0b:
                    e7:da:52:4a:9d:7f:2f:1e:40:30:1c:8e:ec:86:f2:
                    9e:d3:a4:6c:e3:3b:32:ed:07:a3:f2:39:3d:29:ad:
                    aa:38:9a:31:7c:22:2b:1a:c3:7a:d9:86:9c:88:2b:
                    5d:30:a8:1a:47:13:67:dc:94:54:f4:f7:2d:8a:e0:
                    07:c7:51:4c:b7:7d:c9:6c:6c:84:99:e4:b9:fd:ce:
                    9a:8d:3c:4e:9d:c7:81:09:ac:93:81:61:63:db:18:
                    d4:99:2b:96:9f:86:77:18:90:88:9b:f1:b1:cf:75:
                    29:a6:63:1e:17:7c:9d:1a:58:f8:51:28:df:b2:0a:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A6:14:8E:FE:ED:F0:C0:7A:88:FC:DB:FE:E1:04:E9:F7:1F:8F:A0
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8e:35:40:ef:d2:15:37:96:23:5b:45:9c:1d:90:f4:dd:2c:
         79:80:f5:70:f9:4b:6e:52:0f:5c:53:d5:c7:b0:c6:2f:ca:47:
         71:a6:95:b1:9c:47:73:b3:94:73:c7:e7:ae:86:21:0b:7c:05:
         c9:fa:3d:f3:40:2b:df:e9:ea:8b:64:7d:4c:39:5a:80:9d:64:
         83:e3:09:cb:49:08:a9:85:52:e7:a8:05:c6:bd:ac:c1:da:9f:
         31:c4:b5:8e:09:61:75:ce:79:c6:57:51:21:d9:de:c7:f0:6e:
         58:fb:ca:6b:f2:20:d5:a6:4a:0a:b9:be:08:8e:de:5d:13:bc:
         bd:16:74:88:20:60:55:78:57:46:fb:36:6c:12:b3:ac:1f:55:
         2e:f7:e3:a0:8f:e8:cd:71:8f:0c:7e:d6:0e:aa:eb:51:b3:1f:
         38:e3:3f:49:eb:cb:9d:b0:fb:01:3c:7f:de:cd:01:7b:f1:5a:
         b3:b6:00:e1:bc:62:8f:5a:56:bb:17:7a:3e:81:1d:c4:54:81:
         97:72:5a:e7:a4:af:a3:2c:a4:06:ea:8f:45:85:9a:5f:55:67:
         2b:ee:1e:bb:e6:1e:92:d3:90:fe:ae:97:8f:e5:b0:74:07:0a:
         72:e7:df:2c:ea:fb:2d:d4:d0:f9:bf:e0:f8:51:65:c6:12:e3:
         29:7f:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:06:31 2024 by rpki-client on console-fra.rpki-client.org