Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS209242.roa
File:                     AS209242.roa (raw, json)
Hash identifier:          GCU2DiteMjiJy099A9anazR1X8AZkKxaNiteN94Pyo8=
Subject key identifier:   43:BD:5B:48:5F:7A:9A:32:2B:50:4F:0A:5B:E8:95:6D:94:E5:9D:B3
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       0B9FFED9F901E01662F5EB0B4E2F90206F8E5014
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS209242.roa
Signing time:             Mon 25 Dec 2023 13:42:07 +0000
ROA not before:           Mon 25 Dec 2023 13:37:07 +0000
ROA not after:            Mon 23 Dec 2024 13:42:07 +0000
asID:                     209242
IP address blocks:        204.93.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 08:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9f:fe:d9:f9:01:e0:16:62:f5:eb:0b:4e:2f:90:20:6f:8e:50:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Dec 25 13:37:07 2023 GMT
            Not After : Dec 23 13:42:07 2024 GMT
        Subject: CN=43BD5B485F7A9A322B504F0A5BE8956D94E59DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:21:f6:81:28:96:98:e4:5d:b3:7a:ef:70:cf:
                    0f:ec:c5:97:c4:a3:36:28:dc:92:0f:7f:6c:1b:d3:
                    57:d2:bc:41:09:fe:21:a9:c2:eb:cc:4b:4e:59:21:
                    e3:ce:76:fe:3a:a3:48:bb:44:b9:d9:7d:cb:fa:2f:
                    a1:9f:38:1d:a2:93:b5:20:4f:cb:e7:1e:d4:8f:14:
                    85:0a:c8:b9:0f:7a:f6:b7:ad:5d:ab:4f:a4:9a:49:
                    56:c3:d7:6d:4b:56:02:9d:e9:bc:a3:84:28:6e:f7:
                    f9:ed:59:de:e8:d6:c8:68:03:c3:5e:ce:bf:a5:f4:
                    ca:be:fd:b9:de:3d:e7:a8:ce:9a:07:0f:2e:31:f1:
                    79:ad:3d:91:ef:7a:b4:a8:da:4c:12:3d:7d:7d:33:
                    c6:f0:6b:8d:2c:75:9d:e1:cc:8e:0a:c6:ae:a5:f0:
                    10:af:14:86:0f:e4:db:10:a9:b4:0b:45:a9:2a:f9:
                    00:5f:4b:b3:02:44:88:30:45:2d:da:2c:26:3d:46:
                    d7:21:92:8c:a1:b7:0a:0d:c5:37:7c:f4:d5:c6:8e:
                    11:54:cd:b7:be:07:b3:7a:46:00:fc:57:7f:07:d7:
                    1a:5a:4c:be:f2:2d:b0:f2:0c:8b:de:d6:4f:0c:d9:
                    3b:5f:a9:bc:9f:a3:f7:82:2b:a1:59:82:75:2a:b4:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BD:5B:48:5F:7A:9A:32:2B:50:4F:0A:5B:E8:95:6D:94:E5:9D:B3
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS209242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:41:4b:1f:fa:fc:e1:5d:14:11:a9:c1:1a:31:51:18:d5:13:
         43:dc:45:d3:46:2a:f8:d2:1c:cd:b3:2f:4d:11:41:4e:8b:59:
         be:44:5b:3c:ec:ff:d0:15:f5:40:c4:70:fc:9b:fc:0a:50:65:
         2e:80:f2:df:af:c4:47:b1:f7:f3:32:35:58:06:d3:65:c1:a1:
         fb:3d:54:48:c4:e3:7a:3e:60:ba:c6:06:5e:e2:ba:9b:53:9c:
         72:24:ea:88:fa:61:e5:98:e4:c3:c7:a2:30:5d:7a:d0:63:9b:
         21:89:4e:71:84:47:0d:e5:7f:0c:89:03:39:c1:5b:19:18:d2:
         22:59:be:e5:5f:e3:ec:93:19:c3:a5:77:83:79:14:62:01:53:
         84:66:af:ce:92:d8:3e:80:3a:7f:ad:9d:0c:e8:2f:d9:3d:f7:
         9e:f7:ef:fc:f5:43:3d:78:18:f1:22:49:ad:d8:e3:9a:ca:8f:
         c9:9d:19:d3:78:56:08:a6:68:1b:da:16:87:fc:99:bb:8b:b0:
         f5:cd:46:19:9b:9e:f6:ac:de:db:f2:b5:bd:2e:8d:8b:1d:75:
         50:13:eb:38:58:e0:98:f1:e0:fb:de:3b:38:f0:97:15:a2:78:
         b2:05:8b:1f:78:12:5b:55:e2:38:bc:3a:b5:e8:a2:6e:f6:b7:
         95:d9:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:19:13 2024 by rpki-client on console-ams.rpki-client.org