Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207419.roa
File:                     AS207419.roa (raw, json)
Hash identifier:          coTTbbkun/oxrvEFNeCj+Plz0c95rDAjtDrE67C72Ms=
Subject key identifier:   29:19:FA:31:EE:FB:11:3E:A3:3A:DB:29:07:42:EA:9F:9B:CD:A0:EC
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3440C025BA1F4E578E421C7C7BBA9E4611664B6C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207419.roa
Signing time:             Fri 11 Oct 2024 12:49:02 +0000
ROA not before:           Fri 11 Oct 2024 12:44:02 +0000
ROA not after:            Fri 10 Oct 2025 12:49:02 +0000
asID:                     207419
IP address blocks:        209.200.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:40:c0:25:ba:1f:4e:57:8e:42:1c:7c:7b:ba:9e:46:11:66:4b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 11 12:44:02 2024 GMT
            Not After : Oct 10 12:49:02 2025 GMT
        Subject: CN=2919FA31EEFB113EA33ADB290742EA9F9BCDA0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:5f:d1:98:48:72:02:bb:47:c2:70:a8:0e:
                    60:c9:ea:8e:d9:8f:2a:89:fa:e2:4d:0c:78:ce:34:
                    fb:69:da:7d:1a:1e:aa:1f:fc:51:6a:58:7f:34:2a:
                    66:0b:fc:f1:d3:df:e1:bc:d9:9a:1d:f3:ef:0a:e6:
                    16:a0:f5:c3:7c:c9:d0:ee:10:89:a0:ea:4c:64:f0:
                    a1:8f:e3:da:50:cf:1f:10:1b:6b:80:3b:67:c9:10:
                    ad:ea:fa:64:dd:5e:0e:30:2e:6b:72:e0:11:3a:93:
                    35:6a:11:ea:63:97:38:0b:09:43:a6:9c:16:fa:32:
                    e3:1a:e0:6b:51:ba:fb:7e:a7:40:2f:d4:4b:14:2a:
                    d1:e2:38:2f:8e:60:c8:bc:0e:73:cc:e1:9f:73:fe:
                    db:52:db:5d:71:4c:a6:7f:fc:a1:5c:8a:cd:36:1a:
                    e7:d7:07:1a:29:fe:1c:4a:43:9b:8a:8f:62:b8:68:
                    e6:76:38:d9:1f:f7:3d:43:e2:8a:e4:dd:da:80:39:
                    ae:27:29:fc:40:3b:a2:49:f1:f5:b1:6c:0d:ed:94:
                    0b:ba:ed:f2:cb:d7:1f:8d:87:2f:2f:2f:83:bc:d1:
                    ad:fc:40:2b:5c:58:99:5e:b7:8a:13:72:da:1b:fa:
                    10:7d:90:fb:7d:8b:ba:33:0b:3b:cf:ac:43:47:ff:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:19:FA:31:EE:FB:11:3E:A3:3A:DB:29:07:42:EA:9F:9B:CD:A0:EC
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207419.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:bd:6b:c8:31:22:dc:00:14:10:52:95:f9:fb:e4:b3:e1:11:
         fc:cc:03:be:17:03:58:a3:09:a7:5c:62:4a:0d:25:75:c2:ed:
         6c:c1:38:35:d2:9c:71:f2:77:41:f5:34:ed:24:4a:ee:78:1a:
         50:20:30:08:a7:23:11:26:2d:a8:56:7a:77:0b:7f:f8:e3:44:
         d9:00:8c:f4:7a:ca:2f:91:0f:31:8e:5d:e3:07:e4:42:c8:1f:
         6f:36:c9:f0:e2:4f:bb:ec:53:5c:99:48:b6:9a:b1:53:f6:76:
         fd:04:3e:8c:7a:41:ca:29:46:2f:33:92:56:bc:e7:ad:6b:94:
         7b:5c:e2:86:20:ba:61:69:da:f9:14:2c:67:f6:2f:c1:7a:4e:
         83:60:81:f7:c2:0e:a5:dc:6a:89:32:ce:05:72:16:0b:e2:70:
         ad:7f:1c:9f:33:0f:2e:02:f9:ab:de:a1:27:5d:3d:5f:72:82:
         79:66:e5:c9:3e:7b:74:e2:e1:78:37:ff:d9:ae:c5:68:17:b7:
         86:c5:45:bb:a9:e2:ed:14:d1:98:40:8a:3a:c5:42:2e:d4:4e:
         9c:ab:8d:5b:f6:c5:e0:6a:22:d4:65:5b:a6:fb:59:4e:f6:b6:
         e3:7a:cb:c8:79:06:73:b4:7b:ce:79:c1:9e:20:23:9f:5d:9f:
         2a:4a:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org