Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
File:                     AS209242.roa (raw, json)
Hash identifier:          +4K1F9mQ3db7S4Ne3QWxYjhxxuYjXIhmmv+pyHUhyMs=
Subject key identifier:   C6:C7:83:51:F5:AD:70:D3:04:FF:18:9E:0B:D9:F9:D9:CF:5A:2D:9D
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       5537E9BFBEEC3EC2953D1EB4D486EB6F05DC67C2
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
Signing time:             Fri 15 Nov 2024 18:38:36 +0000
ROA not before:           Fri 15 Nov 2024 18:33:36 +0000
ROA not after:            Fri 14 Nov 2025 18:38:36 +0000
asID:                     209242
IP address blocks:        66.225.252.0/24 maxlen: 24
                          204.93.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:37:e9:bf:be:ec:3e:c2:95:3d:1e:b4:d4:86:eb:6f:05:dc:67:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:36 2024 GMT
            Not After : Nov 14 18:38:36 2025 GMT
        Subject: CN=C6C78351F5AD70D304FF189E0BD9F9D9CF5A2D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0a:a4:62:c8:c9:13:a3:7b:cd:73:c6:f4:d4:
                    00:99:16:8c:a1:72:e8:f8:f8:0a:b3:90:b4:4e:c1:
                    52:dc:28:d0:f0:fa:96:e2:50:bc:7a:19:6e:47:38:
                    7b:c2:40:84:62:da:f3:12:16:fe:9f:59:b8:58:86:
                    1a:f3:d2:4c:8f:2d:8e:56:ce:5f:b0:e5:7a:b9:dc:
                    8b:b4:fb:33:19:a5:7f:89:3b:06:c8:8e:de:84:49:
                    68:19:a9:88:11:dd:10:04:3b:71:71:11:41:35:45:
                    d5:f4:fe:ed:ec:c5:2d:97:a3:78:69:94:49:f3:58:
                    fe:aa:4e:dd:52:55:b9:c5:f1:00:38:27:71:21:45:
                    7e:82:9b:98:21:da:21:4a:20:11:37:91:b5:81:1f:
                    ae:fc:43:d4:c2:8e:9e:69:f4:b0:6e:50:58:17:17:
                    e6:44:34:58:84:f7:6d:5f:b2:cb:7d:88:56:dd:db:
                    b0:b8:b1:4a:b5:5d:64:6e:7b:9d:b1:f3:a2:52:a8:
                    00:60:2c:59:db:3f:f0:24:e6:8b:90:62:1a:e6:3e:
                    fe:4d:e5:3f:75:5f:c6:2a:78:1e:68:3f:fd:db:04:
                    23:1c:e5:b4:db:85:ed:cf:67:5f:12:a2:06:60:55:
                    93:18:a9:2c:18:ea:c2:5f:f2:ea:48:5f:cd:c4:24:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C7:83:51:F5:AD:70:D3:04:FF:18:9E:0B:D9:F9:D9:CF:5A:2D:9D
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.252.0/24
                  204.93.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ae:f9:57:d5:31:7e:aa:e0:06:71:98:f2:aa:ca:fe:52:a9:
         e0:7e:aa:93:e9:c5:0d:17:e6:5f:75:ec:04:e2:10:bf:59:28:
         a7:b5:e3:d8:51:e6:c6:c6:f9:1b:3c:8a:bd:70:e9:2d:66:99:
         9c:56:40:28:93:eb:0e:9b:0f:34:71:76:75:ca:36:98:e1:24:
         2c:59:26:89:ee:56:66:38:4b:ad:0e:42:7e:f9:27:63:91:39:
         ca:9d:06:37:22:67:da:f2:e9:65:0c:94:2b:a9:37:c8:ba:8d:
         e7:2e:47:d1:8b:ed:5e:dc:ee:32:bf:c7:d7:7d:87:41:f0:a1:
         14:05:28:3f:56:a5:bd:4c:57:16:f9:63:b0:61:3c:b7:0b:a6:
         62:eb:c4:43:33:5b:30:a1:17:6a:2c:9c:c1:0b:3a:32:f3:52:
         ce:80:df:f5:6c:65:e6:68:ac:73:df:49:41:fd:8f:22:76:dc:
         8c:81:cd:38:e5:f4:0b:31:04:88:c0:4f:17:e3:0d:b0:5c:73:
         5e:8f:cd:9d:7b:f1:cb:a3:32:da:db:64:97:d2:c0:af:6e:e6:
         32:b6:36:a9:a9:e3:b2:b4:85:6f:ed:05:a6:1c:c7:d0:a7:25:
         8b:69:c0:c5:35:23:11:fa:90:aa:a9:1a:a8:e0:8b:17:34:68:
         5b:e9:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:40 2024 by rpki-client on console-fra.rpki-client.org