Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209854.roa
File:                     AS209854.roa (raw, json)
Hash identifier:          D9crmYrYy3ho64wATB/JshYgM6+fnscxznojhr17OSQ=
Subject key identifier:   F2:90:E9:C1:AE:AD:8E:0F:09:B4:8B:57:84:87:EE:DC:F3:C8:E4:5A
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       4722A3EA2A942DA6F7A3100A33593D864647F633
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209854.roa
Signing time:             Sat 16 Nov 2024 06:15:26 +0000
ROA not before:           Sat 16 Nov 2024 06:10:26 +0000
ROA not after:            Sat 15 Nov 2025 06:15:26 +0000
asID:                     209854
IP address blocks:        216.246.29.0/24 maxlen: 24
                          216.246.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:22:a3:ea:2a:94:2d:a6:f7:a3:10:0a:33:59:3d:86:46:47:f6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 16 06:10:26 2024 GMT
            Not After : Nov 15 06:15:26 2025 GMT
        Subject: CN=F290E9C1AEAD8E0F09B48B578487EEDCF3C8E45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:ec:e6:d5:f0:cf:fc:50:19:e8:a0:6a:9a:
                    ae:b5:19:5e:07:18:98:7f:b8:ed:15:14:81:a4:33:
                    22:ae:d5:6f:eb:eb:76:59:f1:2e:b5:8b:0f:d7:66:
                    b2:54:53:f2:63:00:26:00:20:d6:a2:55:8c:53:be:
                    bd:e6:5c:8d:14:cb:3d:42:5b:d7:5d:c3:04:70:94:
                    f3:76:6e:f4:cb:1e:7f:18:51:67:e1:e6:8c:41:e6:
                    5a:56:43:f1:a6:c9:c8:ef:25:17:24:0d:5c:9a:71:
                    06:03:17:da:71:b6:b8:09:c7:3d:11:c5:70:65:c4:
                    fd:19:ed:55:e7:b5:55:30:6a:78:84:5d:63:f0:de:
                    a8:c6:87:4c:18:51:c6:e0:3d:2e:d1:fe:34:ea:c5:
                    37:ba:4a:78:41:b7:02:21:62:af:10:85:a8:7b:8f:
                    88:8b:ec:c2:02:fe:81:ab:11:98:f5:3e:b4:24:63:
                    67:12:af:a7:7c:2e:c2:55:1d:2b:99:e9:c9:4c:75:
                    00:4c:e3:00:3f:62:1a:9f:55:a9:f7:d1:42:17:9e:
                    5b:fa:07:79:ae:8c:ba:6f:03:fe:af:f4:05:32:43:
                    35:31:f7:dd:f4:0e:99:f6:87:85:76:e4:28:ca:fb:
                    2a:bb:a3:bf:1c:b9:6a:ad:fa:3a:fe:f0:11:99:a1:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:90:E9:C1:AE:AD:8E:0F:09:B4:8B:57:84:87:EE:DC:F3:C8:E4:5A
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209854.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.29.0/24
                  216.246.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ee:6e:67:17:bd:27:49:c7:35:da:1f:47:f9:69:e1:b5:82:
         79:19:00:3e:2e:bf:19:6f:b0:c0:82:f2:fa:09:27:ba:0a:52:
         4b:bc:e3:b1:48:e9:35:d6:bd:0d:43:9a:14:d6:02:41:f6:90:
         ed:26:7b:a6:2e:9e:50:ea:81:63:e0:a6:1c:a0:8e:d9:a5:9b:
         53:94:75:8e:85:98:a1:28:66:24:1a:02:78:a3:c4:a9:30:e6:
         62:f7:db:15:97:d8:02:4f:7e:93:e7:cf:5c:96:5f:b0:9d:a1:
         cb:65:37:57:1b:5c:3a:73:87:db:ba:16:48:0d:db:c5:07:a6:
         fb:fd:3d:d9:4d:b7:ec:62:f5:f9:b9:e8:40:15:23:c1:e0:a7:
         c6:01:73:01:e9:09:5a:22:15:4f:56:2a:19:42:44:f6:3c:eb:
         0f:1c:b3:30:63:04:d9:26:10:8b:d2:d1:5c:8c:ec:3e:d2:25:
         fb:a2:ee:98:50:e6:e0:7f:c3:c4:2d:52:58:77:72:28:3f:fa:
         95:71:b6:b5:93:b0:e4:90:27:b1:b1:0a:ed:7f:73:92:d0:34:
         44:a4:ef:8f:23:8f:8f:7c:a9:89:08:29:b6:a8:b9:ff:7a:f9:
         9d:49:5a:4b:88:32:f3:fd:d4:e0:40:39:af:dd:4c:dc:9a:d6:
         c2:b5:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:00 2024 by rpki-client on console-ams.rpki-client.org