Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209854.roa
File:                     AS209854.roa (raw, json)
Hash identifier:          RWUac4ABrKh6Ok3HwC+vt5TeR6DJqlS94nBFlhxJpco=
Subject key identifier:   13:E9:C7:84:63:83:89:AF:06:7A:5B:FC:B2:6C:7A:74:B5:24:9F:1F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       62788B275E944963798386CF55AE0FF891E000E9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209854.roa
Signing time:             Wed 16 Apr 2025 14:55:53 +0000
ROA not before:           Wed 16 Apr 2025 14:50:53 +0000
ROA not after:            Wed 15 Apr 2026 14:55:53 +0000
asID:                     209854
IP address blocks:        192.228.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:78:8b:27:5e:94:49:63:79:83:86:cf:55:ae:0f:f8:91:e0:00:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 16 14:50:53 2025 GMT
            Not After : Apr 15 14:55:53 2026 GMT
        Subject: CN=13E9C784638389AF067A5BFCB26C7A74B5249F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:81:0f:a9:24:c2:e4:31:8f:c5:58:72:a3:17:
                    6c:ce:3e:e3:1b:ac:68:08:7e:df:de:03:15:5b:b9:
                    c8:27:ba:43:17:96:41:1c:47:62:3f:0a:2b:0c:38:
                    ee:0e:20:44:11:13:94:4f:67:10:58:8d:58:9b:0e:
                    5c:63:6f:fb:d3:28:df:2e:b8:ff:37:20:d2:da:9f:
                    2c:60:e0:63:f4:e8:2b:60:a7:0e:be:df:9e:cf:95:
                    7d:fe:32:a3:22:39:89:04:88:7b:5c:62:6d:6e:23:
                    5c:a6:17:d8:56:fa:e5:17:02:b0:69:b8:16:c5:bf:
                    76:5c:8f:b7:6e:45:3c:cb:20:e8:3e:ab:b7:f2:ee:
                    6d:a6:b1:8e:b2:a1:e3:79:d4:99:be:9a:c9:71:2c:
                    ed:93:58:d3:90:45:52:46:be:fa:3a:6b:84:79:07:
                    87:ad:dd:45:67:50:53:e7:02:78:15:1e:88:9d:26:
                    13:24:46:40:2c:f6:c4:2f:85:2d:42:7d:dd:10:17:
                    7d:13:71:8a:55:d6:76:be:81:aa:f7:30:59:58:dd:
                    41:c7:65:83:8f:87:2e:6a:1d:25:fa:38:a8:23:f7:
                    f4:27:0d:7d:b4:db:19:62:53:c6:d4:51:f4:f3:79:
                    fe:6f:6a:e0:d6:ef:3a:33:35:07:ff:ee:3e:b4:9d:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E9:C7:84:63:83:89:AF:06:7A:5B:FC:B2:6C:7A:74:B5:24:9F:1F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209854.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:39:10:5c:b1:e1:67:e4:51:32:72:66:74:31:46:fc:14:
         5e:50:d5:20:eb:94:a7:8d:b6:0b:6a:86:59:ee:fa:90:fe:27:
         0b:ea:13:d5:06:6d:6a:4b:9b:fe:2e:74:c0:ae:9a:80:7e:39:
         7a:0d:b8:47:85:37:44:f7:0a:c8:d0:40:a8:28:d4:9c:51:60:
         84:21:85:e9:40:4d:de:e1:af:99:a7:1b:61:5d:95:3b:ff:7e:
         65:a2:47:37:29:a9:72:e6:cf:53:29:9e:a4:f6:91:a7:f5:e0:
         0d:13:25:1c:79:f2:fe:44:d1:be:eb:5a:b4:3d:db:f5:ca:4b:
         04:dd:da:e2:b3:3a:12:56:9e:21:6e:a4:60:3a:68:f1:74:44:
         2c:33:45:f4:2e:d2:bb:bd:95:75:ac:29:52:4f:b6:9a:59:3e:
         f4:0b:ab:f4:5b:1f:93:25:d3:0f:35:b9:08:ac:82:b1:0d:0a:
         f6:03:45:b2:24:09:a7:18:a0:36:49:47:56:87:34:88:bf:6a:
         1c:4f:6f:c4:a6:0d:49:5e:e4:7c:d8:71:17:21:20:ee:20:98:
         5f:5f:20:e3:b9:c1:7e:69:7d:83:43:28:37:fe:f0:97:5f:65:
         e8:73:07:13:a7:7b:09:cf:6f:19:ad:58:55:50:60:46:23:36:
         ec:ab:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:47:30 2025 by rpki-client