Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212477.roa
File:                     AS212477.roa (raw, json)
Hash identifier:          9fja99t1cGFl4AGY67EpwJmePHzQ1MFg0EYkZskXyPw=
Subject key identifier:   8F:41:86:6E:73:C0:E5:1B:91:EA:8F:A4:93:39:57:70:98:0E:29:99
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7B1C8920D88FFCC27966A0DD7CFC899FAB4CB72D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212477.roa
Signing time:             Wed 06 Sep 2023 19:23:19 +0000
ROA not before:           Wed 06 Sep 2023 19:18:19 +0000
ROA not after:            Wed 04 Sep 2024 19:23:19 +0000
asID:                     212477
IP address blocks:        104.234.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 09:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1c:89:20:d8:8f:fc:c2:79:66:a0:dd:7c:fc:89:9f:ab:4c:b7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  6 19:18:19 2023 GMT
            Not After : Sep  4 19:23:19 2024 GMT
        Subject: CN=8F41866E73C0E51B91EA8FA493395770980E2999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:87:34:2a:97:0b:82:24:1c:bb:a7:75:25:
                    de:d4:6a:79:da:4e:27:24:d8:81:a8:75:21:39:3c:
                    c9:fa:06:c7:f3:65:c0:1d:ab:e8:c0:c8:b7:2c:f9:
                    d4:8f:be:b5:80:eb:67:14:18:73:7b:4e:0f:0a:51:
                    b4:cf:f6:a5:70:49:6b:ea:8f:8f:1c:d4:e9:e1:46:
                    53:69:41:20:b0:8b:d9:33:7c:73:2d:a0:8e:f8:2a:
                    f5:99:dd:c8:9f:5a:cb:d8:ca:b7:66:65:50:aa:80:
                    15:55:0a:41:ab:2c:e2:76:b5:dd:3c:8e:ea:e1:20:
                    b6:b4:be:e5:4f:d8:b4:3c:cb:06:1d:a5:22:e6:ce:
                    c6:35:7c:45:85:af:4a:30:0d:9b:72:f1:c6:06:a6:
                    53:9c:f2:91:2f:37:6f:bc:42:a9:5d:ba:7a:1b:c4:
                    bb:5e:c7:5a:19:4e:3e:d0:c3:73:a6:3f:7f:7b:bf:
                    ec:32:35:b7:27:26:42:bb:f5:03:7d:6c:a7:15:43:
                    c7:e2:97:d5:72:21:d7:5b:ac:58:76:e7:1e:53:ff:
                    99:eb:5e:27:a6:e7:56:db:ad:d6:1a:80:20:b8:7b:
                    42:7e:ed:0b:90:69:08:a9:a0:ee:ce:35:24:b6:80:
                    c9:96:89:e2:ba:10:dc:8d:22:d6:c5:40:4b:5d:db:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:41:86:6E:73:C0:E5:1B:91:EA:8F:A4:93:39:57:70:98:0E:29:99
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212477.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:9f:f9:c7:e5:41:1b:ad:8b:42:38:03:e7:cf:6e:2e:df:73:
         e1:53:dc:30:e3:7e:57:b9:50:16:08:2a:03:aa:30:c7:0a:35:
         eb:83:bd:50:33:89:78:6c:e4:5a:ee:f9:83:8b:eb:ba:d3:d9:
         bd:6e:21:dc:4c:45:39:5d:b6:b8:19:13:90:65:53:d4:a7:59:
         1e:f8:43:53:25:fd:d4:72:39:ba:8f:d3:17:a0:1d:58:f9:45:
         f9:33:86:9c:e7:86:1c:66:a4:3c:b4:5c:ce:60:9d:13:b9:ba:
         02:b7:cf:45:1d:aa:75:a9:66:b0:2b:f2:f2:c2:d5:f4:58:ad:
         46:0d:3d:d6:62:05:d0:1c:f9:53:51:2f:0a:b0:52:b5:86:92:
         99:d2:f4:b1:84:3b:cf:f6:d0:68:a6:1c:c2:88:d8:81:81:bb:
         60:84:3c:52:1d:1b:5e:f9:b4:4a:92:2a:ab:2f:46:b4:07:b9:
         5b:06:3c:e8:8a:70:1d:f7:11:cb:c4:77:c1:8c:63:08:68:2e:
         4e:f6:59:bf:2a:b8:16:c6:ff:4d:a4:7e:42:76:3b:26:07:04:
         0e:61:12:57:6f:a6:10:fc:f3:76:69:be:a2:25:98:7b:e1:d9:
         64:e7:09:b6:79:2c:4a:ba:54:06:6c:45:59:97:b6:3f:86:e0:
         e8:3a:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:19 2024 by rpki-client on console-ams.rpki-client.org