Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211585.roa
File:                     AS211585.roa (raw, json)
Hash identifier:          WtB1QBeBm5pjDdPkDolufpoeD2zvFLNhVHkyzmpxK2s=
Subject key identifier:   B7:A3:EE:29:B6:30:A4:20:92:2D:3F:22:A5:BF:4D:42:45:79:EC:36
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       731670C49980805D85C4B61C06166C7C2F951AA2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211585.roa
Signing time:             Fri 24 May 2024 20:01:15 +0000
ROA not before:           Fri 24 May 2024 19:56:15 +0000
ROA not after:            Fri 23 May 2025 20:01:15 +0000
asID:                     211585
IP address blocks:        67.210.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 22:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:16:70:c4:99:80:80:5d:85:c4:b6:1c:06:16:6c:7c:2f:95:1a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 24 19:56:15 2024 GMT
            Not After : May 23 20:01:15 2025 GMT
        Subject: CN=B7A3EE29B630A420922D3F22A5BF4D424579EC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:ad:37:8e:97:94:46:a0:38:db:6b:c7:3a:
                    9c:e6:df:e1:64:51:23:ea:48:6d:5b:ef:c2:e8:a5:
                    af:a6:86:2c:20:2f:f9:a0:ab:fa:2d:b0:84:f4:50:
                    72:49:52:f5:df:9b:a9:fb:55:a7:05:70:bf:31:fb:
                    a7:7c:5e:24:6c:c7:44:a9:4a:fc:a4:19:97:ea:11:
                    02:5a:8d:de:3d:c2:15:ad:4b:8f:38:6d:1b:2a:77:
                    19:47:d7:2c:f5:2e:1f:b1:e7:14:58:ea:63:ec:61:
                    04:54:c4:97:d0:fc:3f:69:79:de:b5:d2:1a:86:6c:
                    5b:de:27:e1:a7:cb:ea:5e:89:81:a6:d6:b7:b3:5b:
                    3e:95:df:be:0e:ee:1e:ec:a1:78:49:22:89:b3:26:
                    57:c1:7a:0f:44:23:81:a4:be:4a:6c:2f:0b:ed:df:
                    d5:ad:f9:81:8d:73:96:94:88:78:08:be:75:04:0e:
                    41:f1:c8:f0:15:fb:2e:e9:94:36:4e:95:01:f0:3b:
                    dd:e8:3a:6e:10:ed:9c:32:c3:cb:dd:2b:83:a7:b8:
                    06:26:00:98:cf:19:39:bc:d0:78:08:9f:3e:17:ee:
                    cc:41:8d:ce:ff:63:41:11:aa:83:73:39:95:2f:17:
                    27:ee:41:cc:ac:c2:12:8a:99:71:7c:79:c8:38:1e:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A3:EE:29:B6:30:A4:20:92:2D:3F:22:A5:BF:4D:42:45:79:EC:36
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:50:1a:9a:c9:54:0b:4d:dc:fc:34:45:23:a9:56:4f:d3:f4:
         59:4b:22:52:ee:ad:ca:c5:8b:52:41:6b:41:a0:42:f3:ad:2b:
         42:34:a6:7f:eb:90:b0:2f:ed:be:64:2e:3c:ef:22:f6:fb:0a:
         19:00:01:ba:08:fd:e3:39:6f:c9:fc:21:b5:d6:69:6a:b4:fb:
         53:0e:83:79:73:33:07:6e:b8:dc:ad:c0:dc:9d:ff:04:ef:2c:
         f6:84:3d:8b:28:34:ea:19:5b:51:dd:0f:a0:2a:dc:ef:2f:8e:
         4f:7b:94:3d:e0:3c:89:a4:1d:1e:8a:20:52:4e:1d:80:1b:9d:
         4b:5f:1a:ba:00:4b:01:5f:68:db:f0:d1:79:e5:52:80:fb:bc:
         40:a2:99:27:a4:6d:1f:8d:94:db:e2:b1:a5:52:28:a5:2a:3e:
         89:db:d6:ef:47:37:33:e8:7c:ec:84:fd:33:8f:fb:3e:e9:42:
         10:03:8d:9c:d0:64:b0:03:7a:e2:9d:bc:84:82:76:b5:4c:68:
         4d:ad:cb:50:2e:76:28:89:67:f8:8b:ae:11:bc:e2:62:1a:bd:
         2d:5a:b6:d5:cc:a6:58:c4:6d:05:bd:c1:67:0b:77:c1:48:39:
         c2:d0:87:26:27:32:38:11:a4:bb:62:2e:dc:46:32:86:0b:46:
         c9:39:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:08:47 2024 by rpki-client on console-fra.rpki-client.org