Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa
File:                     AS212609.roa (raw, json)
Hash identifier:          u5EJMljGh5IuXFUvDcGTuq9F6qpvYWAZOxgDhsNdfiM=
Subject key identifier:   3D:28:B0:A2:AA:2A:9B:80:82:94:82:EA:5B:F8:DA:0A:7E:3E:BC:9C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       71F0DB3FC0E006F5E1898EAF8FBEFB114861CF3E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa
Signing time:             Thu 03 Jul 2025 09:29:44 +0000
ROA not before:           Thu 03 Jul 2025 09:24:44 +0000
ROA not after:            Thu 02 Jul 2026 09:29:44 +0000
asID:                     212609
IP address blocks:        157.254.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 12:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f0:db:3f:c0:e0:06:f5:e1:89:8e:af:8f:be:fb:11:48:61:cf:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  3 09:24:44 2025 GMT
            Not After : Jul  2 09:29:44 2026 GMT
        Subject: CN=3D28B0A2AA2A9B80829482EA5BF8DA0A7E3EBC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:a3:8e:a4:f7:ff:40:48:7e:49:97:5c:00:
                    51:e7:0b:70:e1:bd:d8:24:16:98:b2:f3:a8:f0:41:
                    40:78:f0:45:4e:17:22:cf:31:be:59:31:58:20:d8:
                    cc:9e:a3:13:45:fc:12:8c:21:9f:6d:5f:58:07:5f:
                    29:f1:0d:0a:7b:11:c8:88:81:42:42:be:2d:c9:6d:
                    bc:86:45:3d:55:f4:1c:62:b7:6c:62:03:53:c0:ec:
                    0d:a9:a8:0b:f3:9b:43:15:a4:bd:e7:4e:b2:a0:9e:
                    5d:a7:83:c8:41:6f:8f:53:4e:ef:7b:b2:fd:7e:8d:
                    8b:7d:48:c5:39:f0:dd:89:51:60:3f:73:19:b3:82:
                    0c:97:13:3f:0d:1e:d1:6c:df:22:60:9d:d3:2d:b5:
                    02:22:0a:c4:50:f9:f6:d2:b6:73:8d:b1:10:87:c7:
                    61:85:fc:02:77:0c:8b:e7:15:9e:3c:14:96:f7:26:
                    58:48:aa:96:f5:1f:0b:20:1f:35:c0:db:83:e4:26:
                    b8:a8:99:1c:1d:c4:14:e4:f6:3c:73:86:dc:e7:fa:
                    60:9d:7e:69:92:af:08:60:b8:33:0a:75:9d:3d:e9:
                    64:b2:85:90:20:ed:bd:4e:7a:02:eb:1d:8a:92:11:
                    cd:5b:ea:82:89:e5:c9:a3:b6:a9:f8:a2:cb:81:73:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:28:B0:A2:AA:2A:9B:80:82:94:82:EA:5B:F8:DA:0A:7E:3E:BC:9C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:33:05:2e:65:34:a0:c3:47:28:5a:8e:59:1b:ac:c9:92:
         b0:14:96:33:28:05:5d:a9:04:50:01:8a:4e:41:40:32:66:ea:
         89:6b:bf:4e:ac:9d:db:5b:d0:2c:52:a6:47:5a:ac:03:86:d0:
         2a:7a:77:24:ce:bc:98:e4:19:dc:a8:28:a0:d1:2d:66:89:3f:
         ac:30:40:20:e9:6c:53:00:20:e2:81:dd:20:b9:dd:c8:73:ac:
         29:c7:ca:c8:75:16:4c:03:94:06:87:7c:d1:64:f4:60:fe:75:
         4a:2d:a5:a3:bf:f2:69:c3:0f:d4:ad:fb:40:5b:0e:cb:a5:1d:
         13:c8:0f:82:74:15:db:5b:90:7f:08:7b:2f:b0:aa:34:15:2c:
         26:b8:5c:bb:8a:b6:d9:97:d9:5e:d1:77:82:26:e2:35:c1:ca:
         f4:4c:fd:45:d6:11:fc:20:3d:e0:c3:ad:0b:55:e7:ab:f9:2e:
         d9:a3:ff:88:4f:32:75:9e:21:61:71:e5:a3:5e:38:69:d7:b8:
         15:10:cc:75:92:15:ae:c9:ef:34:85:b3:91:9f:29:f9:d2:51:
         68:1d:df:12:62:77:37:da:74:47:0b:f9:c5:28:1e:b8:3d:57:
         1d:ed:55:ce:cc:77:43:78:c0:be:9e:6a:42:e9:7e:2c:61:a9:
         a1:72:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:05:43 2025 by rpki-client