Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          gl4+kKSfNjJStEmyjY9WA09syIUZ8pirW+FzD83z1YM=
Subject key identifier:   3E:92:DC:06:20:8A:D8:31:77:70:BC:C2:FE:CB:66:64:13:7E:B4:A4
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       5820BAF4BCB7C8026A7213311545FD1DF6E9A612
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS212384.roa
Signing time:             Fri 10 Jul 2026 13:43:07 +0000
ROA not before:           Fri 10 Jul 2026 13:38:07 +0000
ROA not after:            Fri 09 Jul 2027 13:43:07 +0000
asID:                     212384
IP address blocks:        207.180.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Jul 2026 17:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:20:ba:f4:bc:b7:c8:02:6a:72:13:31:15:45:fd:1d:f6:e9:a6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jul 10 13:38:07 2026 GMT
            Not After : Jul  9 13:43:07 2027 GMT
        Subject: CN=3E92DC06208AD8317770BCC2FECB6664137EB4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:4a:d6:c0:88:4d:de:49:ac:08:90:f1:12:
                    ec:f5:4b:9a:ac:2f:66:ca:a2:70:f2:2b:12:ba:7d:
                    ef:97:30:32:1c:c1:8c:7f:64:80:f9:6b:2c:da:f8:
                    73:42:c3:75:c0:92:ac:df:c7:cb:e7:02:16:94:1e:
                    18:04:ec:61:16:90:d0:69:1c:64:17:f4:94:98:33:
                    ee:80:e8:7b:9d:37:be:6d:cd:13:51:90:5b:d5:00:
                    7d:e6:21:f3:87:24:c3:29:d5:b0:4f:fd:4d:9e:12:
                    09:50:eb:f7:31:88:95:7e:e3:7d:d1:90:79:cc:b0:
                    9d:7f:ca:22:be:94:00:c4:ed:a8:6b:09:8d:ce:8e:
                    4c:43:f2:54:25:ed:61:02:65:7b:a4:05:bd:e1:6f:
                    16:fd:38:34:47:8e:9c:fa:59:98:b7:f0:e9:23:88:
                    26:cd:70:a1:e2:e2:6d:2a:3a:36:d4:cc:92:cb:81:
                    79:ba:b0:13:66:1b:c3:85:08:95:4d:2f:0c:77:8f:
                    f1:3e:81:55:eb:cf:a3:5b:f1:66:c8:93:1c:44:a0:
                    63:e0:cd:e7:d5:09:3b:67:df:aa:c6:ab:ce:36:d0:
                    08:1e:9d:fd:b4:83:f6:94:14:97:d1:f0:21:31:bf:
                    6c:71:a0:c9:6b:f8:9b:fc:eb:1d:a3:b0:12:6e:7f:
                    9f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:92:DC:06:20:8A:D8:31:77:70:BC:C2:FE:CB:66:64:13:7E:B4:A4
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:7e:38:f3:d6:ab:64:86:10:89:61:58:f6:66:ad:c5:f6:27:
         be:01:3d:5c:97:35:61:cf:30:b2:48:53:02:ad:8f:b6:79:68:
         fc:fd:d7:4a:c7:f3:54:8c:9b:d5:55:9b:71:10:76:cd:81:77:
         07:03:c9:ef:ae:b9:54:ef:8e:62:63:00:a9:b7:88:06:9a:c5:
         8b:e1:dc:a5:11:b7:54:34:00:40:20:a6:d8:d2:06:16:38:e8:
         6f:8e:e5:06:ba:f0:6a:b3:38:c9:1b:42:71:d3:82:11:b8:04:
         8d:b9:1c:00:e4:dc:45:7a:e5:e7:e9:9d:45:37:ac:a0:71:c5:
         b8:14:ec:c6:51:b3:5f:ca:a5:f1:a0:d0:5b:ef:e8:d8:8b:0b:
         4d:75:8c:18:79:37:81:b8:34:16:6c:bb:2c:0f:d9:35:f8:f1:
         73:9f:e2:c9:19:bd:40:78:96:a4:2a:e5:d5:6d:68:d3:86:5c:
         5d:b2:8a:79:b0:ae:f8:81:b8:c4:15:c2:d0:4e:bb:25:a9:a0:
         80:90:04:29:36:f7:b8:20:98:d5:32:98:35:87:b1:70:d7:ae:
         68:08:e5:a4:9f:29:9d:3c:07:a0:f7:b1:62:26:52:1c:b4:63:
         4c:ed:c7:e0:76:8f:9a:be:32:00:5c:50:42:31:2a:c4:d9:70:
         fb:37:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 08:52:11 2026 by rpki-client