Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          jPDv6rvLSpYMqq16sIvtrIXL6iVJU57rHMLMqzvFkp4=
Subject key identifier:   BC:5E:AB:CB:54:94:8A:03:CB:70:AE:67:69:65:4B:7B:75:9C:F7:2A
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       3ADB8990CE606063E6F80D03E4C0700230FFE23B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212384.roa
Signing time:             Thu 26 Dec 2024 14:28:23 +0000
ROA not before:           Thu 26 Dec 2024 14:23:23 +0000
ROA not after:            Thu 25 Dec 2025 14:28:23 +0000
asID:                     212384
IP address blocks:        140.99.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:db:89:90:ce:60:60:63:e6:f8:0d:03:e4:c0:70:02:30:ff:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Dec 26 14:23:23 2024 GMT
            Not After : Dec 25 14:28:23 2025 GMT
        Subject: CN=BC5EABCB54948A03CB70AE6769654B7B759CF72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:15:61:a2:bb:8c:7a:78:88:cb:f4:bc:94:
                    05:62:f7:f6:55:d5:85:56:31:8d:28:87:9f:b5:80:
                    55:b7:38:74:90:f0:b1:fb:90:30:61:f7:74:0c:99:
                    e3:1d:4c:3d:85:2e:22:b5:f0:7c:62:cc:84:7b:12:
                    21:0f:09:05:8a:f9:8c:27:06:67:1f:53:f3:c6:8c:
                    e1:fd:44:ef:18:97:fc:02:c8:fc:9d:6a:96:6a:31:
                    74:ca:85:06:5e:a1:75:05:d4:c6:37:3e:0a:4e:93:
                    0c:bd:b5:92:18:fa:52:64:98:b6:6a:d9:af:84:02:
                    d7:4d:a1:6b:96:98:45:43:e1:80:ae:5f:20:ce:6d:
                    95:3a:2b:30:fd:0c:e0:69:95:7d:8e:86:9c:fa:5e:
                    62:d7:9b:7e:7c:1c:90:45:9f:55:0c:9a:8a:0e:b1:
                    27:3f:d2:af:68:79:8d:38:5c:7d:e5:74:6c:aa:4a:
                    78:58:23:b4:11:89:19:b1:63:2d:27:55:09:18:cf:
                    7e:3a:eb:cb:5f:ea:52:99:4a:b4:a8:81:0e:47:20:
                    2a:d7:87:5f:3a:3f:45:3c:f7:c5:92:ca:0e:60:2c:
                    3e:42:b0:fc:a2:4e:4c:c5:ee:a4:59:c9:f4:b5:67:
                    1c:52:ba:4d:7b:3d:a0:9d:de:5f:50:06:ee:88:ce:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5E:AB:CB:54:94:8A:03:CB:70:AE:67:69:65:4B:7B:75:9C:F7:2A
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:3d:c5:ff:4e:43:d7:0b:6e:2b:0a:29:4c:25:7d:83:4a:dd:
         b4:3b:04:1b:a2:b2:18:14:73:e9:46:89:95:52:bf:0e:72:15:
         46:7c:09:dd:d6:9e:cc:16:5a:49:9d:8b:46:0d:83:70:b4:88:
         a2:c8:9d:c1:03:72:f7:a7:51:64:31:43:86:36:d4:c5:83:b2:
         1c:fd:15:76:14:3a:a3:3b:88:10:a6:fe:3f:ac:01:2e:28:00:
         77:14:bd:46:c8:9d:bf:37:e1:2f:58:d9:82:ea:5b:c1:70:28:
         63:6c:f1:2d:76:63:1e:8f:1e:6e:4d:ae:55:83:0f:89:2d:a2:
         fd:d7:5b:b3:8c:d8:cc:7d:c4:00:f5:08:90:82:c6:1a:c3:9f:
         6c:ea:02:09:fd:d5:e6:31:38:8a:22:36:f4:de:75:a4:5b:ad:
         9b:4a:5a:fd:b3:ee:76:e6:d6:92:a7:75:71:03:b4:7d:0c:dc:
         cd:d3:2c:0a:62:68:20:66:a5:f2:e2:fd:e0:97:59:57:e4:dd:
         ec:88:66:8a:13:0e:e0:bb:84:0e:f8:3e:cd:14:f7:b4:7e:0c:
         bb:e3:00:44:80:9c:fb:3b:fc:36:eb:9f:9c:7c:85:68:15:d7:
         04:74:b6:f6:27:90:9a:3b:42:d6:f6:6a:f7:7f:21:df:87:03:
         eb:05:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:17 2025 by rpki-client