Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          U9dxQla0bRUDJz3BcbYR5a7l7ZP5wAjv1UfLhFPaDwg=
Subject key identifier:   50:3D:91:BC:1D:71:00:5F:F5:58:1F:DB:FF:1E:07:F6:E6:B0:26:D7
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       229875A1956462457197166DA420F80CCE86180A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212384.roa
Signing time:             Thu 25 Jan 2024 14:10:27 +0000
ROA not before:           Thu 25 Jan 2024 14:05:27 +0000
ROA not after:            Thu 23 Jan 2025 14:10:27 +0000
asID:                     212384
IP address blocks:        140.99.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:98:75:a1:95:64:62:45:71:97:16:6d:a4:20:f8:0c:ce:86:18:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jan 25 14:05:27 2024 GMT
            Not After : Jan 23 14:10:27 2025 GMT
        Subject: CN=503D91BC1D71005FF5581FDBFF1E07F6E6B026D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4c:22:7c:a1:c4:34:a0:c8:1c:0f:de:fe:56:
                    e4:43:2b:ab:4b:32:ff:d5:b4:93:9e:6e:6c:af:e2:
                    68:be:bc:8b:86:e6:9d:92:29:da:ac:a2:1e:46:fb:
                    0f:d9:86:a6:71:46:71:44:55:87:b7:82:0e:8e:59:
                    3d:a4:e4:2d:c8:fe:73:87:f5:34:65:06:03:7d:03:
                    9f:c6:2c:bb:5a:5a:76:2f:71:1a:c0:5d:8c:d9:d1:
                    04:f1:45:9d:bd:bd:3c:b9:c9:a5:f1:75:1c:fc:f7:
                    8c:9e:e8:e6:4e:b0:8f:5b:91:61:51:64:bb:9a:c1:
                    e9:7f:bc:f1:f6:c9:2c:df:9f:d0:44:22:3f:ea:68:
                    03:78:2a:2c:5f:d6:3f:a1:85:72:34:1c:be:c6:3c:
                    1b:38:dc:c8:77:ba:dc:59:e6:ad:18:8a:ca:78:c1:
                    82:50:db:a5:c9:c4:a4:e7:4a:0c:5a:1e:59:a0:b7:
                    b7:43:51:b0:f2:c8:a7:52:29:e2:f3:86:05:d7:d7:
                    13:48:bb:40:c5:fa:c4:5a:22:fd:c7:1c:ad:cb:e4:
                    89:f9:ff:7d:79:4f:59:2d:4e:59:8e:e0:75:27:89:
                    8e:39:a6:60:be:6a:de:c8:b7:15:bd:2b:93:02:9d:
                    91:f2:77:f6:72:3c:1c:c6:b7:40:4d:4e:6f:73:2f:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3D:91:BC:1D:71:00:5F:F5:58:1F:DB:FF:1E:07:F6:E6:B0:26:D7
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:fc:e9:47:e8:5f:df:32:48:94:7f:ab:c9:2f:23:a6:47:4a:
         a9:15:66:1d:00:fc:ba:1f:ea:78:68:78:ce:43:0b:24:35:cc:
         c0:86:9d:61:aa:f8:ac:c7:25:cd:65:f9:ea:3c:2b:34:37:38:
         00:72:bb:90:ba:83:a3:ed:e5:cd:3a:10:0f:9f:b4:f3:c2:bc:
         e0:c1:aa:4d:ff:15:94:8a:ee:36:64:eb:98:b0:a7:c8:44:f2:
         57:84:12:34:66:81:74:7e:12:27:e5:bf:23:ed:a0:7c:ec:0d:
         bc:6e:15:62:b3:00:9d:b2:6e:99:a8:8e:01:94:4a:a2:ac:fa:
         50:69:39:fb:05:21:f2:ea:f9:b0:19:9b:d0:94:51:34:16:2c:
         d0:fa:c7:e9:30:54:28:40:94:54:fb:d9:77:af:ea:cb:55:1d:
         f3:60:ed:4b:17:4a:a4:36:c5:eb:fc:92:76:f6:d7:df:f6:23:
         bf:b8:83:f7:50:da:88:43:5e:57:d6:3d:62:e6:40:9e:aa:f9:
         10:7b:d2:49:8e:fa:8c:3f:17:9a:d6:1e:e4:6b:ee:93:30:38:
         4c:55:6d:dc:44:c7:22:34:54:53:ca:b2:a9:9a:ba:8a:8e:75:
         b9:e0:04:5e:93:3b:f5:72:a4:ae:e6:b2:2f:f5:98:35:f6:76:
         81:d4:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:40 2024 by rpki-client on console-ams.rpki-client.org