Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          5OBMg07N67cB6q7PxtimzGxAfjk6trhqzHKESX/JVis=
Subject key identifier:   CB:C6:11:A2:C4:04:DF:83:72:9C:D6:BB:7D:C2:93:39:F4:3F:68:35
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       21E7F5F63885C3C22AAA63774D64BB8574F5DC0D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa
Signing time:             Mon 03 Mar 2025 11:11:48 +0000
ROA not before:           Mon 03 Mar 2025 11:06:48 +0000
ROA not after:            Mon 02 Mar 2026 11:11:48 +0000
asID:                     212238
IP address blocks:        104.234.149.0/24 maxlen: 24
                          104.234.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e7:f5:f6:38:85:c3:c2:2a:aa:63:77:4d:64:bb:85:74:f5:dc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar  3 11:06:48 2025 GMT
            Not After : Mar  2 11:11:48 2026 GMT
        Subject: CN=CBC611A2C404DF83729CD6BB7DC29339F43F6835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:c3:e9:eb:bf:7d:9b:dc:2d:7d:fc:d5:5d:
                    bd:b1:ce:7c:e2:fb:94:ca:8b:a9:d4:98:54:3f:a1:
                    10:cb:20:9c:58:c8:e9:3f:cb:2d:e9:c0:58:b3:63:
                    c9:a7:62:c4:3f:83:8f:5c:9e:df:3d:85:de:79:2e:
                    24:1c:e6:0c:b3:0a:77:7e:e9:db:5e:fa:14:37:b3:
                    40:2c:b3:95:64:c0:d3:ee:36:a5:e4:0f:7a:f6:cf:
                    57:32:17:d4:fb:4d:0a:29:cf:4a:69:2f:08:fa:30:
                    dc:48:2e:c9:8a:b3:8b:a5:39:8c:da:8a:3e:54:56:
                    26:95:6e:da:50:7e:7b:e7:aa:e7:49:ad:31:f6:c6:
                    8c:94:a8:3b:43:19:d1:ec:06:46:6d:e0:70:6e:c3:
                    3f:dd:e8:13:45:c6:9d:2f:5b:98:53:ee:88:c4:ed:
                    f3:9e:e1:7d:af:5e:96:51:79:e4:a4:4c:df:72:4f:
                    43:f9:b1:36:ed:b8:54:04:7d:55:47:ba:df:cf:cb:
                    2c:cb:63:84:29:a2:9d:79:99:e2:3e:a4:86:30:42:
                    03:0b:09:e1:88:e9:70:b7:19:b3:7b:ae:5e:8e:c8:
                    60:cf:03:8b:64:20:cb:6c:9a:e1:a9:04:f1:74:57:
                    8c:c3:da:3f:64:08:19:bb:b1:54:e1:77:05:e8:19:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C6:11:A2:C4:04:DF:83:72:9C:D6:BB:7D:C2:93:39:F4:3F:68:35
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.149.0/24
                  104.234.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:49:6f:9c:d8:98:6c:74:e8:cd:e5:11:7e:98:d5:80:7e:
         e5:53:03:b2:05:a1:e8:80:29:73:ca:95:dd:e1:80:a3:2e:eb:
         77:0e:79:6f:2e:ef:a6:22:a9:e9:5e:0e:22:86:e7:a7:e9:ca:
         2e:09:20:98:1a:04:6b:4e:bb:c6:f7:f5:6d:2a:96:8f:c8:63:
         ee:32:cb:63:e8:b2:be:1c:32:56:3a:a9:73:5d:6f:c0:ce:8a:
         5f:56:5c:e0:6f:46:6d:35:42:51:26:d9:d7:ff:a0:57:18:69:
         d9:93:04:51:b2:ef:b0:cc:38:9d:b0:9e:fa:d4:3f:01:c1:70:
         42:70:e7:3b:48:79:23:cd:27:2d:07:c7:4a:25:92:2f:7f:24:
         7c:dd:59:77:e6:e5:98:57:08:5c:37:1e:6b:46:f3:25:f4:8d:
         31:27:dd:07:77:3b:86:83:1f:ca:cd:8a:16:54:60:e5:4d:bd:
         e9:96:af:a9:b7:0a:c1:2c:59:1b:03:c4:09:a8:d3:0e:ea:bd:
         7d:c1:16:ea:bf:57:0e:98:92:8b:28:49:41:17:0d:c5:2c:8b:
         51:e1:26:73:e1:1e:fc:51:50:9c:71:b0:2d:0a:2e:f4:8f:49:
         82:aa:b5:5c:02:a7:37:32:a5:1a:2c:d2:d1:f6:47:b0:59:74:
         3c:c3:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:10 2025 by rpki-client