Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          PITpMGS0SvIdxUJ8na4UqS6aISyZuHZMVnAQoy8G5nA=
Subject key identifier:   0D:69:17:B7:2A:E7:28:51:12:62:73:1A:41:98:59:BB:D7:81:8B:2F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4AB5279353584194E9468F44906214797681E8C1
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa
Signing time:             Thu 04 Apr 2024 00:00:12 +0000
ROA not before:           Wed 03 Apr 2024 23:55:12 +0000
ROA not after:            Thu 03 Apr 2025 00:00:12 +0000
asID:                     212238
IP address blocks:        104.234.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Apr 2024 11:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b5:27:93:53:58:41:94:e9:46:8f:44:90:62:14:79:76:81:e8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  3 23:55:12 2024 GMT
            Not After : Apr  3 00:00:12 2025 GMT
        Subject: CN=0D6917B72AE728511262731A419859BBD7818B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:ec:5e:ec:1d:67:0c:a6:1e:1b:00:9a:f8:
                    53:b0:8a:0b:1e:90:bb:76:0a:c3:2b:3d:9d:3f:2d:
                    2e:af:f1:c0:74:fc:cf:d1:62:72:bb:3c:c7:18:e8:
                    c0:38:e9:69:1d:4b:31:d5:63:db:b8:57:95:a1:17:
                    c3:de:40:4b:8c:fe:f1:84:0c:2a:ab:b0:45:ab:55:
                    a8:cd:0a:eb:12:06:51:c2:1e:17:d7:cc:49:ae:7d:
                    9e:02:71:de:eb:d6:96:f5:4d:c2:d5:d9:be:d1:6e:
                    51:4b:53:d0:d6:7a:84:cf:7b:c7:a5:43:bb:c0:9f:
                    1c:40:2b:69:84:9b:ba:cf:b8:c4:d8:58:db:c3:db:
                    6b:50:b5:10:4f:7d:66:b9:2a:e2:61:e9:a8:91:a0:
                    64:9d:a0:8f:67:96:83:1e:11:5d:3d:f5:98:d1:2c:
                    7a:05:2f:ec:ee:ea:21:99:03:c3:23:a8:08:b5:4d:
                    07:8f:39:fe:cb:df:42:78:82:28:be:ea:77:7e:35:
                    b5:e4:cc:53:2c:5f:35:6f:0a:74:50:93:1d:71:de:
                    12:b5:6f:bf:f2:2c:ec:26:54:06:79:3a:e9:5f:37:
                    16:20:c5:c3:7e:cb:c8:c7:ae:3a:95:6a:e4:55:2b:
                    9c:86:98:5c:b1:1d:63:35:4f:2e:ac:86:a8:18:af:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:69:17:B7:2A:E7:28:51:12:62:73:1A:41:98:59:BB:D7:81:8B:2F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:53:b3:58:33:72:bb:0d:b6:bc:5a:eb:c4:ff:b0:10:14:8d:
         f6:d6:ab:91:92:3c:9e:f5:20:4c:20:bd:f9:a9:7c:15:41:06:
         0e:d9:63:70:11:82:c2:38:b4:83:b8:5b:4e:6e:6e:06:cf:6a:
         cc:5e:8b:57:70:16:4f:dc:4d:0a:90:04:cd:a3:ca:22:01:56:
         4c:20:a1:b3:c2:0c:ee:d3:b2:72:13:36:18:2c:c2:a7:2e:ab:
         ac:56:4d:43:11:b1:bf:40:f9:bb:df:fa:5c:50:e2:a8:f6:1f:
         14:b1:fe:f7:34:7e:83:6a:fb:28:d3:c4:f5:22:e1:fa:31:0e:
         b7:b6:0d:0c:65:e3:ea:e2:c0:bb:de:eb:0e:01:9f:a2:0b:b1:
         46:0b:5d:9f:d7:a8:0f:2b:e3:90:bf:c4:4f:5f:ff:bc:1e:0b:
         de:ca:b4:8d:84:c9:1c:b9:16:45:59:a6:65:42:67:71:c9:18:
         a8:6e:48:19:fd:80:60:39:5d:ed:d6:fc:a8:1c:6c:e7:22:1d:
         27:18:6c:96:12:e6:83:fc:90:44:81:2b:d2:b6:5e:94:ec:9d:
         64:0c:01:bd:05:ed:7d:b1:e1:8e:6d:80:e3:02:c0:43:6f:72:
         ac:08:bf:64:d1:36:44:c0:7b:64:9e:8d:8f:e5:b1:78:cd:96:
         ff:eb:89:a7
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUSrUnk1NYQZTpRo9EkGIUeXaB6MEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNDAzMjM1NTEyWhcNMjUwNDAzMDAwMDEy
WjAzMTEwLwYDVQQDEygwRDY5MTdCNzJBRTcyODUxMTI2MjczMUE0MTk4NTlCQkQ3
ODE4QjJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5zsXuwdZwym
HhsAmvhTsIoLHpC7dgrDKz2dPy0ur/HAdPzP0WJyuzzHGOjAOOlpHUsx1WPbuFeV
oRfD3kBLjP7xhAwqq7BFq1WozQrrEgZRwh4X18xJrn2eAnHe69aW9U3C1dm+0W5R
S1PQ1nqEz3vHpUO7wJ8cQCtphJu6z7jE2Fjbw9trULUQT31muSriYemokaBknaCP
Z5aDHhFdPfWY0Sx6BS/s7uohmQPDI6gItU0Hjzn+y99CeIIovup3fjW15MxTLF81
bwp0UJMdcd4StW+/8izsJlQGeTrpXzcWIMXDfsvIx646lWrkVSuchphcsR1jNU8u
rIaoGK8zqQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFA1pF7cq5yhREmJzGkGYWbvX
gYsvMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq8DANBgkqhkiG9w0BAQsFAAOC
AQEAgFOzWDNyuw22vFrrxP+wEBSN9tarkZI8nvUgTCC9+al8FUEGDtljcBGCwji0
g7hbTm5uBs9qzF6LV3AWT9xNCpAEzaPKIgFWTCChs8IM7tOychM2GCzCpy6rrFZN
QxGxv0D5u9/6XFDiqPYfFLH+9zR+g2r7KNPE9SLh+jEOt7YNDGXj6uLAu97rDgGf
oguxRgtdn9eoDyvjkL/ET1//vB4L3sq0jYTJHLkWRVmmZUJncckYqG5IGf2AYDld
7db8qBxs5yIdJxhslhLmg/yQRIEr0rZelOydZAwBvQXtfbHhjm2A4wLAQ29yrAi/
ZNE2RMB7ZJ6Nj+WxeM2W/+uJpw==
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:30:07 2024 by rpki-client on console-fra.rpki-client.org