Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          dTdqJbKVKsKNyOXMa6KipIi9xkUpJwqDZkFjlLnCKPE=
Subject key identifier:   CD:3B:CD:5D:E3:C8:0D:7B:12:5B:6F:E4:65:F4:5B:E3:65:B9:66:62
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3863E35A73480ABB96C3A21B3B77413DAE405230
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212384.roa
Signing time:             Wed 11 Oct 2023 12:21:15 +0000
ROA not before:           Wed 11 Oct 2023 12:16:15 +0000
ROA not after:            Wed 09 Oct 2024 12:21:15 +0000
asID:                     212384
IP address blocks:        104.234.197.0/24 maxlen: 24
                          206.53.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 15:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:63:e3:5a:73:48:0a:bb:96:c3:a2:1b:3b:77:41:3d:ae:40:52:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 11 12:16:15 2023 GMT
            Not After : Oct  9 12:21:15 2024 GMT
        Subject: CN=CD3BCD5DE3C80D7B125B6FE465F45BE365B96662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:a8:e6:e0:94:06:b7:fb:3c:28:9b:aa:0e:
                    0e:cf:2f:10:bb:39:46:c7:18:98:34:a0:b7:47:51:
                    81:f6:3f:18:a6:3d:1a:28:d2:e7:8a:0d:6d:1a:44:
                    a9:42:78:b5:0e:d0:19:a5:8c:73:13:a3:7f:ab:30:
                    a5:38:fc:bb:5b:54:15:da:1b:98:6f:a1:3e:f7:ad:
                    94:cb:8b:01:f0:11:6c:87:0b:c7:aa:7e:60:44:f4:
                    45:fb:6f:3c:c5:21:87:21:f0:d3:04:db:7f:d8:ff:
                    26:c0:2c:22:2f:88:3f:21:40:6e:b9:f7:52:73:3c:
                    b4:5f:1d:a6:77:8f:fd:71:b9:5f:05:71:1c:13:9f:
                    1a:56:5c:54:2b:61:71:0c:c4:f7:e5:9f:b0:57:72:
                    34:96:05:5c:7b:15:aa:a1:07:25:9f:58:e6:6f:82:
                    83:13:67:f5:d4:7b:b6:ca:06:fd:a6:f2:a7:73:41:
                    f0:43:ef:e8:22:28:dd:ac:e6:c7:95:15:7a:ae:85:
                    96:4b:9d:a3:98:17:40:18:1e:4c:41:f5:f3:03:58:
                    07:a1:6d:db:d5:cb:55:97:d9:c8:fb:21:bd:4f:30:
                    60:f3:aa:e8:e6:b4:b8:cc:a3:0e:69:ef:c9:ec:c6:
                    76:fb:71:b7:dc:7c:4f:db:14:a9:50:35:af:2b:a6:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3B:CD:5D:E3:C8:0D:7B:12:5B:6F:E4:65:F4:5B:E3:65:B9:66:62
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.197.0/24
                  206.53.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:3e:8f:21:7c:a0:89:d9:77:49:83:3f:ac:5d:55:a3:d2:af:
         c1:43:9c:7d:1f:d7:02:a3:4f:d7:ed:d1:71:ae:a8:72:51:ce:
         b5:eb:02:ce:f0:55:ad:b4:32:bb:33:94:05:29:11:3f:1b:de:
         34:aa:00:8d:cd:e6:c9:ab:ef:e7:28:31:37:bb:83:a4:71:c1:
         60:a8:67:b6:dd:13:8d:e2:79:64:ce:cf:f2:33:96:2f:37:1d:
         8f:54:1c:5d:b5:84:ba:01:00:87:58:6f:60:cd:03:73:e2:81:
         72:69:9d:9c:80:b9:90:9f:c2:34:d2:b8:65:72:36:eb:7c:2d:
         d6:01:62:ba:ab:2f:e8:60:fd:2c:4b:f9:e8:f2:c5:79:76:82:
         63:48:f3:e8:cb:80:c9:d2:bb:53:9e:f3:78:bb:f7:57:9c:ec:
         a6:ed:ad:8a:86:98:ad:8b:a7:45:1d:54:21:34:87:a9:fe:12:
         a7:c4:c8:b8:e8:95:3a:91:59:01:29:45:4d:0f:6b:95:5c:74:
         2c:40:d1:29:b9:d5:41:35:e0:1d:86:ea:0e:25:ee:9e:18:8d:
         2a:d8:0b:73:ff:b9:55:35:9a:53:51:e6:eb:60:23:a2:79:ed:
         5a:21:07:01:bf:2f:1d:17:ef:f8:f1:eb:46:14:e5:fc:e2:ae:
         7c:59:91:3c
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUOGPjWnNICruWw6IbO3dBPa5AUjAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMxMDExMTIxNjE1WhcNMjQxMDA5MTIyMTE1
WjAzMTEwLwYDVQQDEyhDRDNCQ0Q1REUzQzgwRDdCMTI1QjZGRTQ2NUY0NUJFMzY1
Qjk2NjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPio5uCUBrf7
PCibqg4Ozy8QuzlGxxiYNKC3R1GB9j8Ypj0aKNLnig1tGkSpQni1DtAZpYxzE6N/
qzClOPy7W1QV2huYb6E+962Uy4sB8BFshwvHqn5gRPRF+288xSGHIfDTBNt/2P8m
wCwiL4g/IUBuufdSczy0Xx2md4/9cblfBXEcE58aVlxUK2FxDMT35Z+wV3I0lgVc
exWqoQcln1jmb4KDE2f11Hu2ygb9pvKnc0HwQ+/oIijdrObHlRV6roWWS52jmBdA
GB5MQfXzA1gHoW3b1ctVl9nI+yG9TzBg86ro5rS4zKMOae/J7MZ2+3G33HxP2xSp
UDWvK6Z3jwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFM07zV3jyA17Eltv5GX0W+Nl
uWZiMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIxMjM4NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqxQMEAM41PDANBgkqhkiG9w0B
AQsFAAOCAQEAJD6PIXygidl3SYM/rF1Vo9KvwUOcfR/XAqNP1+3Rca6oclHOtesC
zvBVrbQyuzOUBSkRPxveNKoAjc3myavv5ygxN7uDpHHBYKhntt0TjeJ5ZM7P8jOW
Lzcdj1QcXbWEugEAh1hvYM0Dc+KBcmmdnIC5kJ/CNNK4ZXI263wt1gFiuqsv6GD9
LEv56PLFeXaCY0jz6MuAydK7U57zeLv3V5zspu2tioaYrYunRR1UITSHqf4Sp8TI
uOiVOpFZASlFTQ9rlVx0LEDRKbnVQTXgHYbqDiXunhiNKtgLc/+5VTWaU1Hm62Aj
onntWiEHAb8vHRfv+PHrRhTl/OKufFmRPA==
-----END CERTIFICATE-----
Generated at Wed May 15 15:50:39 2024 by rpki-client on console-ams.rpki-client.org