Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          3nvn1pptmUGxM+AKxQRodlBxKk8Cg3DhHApJGL4SFDo=
Subject key identifier:   1C:FB:43:BB:5A:40:C7:47:78:0A:04:DE:1D:2A:39:E5:55:A9:3D:9F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7758E2E934A03C7960860C3F891A9C56FADB42EE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212384.roa
Signing time:             Wed 11 Sep 2024 12:48:59 +0000
ROA not before:           Wed 11 Sep 2024 12:43:59 +0000
ROA not after:            Wed 10 Sep 2025 12:48:59 +0000
asID:                     212384
IP address blocks:        104.234.197.0/24 maxlen: 24
                          206.53.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:58:e2:e9:34:a0:3c:79:60:86:0c:3f:89:1a:9c:56:fa:db:42:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 11 12:43:59 2024 GMT
            Not After : Sep 10 12:48:59 2025 GMT
        Subject: CN=1CFB43BB5A40C747780A04DE1D2A39E555A93D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:a3:fe:07:77:ce:ce:87:73:04:e8:54:81:
                    57:17:03:02:7f:68:4b:7b:9a:e2:98:e0:68:8a:61:
                    00:02:9f:fc:b1:a8:15:05:65:a1:3d:da:11:de:de:
                    3d:30:d0:e0:46:18:f0:de:0b:7a:9a:55:d9:16:18:
                    e5:65:e1:21:81:17:3b:89:43:e0:d3:53:0f:c0:25:
                    44:fc:f5:9a:4e:7e:6f:38:55:9d:5d:b1:c9:dc:43:
                    7e:e0:37:01:20:79:55:d7:4f:dd:d0:9c:fd:fe:8b:
                    87:47:fb:7b:04:20:03:9c:96:e0:8e:53:49:16:64:
                    78:1d:20:8e:aa:07:0f:70:90:09:21:85:b0:a7:8c:
                    89:39:d4:10:78:99:bb:30:c9:ea:9a:11:95:ee:6f:
                    18:15:36:eb:78:e9:29:42:75:9f:c3:e3:2c:98:50:
                    11:ba:31:55:a7:d0:9c:22:73:63:94:e3:76:a0:a0:
                    21:92:55:e3:18:e5:c4:93:24:c2:44:c0:31:57:73:
                    20:18:ef:3e:25:c2:a9:df:dc:f7:91:9a:72:bc:0a:
                    54:91:4a:0d:6a:63:01:ad:4c:e1:00:37:1b:02:13:
                    da:7c:99:e9:34:60:23:d4:82:31:d2:de:e4:ea:e1:
                    11:2c:71:1c:7a:9a:a4:60:63:9d:8a:b9:9a:9a:4d:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FB:43:BB:5A:40:C7:47:78:0A:04:DE:1D:2A:39:E5:55:A9:3D:9F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.197.0/24
                  206.53.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:40:23:8c:b2:cb:9b:8a:77:24:41:b2:41:e7:34:13:67:
         ed:3f:05:4a:95:df:b7:38:ab:49:e7:af:64:ad:ea:74:08:7c:
         e7:ce:b2:d4:38:91:ec:2a:ed:6d:45:00:63:e2:9d:1d:2a:08:
         b9:51:5b:2c:4b:6f:bf:f0:29:cf:7b:d8:ac:5c:f6:c3:4e:9e:
         ac:7f:44:7b:a2:2a:27:b1:20:c0:5d:74:78:07:67:3c:ba:bb:
         d7:8f:c4:88:25:13:fd:62:ad:ff:53:55:da:8e:66:45:cc:1c:
         9a:c5:e1:b4:6c:ca:53:00:b1:23:e1:1a:dd:5c:ba:48:e2:a7:
         07:6a:5e:c5:7d:19:f2:52:89:d4:f2:48:09:0f:05:40:cb:e6:
         3d:5d:03:48:a6:0f:d7:e7:5d:11:c9:26:ae:c7:3f:2d:f6:61:
         41:d7:e9:cf:9e:05:27:1c:97:ce:2c:59:f4:98:3b:20:35:21:
         fe:f8:6e:8d:8a:bc:ec:cd:17:53:f8:4b:94:a2:60:03:a8:c1:
         b0:92:4c:77:8f:bd:f5:04:da:ff:bf:90:10:66:a6:94:59:55:
         a7:c0:0a:ee:3c:8c:22:4d:89:33:d8:76:fa:40:11:41:b9:47:
         80:4a:75:40:b5:fc:35:0b:99:1b:fd:70:17:e0:a9:e4:e4:ea:
         27:57:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:15 2024 by rpki-client on console-ams.rpki-client.org