Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          Y00D5PBCL84FCeT1FllEy3FRjpVemkgsoeXo2XpR7s0=
Subject key identifier:   E1:97:90:42:CE:9E:5D:B3:63:72:92:32:86:EE:7C:F6:FC:A3:C0:96
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1E17D2459A7C8A9105DFB92EB978AEF26D411D3D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212384.roa
Signing time:             Wed 15 Jul 2026 13:36:09 +0000
ROA not before:           Wed 15 Jul 2026 13:31:09 +0000
ROA not after:            Wed 14 Jul 2027 13:36:09 +0000
asID:                     212384
IP address blocks:        104.234.197.0/24 maxlen: 24
                          206.53.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:17:d2:45:9a:7c:8a:91:05:df:b9:2e:b9:78:ae:f2:6d:41:1d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 15 13:31:09 2026 GMT
            Not After : Jul 14 13:36:09 2027 GMT
        Subject: CN=E1979042CE9E5DB36372923286EE7CF6FCA3C096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:be:e0:40:02:67:7c:de:b9:11:ec:54:3f:
                    34:ba:e7:fa:fa:6e:7c:86:93:7d:58:7d:9d:7e:c8:
                    73:0c:75:69:1b:6a:71:f6:65:99:98:c7:0f:f6:13:
                    6c:36:e1:f7:85:3f:60:ba:97:e8:9e:b8:fb:8e:3b:
                    cb:77:86:2d:5f:45:7f:03:9d:58:e8:8b:78:5b:62:
                    36:a1:dd:fe:c3:ce:5f:58:1d:6a:5d:fb:07:9c:30:
                    9a:60:de:61:59:f0:f2:ce:89:85:01:1a:b5:bc:1d:
                    37:c0:fd:42:d0:90:3f:1d:80:ef:98:e5:8c:68:0c:
                    f9:bb:ba:da:45:50:0e:19:7a:5c:15:85:e5:67:e5:
                    05:7e:9d:aa:3d:85:da:82:93:95:c2:7a:ff:0a:b5:
                    b9:62:cf:05:16:5f:22:50:46:07:30:1c:b4:17:c5:
                    52:01:3e:aa:db:14:df:de:7e:4a:b4:91:1d:28:da:
                    c3:d6:40:f0:d4:84:76:7a:17:95:be:ae:1f:da:9a:
                    b3:83:05:4a:87:90:66:e4:31:23:40:99:39:44:9f:
                    17:de:a7:e7:1f:0e:3d:03:d6:b0:32:2e:a1:da:ff:
                    ba:d4:87:dd:1e:2c:f6:b6:96:b5:39:f0:bb:12:94:
                    e2:95:b2:4b:0a:c7:96:b3:b8:72:64:85:29:63:53:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:97:90:42:CE:9E:5D:B3:63:72:92:32:86:EE:7C:F6:FC:A3:C0:96
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.197.0/24
                  206.53.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:36:f5:07:5c:33:bb:ba:93:15:7f:3f:fe:c7:1e:1d:1f:95:
         e8:a1:3f:cb:3f:04:d7:48:49:8b:84:c8:96:c2:7a:4c:ee:b6:
         a6:1a:b2:4a:de:ba:03:b2:b6:96:06:ff:fd:f0:41:56:01:65:
         b2:e9:89:f2:24:31:99:e8:62:ac:29:60:0c:ff:31:7c:36:ed:
         1a:72:e2:40:2f:1d:69:0a:50:80:f2:e6:1f:96:eb:55:0e:b7:
         34:3d:7b:5a:9e:6e:ce:e5:36:17:b0:ac:57:33:36:a4:53:bd:
         bd:e3:38:24:36:f8:47:ef:70:a5:98:29:58:8a:49:5b:2e:35:
         e8:3a:bc:87:6e:dd:b4:9a:e6:53:ef:f4:fb:f2:fe:a9:87:64:
         da:f7:97:a5:25:b8:cc:0f:d1:42:fa:f0:44:c7:7c:e5:4c:35:
         ff:d8:51:df:f4:be:c3:57:e4:fb:17:f0:67:3c:32:8e:f7:32:
         e5:42:2d:14:61:6e:61:a0:67:23:84:46:60:c9:9e:c4:41:33:
         c6:91:81:05:9e:92:17:e5:e3:0a:4f:cc:04:0f:9e:b0:ca:06:
         b0:dd:9c:6d:52:92:c3:50:51:63:c6:08:2c:18:00:8e:bc:6b:
         30:fe:b8:84:f4:2d:9b:18:4a:cc:36:b8:df:30:5f:a8:f6:57:
         a3:3d:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:49:16 2026 by rpki-client