Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS211192.roa
File:                     AS211192.roa (raw, json)
Hash identifier:          Ba49qwQs/MkOlr1s41J7X1iPi5Va9fZzGc0onuOT3Tw=
Subject key identifier:   61:02:3F:DD:0D:19:EE:04:5B:CB:D8:E0:8A:01:51:81:2D:EE:81:25
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7847C85C3B153D8D3F10D9F044440B61C126467D
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS211192.roa
Signing time:             Thu 22 Jun 2023 11:32:02 +0000
ROA not before:           Thu 22 Jun 2023 11:27:02 +0000
ROA not after:            Thu 20 Jun 2024 11:32:02 +0000
asID:                     211192
IP address blocks:        205.234.190.0/24 maxlen: 24
                          205.234.251.0/24 maxlen: 24
                          216.246.58.0/24 maxlen: 24
                          216.246.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 10:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:47:c8:5c:3b:15:3d:8d:3f:10:d9:f0:44:44:0b:61:c1:26:46:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jun 22 11:27:02 2023 GMT
            Not After : Jun 20 11:32:02 2024 GMT
        Subject: CN=61023FDD0D19EE045BCBD8E08A0151812DEE8125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:51:c1:33:7f:eb:70:18:7c:b3:79:8a:71:
                    79:02:ae:84:9f:30:77:60:e3:da:51:f9:7a:15:c2:
                    aa:f4:d4:f8:54:09:d7:17:5a:8c:02:6f:f1:38:da:
                    34:2c:03:49:dd:2a:64:e9:82:23:bc:00:d1:02:c6:
                    28:e3:f3:32:a4:d7:52:3a:a9:bf:9f:32:3a:c3:69:
                    40:3e:af:ad:92:55:9a:12:7f:02:27:48:54:4b:43:
                    2d:51:47:4e:5d:6f:fc:5a:93:e8:ab:48:93:47:43:
                    2c:16:87:18:51:45:59:c4:e6:93:8b:93:6b:80:9f:
                    e0:9a:41:1f:ab:10:42:d5:6e:8a:0c:3b:92:b6:ba:
                    22:8e:0a:d1:73:d8:fb:41:0f:ea:ab:eb:77:a9:fc:
                    46:8a:20:d1:47:69:5a:ee:71:8c:fd:42:89:07:78:
                    97:b8:fb:63:cf:12:c6:8c:49:42:ba:cf:2b:1d:94:
                    40:d9:30:04:0e:ae:53:2d:55:c0:0f:6d:d4:db:5a:
                    8c:ec:6a:db:74:7a:d2:e8:92:ac:95:fa:a3:9e:82:
                    30:47:4e:98:00:e5:58:c3:37:44:bc:fc:95:c8:f0:
                    2c:6a:23:2d:9b:0b:de:94:5d:1d:2e:13:b3:c1:b5:
                    a4:dd:6f:1d:cf:27:5f:4c:85:44:ca:b2:9f:25:f1:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:02:3F:DD:0D:19:EE:04:5B:CB:D8:E0:8A:01:51:81:2D:EE:81:25
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS211192.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.190.0/24
                  205.234.251.0/24
                  216.246.58.0/24
                  216.246.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:a1:33:a9:ac:84:5c:ea:c3:25:dd:9d:3b:23:5c:d9:ab:
         f4:f7:4a:c7:57:d4:a4:91:53:5d:4f:a2:11:40:97:27:cd:50:
         fb:12:ce:4e:18:fc:dd:50:84:f8:d4:28:74:83:45:6c:d4:ee:
         4a:08:74:93:b9:e4:89:c0:ff:7b:60:03:59:1c:15:e6:e3:98:
         e1:bd:d3:a9:e2:5f:10:64:bf:bf:5a:b3:21:1b:c3:c9:a7:02:
         01:65:aa:d7:70:8c:fb:eb:20:47:0e:a1:14:79:42:03:90:32:
         07:c0:0b:a8:56:67:76:1d:f3:1d:a2:bf:2b:6a:03:f3:da:ba:
         50:52:fc:7a:e6:47:95:9e:03:99:c7:56:77:d6:cb:4e:e8:0f:
         b5:2a:79:f6:94:00:8c:0f:5e:3a:b6:64:d3:79:aa:e5:69:ee:
         65:12:0a:3e:ca:74:da:95:2c:6e:c5:57:05:51:e7:ec:3f:c2:
         5b:77:d5:b0:65:99:fc:f0:6d:af:7e:bf:15:98:fd:53:a0:ad:
         27:85:49:ab:67:15:af:89:0f:61:72:a6:2b:d3:7f:2f:25:4a:
         ac:ef:a3:71:86:ea:22:a8:71:61:ef:e7:58:49:30:81:8b:b3:
         a4:cc:08:68:27:71:1d:d0:ec:b9:9e:a1:0e:28:d1:53:1f:de:
         8d:4c:a5:e1
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUeEfIXDsVPY0/ENnwREQLYcEmRn0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNjIyMTEyNzAyWhcNMjQwNjIwMTEzMjAy
WjAzMTEwLwYDVQQDEyg2MTAyM0ZERDBEMTlFRTA0NUJDQkQ4RTA4QTAxNTE4MTJE
RUU4MTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoulRwTN/63AY
fLN5inF5Aq6EnzB3YOPaUfl6FcKq9NT4VAnXF1qMAm/xONo0LANJ3Spk6YIjvADR
AsYo4/MypNdSOqm/nzI6w2lAPq+tklWaEn8CJ0hUS0MtUUdOXW/8WpPoq0iTR0Ms
FocYUUVZxOaTi5NrgJ/gmkEfqxBC1W6KDDuStroijgrRc9j7QQ/qq+t3qfxGiiDR
R2la7nGM/UKJB3iXuPtjzxLGjElCus8rHZRA2TAEDq5TLVXAD23U21qM7GrbdHrS
6JKslfqjnoIwR06YAOVYwzdEvPyVyPAsaiMtmwvelF0dLhOzwbWk3W8dzydfTIVE
yrKfJfEnEwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFGECP90NGe4EW8vY4IoBUYEt
7oElMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzIxMTE5Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAM3qvgMEAM3q+wMEANj2OgMEANj2
WzANBgkqhkiG9w0BAQsFAAOCAQEADUuhM6mshFzqwyXdnTsjXNmr9PdKx1fUpJFT
XU+iEUCXJ81Q+xLOThj83VCE+NQodINFbNTuSgh0k7nkicD/e2ADWRwV5uOY4b3T
qeJfEGS/v1qzIRvDyacCAWWq13CM++sgRw6hFHlCA5AyB8ALqFZndh3zHaK/K2oD
89q6UFL8euZHlZ4DmcdWd9bLTugPtSp59pQAjA9eOrZk03mq5WnuZRIKPsp02pUs
bsVXBVHn7D/CW3fVsGWZ/PBtr36/FZj9U6CtJ4VJq2cVr4kPYXKmK9N/LyVKrO+j
cYbqIqhxYe/nWEkwgYuzpMwIaCdxHdDsuZ6hDijRUx/ejUyl4Q==
-----END CERTIFICATE-----
Generated at Fri May 17 08:51:52 2024 by rpki-client on console-ams.rpki-client.org