Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          51DEgwBm8v0BlQGF7NkkPWsXRC1NgxO3k3xug4154+o=
Subject key identifier:   BD:58:D0:20:99:0B:2F:4A:C6:AC:B7:35:1B:25:40:3A:AF:A7:52:09
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       05D03E1F4388AA12B83A6E2BBA61F972B0E62F87
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212238.roa
Signing time:             Thu 31 Aug 2023 15:38:56 +0000
ROA not before:           Thu 31 Aug 2023 15:33:56 +0000
ROA not after:            Thu 29 Aug 2024 15:38:56 +0000
asID:                     212238
IP address blocks:        50.31.139.0/24 maxlen: 24
                          50.31.161.0/24 maxlen: 24
                          64.202.99.0/24 maxlen: 24
                          64.202.100.0/24 maxlen: 24
                          64.202.103.0/24 maxlen: 24
                          64.202.105.0/24 maxlen: 24
                          64.202.106.0/24 maxlen: 24
                          66.225.193.0/24 maxlen: 24
                          66.225.196.0/24 maxlen: 24
                          66.225.199.0/24 maxlen: 24
                          66.225.238.0/24 maxlen: 24
                          66.225.242.0/24 maxlen: 24
                          75.102.11.0/24 maxlen: 24
                          75.102.18.0/24 maxlen: 24
                          75.102.28.0/24 maxlen: 24
                          75.102.29.0/24 maxlen: 24
                          204.93.148.0/24 maxlen: 24
                          204.93.166.0/24 maxlen: 24
                          204.93.171.0/24 maxlen: 24
                          204.93.184.0/24 maxlen: 24
                          204.93.195.0/24 maxlen: 24
                          204.93.209.0/24 maxlen: 24
                          204.93.235.0/24 maxlen: 24
                          204.93.245.0/24 maxlen: 24
                          204.93.246.0/24 maxlen: 24
                          205.234.133.0/24 maxlen: 24
                          205.234.142.0/24 maxlen: 24
                          205.234.147.0/24 maxlen: 24
                          205.234.148.0/24 maxlen: 24
                          205.234.151.0/24 maxlen: 24
                          205.234.164.0/24 maxlen: 24
                          205.234.166.0/24 maxlen: 24
                          205.234.169.0/24 maxlen: 24
                          205.234.172.0/24 maxlen: 24
                          205.234.180.0/24 maxlen: 24
                          205.234.192.0/24 maxlen: 24
                          205.234.196.0/24 maxlen: 24
                          205.234.202.0/24 maxlen: 24
                          205.234.228.0/24 maxlen: 24
                          205.234.236.0/24 maxlen: 24
                          205.234.242.0/24 maxlen: 24
                          205.234.245.0/24 maxlen: 24
                          205.234.254.0/24 maxlen: 24
                          216.246.8.0/24 maxlen: 24
                          216.246.11.0/24 maxlen: 24
                          216.246.13.0/24 maxlen: 24
                          216.246.16.0/24 maxlen: 24
                          216.246.17.0/24 maxlen: 24
                          216.246.22.0/24 maxlen: 24
                          216.246.23.0/24 maxlen: 24
                          216.246.27.0/24 maxlen: 24
                          216.246.32.0/24 maxlen: 24
                          216.246.35.0/24 maxlen: 24
                          216.246.41.0/24 maxlen: 24
                          216.246.43.0/24 maxlen: 24
                          216.246.45.0/24 maxlen: 24
                          216.246.48.0/24 maxlen: 24
                          216.246.52.0/24 maxlen: 24
                          216.246.53.0/24 maxlen: 24
                          216.246.54.0/24 maxlen: 24
                          216.246.55.0/24 maxlen: 24
                          216.246.57.0/24 maxlen: 24
                          216.246.80.0/24 maxlen: 24
                          216.246.81.0/24 maxlen: 24
                          216.246.82.0/24 maxlen: 24
                          216.246.83.0/24 maxlen: 24
                          216.246.84.0/24 maxlen: 24
                          216.246.85.0/24 maxlen: 24
                          216.246.86.0/24 maxlen: 24
                          216.246.87.0/24 maxlen: 24
                          216.246.90.0/24 maxlen: 24
                          216.246.93.0/24 maxlen: 24
                          216.246.95.0/24 maxlen: 24
                          216.246.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 09:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d0:3e:1f:43:88:aa:12:b8:3a:6e:2b:ba:61:f9:72:b0:e6:2f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Aug 31 15:33:56 2023 GMT
            Not After : Aug 29 15:38:56 2024 GMT
        Subject: CN=BD58D020990B2F4AC6ACB7351B25403AAFA75209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:05:6d:cc:81:2d:24:3b:f3:89:32:f2:68:
                    9d:b4:d8:ae:00:62:f9:ef:f7:42:7e:7c:6c:c7:74:
                    e0:cb:05:71:cb:b4:21:70:3e:d9:a0:9a:b8:df:1d:
                    1f:35:d9:e6:0e:2f:8b:ae:ae:1e:ab:14:5d:c5:46:
                    93:9d:e4:3d:bf:9c:1b:28:56:d7:f4:6b:6f:da:b3:
                    08:ee:60:15:3d:22:24:28:9a:f0:61:b2:8d:00:7f:
                    51:a4:cb:61:02:08:8a:95:7f:39:e8:d2:92:9b:b5:
                    bb:e2:0c:b5:e6:89:b3:62:48:77:7b:ee:60:a0:48:
                    70:8c:28:ee:e7:7c:ca:e7:0d:41:fd:40:6d:84:20:
                    fe:0c:38:d4:24:bd:2d:2a:a7:2a:4a:3a:5b:ed:a8:
                    ab:b7:02:09:f1:c7:1b:c5:dd:f9:da:dd:84:1c:66:
                    ad:68:1c:76:8c:3e:73:2c:0b:79:55:b9:a9:49:11:
                    c8:17:55:00:71:65:ed:82:96:75:74:9e:46:f3:ad:
                    3d:79:4d:f8:ff:d7:e0:df:09:f6:a6:f6:dc:a8:8b:
                    22:8d:ac:61:08:e3:3f:a5:1b:67:f5:e7:30:20:ad:
                    2e:64:eb:3f:b1:2b:71:f9:fe:46:8c:c4:0f:b4:61:
                    e1:d7:58:f8:78:4e:9d:4e:31:7e:e3:a5:51:de:5a:
                    0a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:58:D0:20:99:0B:2F:4A:C6:AC:B7:35:1B:25:40:3A:AF:A7:52:09
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.139.0/24
                  50.31.161.0/24
                  64.202.99.0-64.202.100.255
                  64.202.103.0/24
                  64.202.105.0-64.202.106.255
                  66.225.193.0/24
                  66.225.196.0/24
                  66.225.199.0/24
                  66.225.238.0/24
                  66.225.242.0/24
                  75.102.11.0/24
                  75.102.18.0/24
                  75.102.28.0/23
                  204.93.148.0/24
                  204.93.166.0/24
                  204.93.171.0/24
                  204.93.184.0/24
                  204.93.195.0/24
                  204.93.209.0/24
                  204.93.235.0/24
                  204.93.245.0-204.93.246.255
                  205.234.133.0/24
                  205.234.142.0/24
                  205.234.147.0-205.234.148.255
                  205.234.151.0/24
                  205.234.164.0/24
                  205.234.166.0/24
                  205.234.169.0/24
                  205.234.172.0/24
                  205.234.180.0/24
                  205.234.192.0/24
                  205.234.196.0/24
                  205.234.202.0/24
                  205.234.228.0/24
                  205.234.236.0/24
                  205.234.242.0/24
                  205.234.245.0/24
                  205.234.254.0/24
                  216.246.8.0/24
                  216.246.11.0/24
                  216.246.13.0/24
                  216.246.16.0/23
                  216.246.22.0/23
                  216.246.27.0/24
                  216.246.32.0/24
                  216.246.35.0/24
                  216.246.41.0/24
                  216.246.43.0/24
                  216.246.45.0/24
                  216.246.48.0/24
                  216.246.52.0/22
                  216.246.57.0/24
                  216.246.80.0/21
                  216.246.90.0/24
                  216.246.93.0/24
                  216.246.95.0/24
                  216.246.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:c2:81:54:ac:b1:71:aa:f4:51:45:7b:f9:66:81:12:16:
         a1:1b:c2:74:05:88:c7:a2:3d:a3:79:1f:29:72:dd:83:ee:75:
         35:28:6a:aa:dc:5b:8b:27:4a:61:df:48:ea:a1:88:d3:d3:6c:
         41:9e:e7:1f:23:bd:42:2e:18:46:42:b7:b5:3c:c0:ee:c0:e6:
         4c:9f:9a:9b:97:65:de:e0:37:ca:70:15:ce:a8:f4:d8:53:dc:
         24:97:d0:97:94:cf:2b:58:38:49:ea:f4:4b:4a:28:03:3b:da:
         cd:45:7f:74:47:2e:0b:45:76:85:cc:66:d0:a0:c1:79:aa:9d:
         b2:0c:78:7e:2e:4e:a9:87:67:84:bc:33:9b:1b:0f:0e:63:91:
         b0:e1:9f:3c:11:4f:8c:6b:5f:1a:e5:79:c3:99:d6:dd:75:45:
         32:32:1a:38:dd:cd:38:6c:01:19:ab:bd:27:bc:f6:36:30:51:
         2b:32:a8:8a:54:fc:b5:98:be:1f:5e:63:f0:bf:36:92:49:72:
         29:35:93:8a:e9:89:62:21:ad:f9:47:1d:7c:74:24:9c:88:c9:
         0e:28:52:22:2e:61:ce:35:ea:96:04:1a:42:ff:0e:88:8c:de:
         fa:e8:49:b1:43:af:2f:de:ec:bc:87:42:5a:12:f7:d5:1e:a5:
         61:90:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 08:10:32 2024 by rpki-client on console-ams.rpki-client.org