Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS12239.roa
File:                     AS12239.roa (raw, json)
Hash identifier:          os3BMh9VjCfslTWExXmoD2KY/ZVqkVTJ+Pbu0jGOpLw=
Subject key identifier:   F7:D5:FF:25:21:36:FF:B0:CC:9C:A7:79:75:C6:D0:AB:D7:12:E9:AC
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       122A1EC37AEE850F21EBBBE9B6EA2DAB532F1343
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS12239.roa
Signing time:             Tue 13 Feb 2024 06:27:20 +0000
ROA not before:           Tue 13 Feb 2024 06:22:20 +0000
ROA not after:            Tue 11 Feb 2025 06:27:20 +0000
asID:                     12239
IP address blocks:        173.86.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2a:1e:c3:7a:ee:85:0f:21:eb:bb:e9:b6:ea:2d:ab:53:2f:13:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Feb 13 06:22:20 2024 GMT
            Not After : Feb 11 06:27:20 2025 GMT
        Subject: CN=F7D5FF252136FFB0CC9CA77975C6D0ABD712E9AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:06:60:c1:ab:2e:42:18:dd:73:ab:aa:35:
                    c6:43:15:58:76:eb:e5:0b:fe:3b:9b:b6:33:93:c9:
                    b7:c8:7b:89:51:81:0e:df:ad:5f:69:e3:58:cb:b8:
                    f0:1e:15:41:b4:80:d9:10:ba:a3:22:ad:c5:fd:45:
                    3a:c2:5e:07:43:da:dd:7c:d2:e3:ba:13:10:2e:28:
                    9e:ad:e2:3c:14:7e:75:b1:1d:65:f0:9b:16:36:ee:
                    34:b7:14:d6:50:b2:e1:73:77:d8:d6:a0:82:8c:38:
                    d7:db:c0:d8:8f:35:82:dc:b5:de:cf:21:f3:e1:2b:
                    fd:c5:4b:31:7d:0d:06:61:02:0b:8f:7c:ff:12:a3:
                    5c:3c:55:9e:0c:66:e1:fb:67:b4:e0:89:72:28:26:
                    a2:13:a8:76:07:9e:76:95:81:0e:2c:21:84:80:30:
                    7a:d6:04:65:6e:6e:ac:9f:04:87:f7:b9:6c:2d:fa:
                    ef:fc:26:2c:89:3c:48:6e:b6:82:e8:59:a1:fe:0b:
                    b6:3a:a1:0c:f7:b4:43:f3:0e:22:df:92:d3:80:b0:
                    d6:85:11:33:77:92:dd:b5:6f:79:98:e3:dc:38:fb:
                    8e:d7:5a:cc:79:09:f4:1f:2a:15:46:a6:01:9e:95:
                    af:7a:15:3c:af:22:65:2c:25:b9:2f:dc:48:9d:51:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D5:FF:25:21:36:FF:B0:CC:9C:A7:79:75:C6:D0:AB:D7:12:E9:AC
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS12239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.86.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:6c:8d:38:e4:8b:87:12:d0:66:08:bf:48:da:db:51:eb:
         e0:7a:68:bd:23:cd:13:39:be:b5:16:a4:56:43:09:40:a1:8f:
         a5:73:aa:0c:2a:58:38:e2:e5:d2:59:83:c0:b6:68:49:0b:6b:
         eb:64:1a:1b:19:ee:0f:a6:4b:27:75:82:43:87:c4:65:2f:e0:
         cc:0c:1e:8c:6f:78:6a:9d:84:2d:07:e2:0c:e2:7e:32:e9:bb:
         2c:6d:5b:8d:e7:d8:64:91:ba:d0:1a:ba:f6:14:3f:d5:de:25:
         f3:c2:60:8e:e9:48:24:a2:d7:32:0c:f9:28:8b:e4:11:6f:8d:
         6b:d0:6e:5b:03:9f:9a:6d:08:1d:9d:16:f7:d0:d9:65:d8:41:
         ee:36:3c:aa:52:97:db:78:53:5f:fc:55:35:a7:10:dc:2f:05:
         3c:9f:07:50:64:35:ec:ca:e1:bc:58:c1:71:55:b7:67:2f:95:
         c7:5c:fc:f3:a8:77:d9:b5:0f:6f:d7:b1:0e:a3:e3:f3:79:fb:
         41:08:a3:1d:23:06:8a:fb:27:4c:4d:09:b9:04:82:34:f1:58:
         b0:09:c7:6e:74:d9:d7:f9:f5:ef:9f:51:59:f5:52:2d:09:3c:
         cc:a0:97:ef:3f:ba:88:5f:1b:68:3e:f3:ad:64:5d:36:88:e6:
         e2:e4:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org