Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211439.roa
File:                     AS211439.roa (raw, json)
Hash identifier:          QmcfmwL5eoPG3LNf3M7Pjw2nRD2kLJwKJ9dZgyxgMY8=
Subject key identifier:   0F:5C:03:B1:D8:EF:49:83:B5:B9:E7:F6:82:58:74:F5:68:52:22:C1
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       099D8AF2A074D7D6F2C6AE0706F68CC5EC32912E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211439.roa
Signing time:             Tue 27 May 2025 08:01:51 +0000
ROA not before:           Tue 27 May 2025 07:56:51 +0000
ROA not after:            Tue 26 May 2026 08:01:51 +0000
asID:                     211439
IP address blocks:        67.210.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 01:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9d:8a:f2:a0:74:d7:d6:f2:c6:ae:07:06:f6:8c:c5:ec:32:91:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 27 07:56:51 2025 GMT
            Not After : May 26 08:01:51 2026 GMT
        Subject: CN=0F5C03B1D8EF4983B5B9E7F6825874F5685222C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:22:c0:72:79:64:a0:ed:5a:9d:3a:18:ea:
                    a9:66:84:26:19:bd:48:6f:1a:36:b2:1b:3f:b3:67:
                    a8:a9:ca:c0:02:ee:f2:b1:59:71:6a:30:76:19:ee:
                    6d:c2:ed:05:1e:b3:a0:31:db:de:ed:d6:52:37:71:
                    d9:c3:6b:71:41:ec:6a:56:95:5c:b2:40:6f:0c:b7:
                    6e:62:e6:87:92:23:59:da:59:20:aa:b3:d9:b3:5a:
                    c1:2b:3d:2a:cc:d0:5a:77:27:f4:f9:8b:89:be:59:
                    a9:ce:b9:e3:7b:7c:f9:e9:6b:46:60:c0:b6:3b:9e:
                    dd:11:90:0f:63:89:94:0c:a4:cc:1a:18:56:be:dc:
                    7a:bb:79:7b:2c:05:79:7e:75:c3:97:8c:52:88:85:
                    a5:63:47:d5:b4:d4:e6:7d:a8:fb:0f:12:98:a8:2c:
                    75:e5:29:fa:91:17:d0:18:ba:9f:f6:82:93:9c:5e:
                    1d:d5:35:18:2d:95:c5:9c:a3:a4:17:a3:f1:c0:0d:
                    a8:45:04:35:aa:6e:c8:4f:db:eb:1e:c6:e4:60:f7:
                    1a:b3:5f:9f:d6:78:df:f9:69:65:06:98:f7:d4:0b:
                    f3:f8:9c:69:27:3a:e2:7e:c4:03:e5:91:5a:6e:6c:
                    33:87:d8:67:3e:fe:df:9a:ef:53:54:85:63:ad:55:
                    b5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:03:B1:D8:EF:49:83:B5:B9:E7:F6:82:58:74:F5:68:52:22:C1
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:5a:50:86:78:63:dc:e4:36:7c:8f:0a:80:6d:b4:51:50:
         64:c4:9c:9a:2d:76:f5:84:1f:2f:30:9c:1f:08:68:86:25:80:
         6f:86:fd:87:87:6e:b5:0c:88:b3:b7:04:33:33:9d:e2:59:f5:
         8e:5c:c1:f3:50:ac:b8:2c:1c:bf:4d:8f:8d:a9:75:b4:87:0b:
         10:e2:38:24:46:cf:e0:be:bb:fb:42:45:84:27:0f:81:7e:e0:
         53:d3:28:d3:47:fc:a2:60:55:f9:69:0c:a2:5b:3f:ad:d0:6e:
         72:81:7c:76:58:61:59:9f:46:32:48:51:83:fa:23:f1:ef:1f:
         24:0f:00:d7:ad:60:25:c6:e3:50:ea:69:66:8e:c9:19:0f:ae:
         92:aa:8c:e5:ec:6d:e8:58:3a:59:7c:0a:00:c2:48:62:08:10:
         57:04:ba:bd:d6:a6:64:d4:bd:22:2f:fc:6f:fd:d1:c4:11:d8:
         8f:f7:55:4c:38:d7:dc:fe:ff:d5:d9:d2:99:10:82:79:97:c2:
         8b:1e:b1:af:0e:f8:14:c2:4f:f6:e7:98:61:19:76:a0:38:2e:
         21:31:58:92:4b:ef:ed:56:d2:4f:ac:86:ae:c3:70:76:f8:6b:
         32:3c:32:99:2a:14:80:68:6b:9e:73:3c:b6:6f:d1:38:f3:e7:
         d5:fb:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:14:28 2025 by rpki-client