Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          vw6ffiRbMFSsSSb/UrKltUmGmr7sznl0navo+Ait3H4=
Subject key identifier:   F8:D4:54:D3:CF:A3:6C:18:92:64:52:5C:3D:77:1D:24:DA:79:62:15
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0E805CA36E90BADB28EBEA86C96C62C9DFA4228D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
Signing time:             Fri 25 Oct 2024 00:01:54 +0000
ROA not before:           Thu 24 Oct 2024 23:56:54 +0000
ROA not after:            Fri 24 Oct 2025 00:01:54 +0000
asID:                     212238
IP address blocks:        172.245.102.0/24 maxlen: 24
                          192.228.124.0/23 maxlen: 23
                          209.200.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:80:5c:a3:6e:90:ba:db:28:eb:ea:86:c9:6c:62:c9:df:a4:22:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 24 23:56:54 2024 GMT
            Not After : Oct 24 00:01:54 2025 GMT
        Subject: CN=F8D454D3CFA36C189264525C3D771D24DA796215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:da:c6:80:c2:98:f5:42:14:18:05:c6:18:
                    e7:a2:2d:21:88:eb:ea:5a:12:f3:72:2f:69:e5:d2:
                    25:e8:01:e5:61:14:e0:ed:fb:c4:44:40:e4:f0:51:
                    27:d1:ea:76:45:a0:ae:81:a1:5c:fa:a9:c4:f4:65:
                    74:77:ac:dc:10:04:b8:0e:26:47:61:b3:15:39:cc:
                    2a:f6:4e:38:48:9f:3a:98:47:30:7f:83:f5:f8:36:
                    da:16:9a:08:0e:71:84:69:f6:fe:a0:44:77:fb:73:
                    cb:34:26:4f:2c:8e:22:7a:f3:b1:6f:f1:51:a7:c3:
                    e7:8f:d4:ed:76:c9:81:c0:5e:84:72:34:6c:c5:bb:
                    de:85:8b:44:cf:d6:61:4b:d6:87:94:7c:b3:e6:b0:
                    de:40:16:06:87:1c:68:23:98:ca:50:77:7c:54:b8:
                    c7:04:64:18:a0:97:37:05:c6:15:ca:50:2b:bf:70:
                    7b:d2:67:10:a0:51:28:20:f4:9e:c8:5c:f6:d2:db:
                    42:6d:1c:a6:f1:65:40:a2:18:db:2c:24:be:81:bc:
                    02:8f:c1:9b:e5:01:60:db:7b:b3:9d:86:bb:81:09:
                    19:83:e9:c1:04:d8:c4:91:39:7b:6a:c0:0a:c7:1a:
                    73:df:b3:66:d3:bd:40:ca:2f:05:38:a6:07:b4:25:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D4:54:D3:CF:A3:6C:18:92:64:52:5C:3D:77:1D:24:DA:79:62:15
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.245.102.0/24
                  192.228.124.0/23
                  209.200.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:5e:f5:de:37:40:dc:1d:1a:58:02:f1:7b:5f:45:05:25:
         f8:33:f7:df:c3:21:55:c0:36:1e:51:79:78:4b:42:86:9d:f1:
         a0:91:63:e2:26:fc:17:21:ef:f1:e3:d1:49:5e:b4:ed:f2:af:
         d5:a4:2c:38:1d:d1:31:11:43:a8:14:de:31:df:ba:10:85:e7:
         cf:87:0f:f8:74:e1:72:3d:ae:dd:38:d2:68:ad:95:c6:3d:16:
         22:c4:f1:d1:3e:b3:f0:0f:30:96:2a:da:46:8c:67:44:0d:e6:
         45:69:10:f5:7a:66:fb:2d:d1:f5:fe:5c:f9:cb:e3:f3:91:cb:
         08:1c:89:19:a4:a1:ce:a1:5f:c9:27:53:d4:4e:c1:06:d4:3f:
         f0:3c:dd:1f:d7:fc:b9:94:4d:28:61:59:b0:bc:87:5f:c4:7f:
         70:be:b5:65:c9:58:0d:22:ec:95:f4:0f:44:a7:c3:39:f5:da:
         cd:e5:8b:cf:a7:9c:3c:fc:d1:46:b5:4a:14:f0:23:43:6c:a2:
         3c:5d:11:23:4a:8c:60:6b:02:e9:cd:24:71:08:00:3f:3f:43:
         25:be:ee:22:4f:5e:53:61:f4:9b:1d:3e:5b:d7:cd:17:e8:11:
         8b:58:bd:74:5a:16:05:70:64:63:f3:6c:77:b2:3d:7f:de:de:
         7e:6e:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org