Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212335.roa
File:                     AS212335.roa (raw, json)
Hash identifier:          sUgkworkOuxsFK0qa6e7YFDr7tdFCpphBrCWfLbwIOo=
Subject key identifier:   B6:5C:43:8A:98:B9:5B:79:33:CB:A1:91:E5:92:75:E1:10:A5:98:3F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0C2D92E103DC3C4EBBCA02531D6FA0C92BFAF325
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212335.roa
Signing time:             Thu 22 Feb 2024 11:34:47 +0000
ROA not before:           Thu 22 Feb 2024 11:29:47 +0000
ROA not after:            Thu 20 Feb 2025 11:34:47 +0000
asID:                     212335
IP address blocks:        209.200.249.0/24 maxlen: 24
                          216.227.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 02:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:92:e1:03:dc:3c:4e:bb:ca:02:53:1d:6f:a0:c9:2b:fa:f3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 22 11:29:47 2024 GMT
            Not After : Feb 20 11:34:47 2025 GMT
        Subject: CN=B65C438A98B95B7933CBA191E59275E110A5983F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cf:c0:05:62:58:2b:55:47:e5:0d:1e:db:ac:
                    eb:04:b7:0f:92:ae:40:e9:83:ac:32:cb:fd:16:5c:
                    fd:25:6f:7a:26:b6:86:ed:7e:e0:b1:70:5c:32:8c:
                    db:7d:24:60:1e:75:86:d2:38:b3:7a:68:43:c5:49:
                    d6:3b:bf:28:4d:7b:cc:09:18:08:17:d6:89:82:51:
                    48:81:d3:7c:dd:f3:7a:98:30:ba:c5:18:89:ce:30:
                    61:db:25:d4:69:32:71:d2:38:84:78:27:4b:dd:29:
                    c2:5c:2c:a8:03:10:5c:d5:96:0a:f9:e6:32:67:16:
                    c1:1d:3a:7c:ed:24:c7:e1:6f:c8:69:50:27:99:3b:
                    4e:0f:96:77:2c:5a:82:68:4d:a0:87:61:fe:6d:2b:
                    f2:3a:31:0b:b6:e3:f7:c7:b8:c0:10:f4:33:19:d3:
                    f9:4a:d5:84:e7:7a:52:2b:48:55:3f:59:d1:83:5d:
                    8d:59:a9:8c:9e:81:bc:2c:f4:42:0e:be:7f:16:9c:
                    d7:fe:b5:b1:63:8e:82:93:f9:f3:25:10:2a:21:f8:
                    fa:79:24:91:ca:7d:ad:5a:4b:99:e5:6e:3d:c1:76:
                    13:d5:48:1b:6b:e5:83:3e:a9:97:05:b5:24:1a:92:
                    7a:78:5c:45:f9:c4:c3:98:43:60:51:b5:f6:00:b8:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5C:43:8A:98:B9:5B:79:33:CB:A1:91:E5:92:75:E1:10:A5:98:3F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.249.0/24
                  216.227.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8c:b7:2f:bd:09:f6:89:df:a6:1a:95:2b:89:7c:5d:33:6f:
         df:d3:70:ca:4b:4d:b1:39:5b:d2:3c:68:e6:68:87:9d:35:22:
         48:ea:a1:cd:c9:75:39:90:07:fc:81:4f:0d:c8:85:78:dc:65:
         3f:c7:af:34:f9:42:ce:98:b9:60:60:12:02:10:60:74:9e:57:
         13:50:99:8d:0d:eb:a0:76:48:74:74:79:58:04:45:7b:65:5f:
         5a:bd:da:ab:07:57:4d:35:b3:77:13:2c:8f:c4:af:5d:92:79:
         d9:2c:5d:95:e7:e5:f9:ea:b6:7e:7c:57:ad:e0:8e:22:2c:da:
         7a:ec:53:af:dd:19:d9:2d:bf:ea:24:e4:ad:34:5a:40:47:28:
         2d:4c:72:35:40:cf:ed:e6:47:d6:f1:00:dd:55:fe:56:ac:23:
         de:06:34:49:e3:94:66:fc:8a:4e:f0:c8:1a:30:5c:38:ee:d0:
         80:69:93:a1:3f:89:af:dc:a5:a7:cf:33:cc:1c:7a:70:75:4a:
         32:e0:62:f0:85:e2:43:45:ee:93:e1:39:7a:98:ec:2a:01:06:
         85:64:94:13:16:41:ed:ae:19:9a:93:47:a8:55:71:13:3d:96:
         c4:ee:de:96:1b:82:8b:42:52:33:4d:68:9b:70:22:e7:0e:4f:
         6c:ff:9a:50
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUDC2S4QPcPE67ygJTHW+gySv68yUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwMjIyMTEyOTQ3WhcNMjUwMjIwMTEzNDQ3
WjAzMTEwLwYDVQQDEyhCNjVDNDM4QTk4Qjk1Qjc5MzNDQkExOTFFNTkyNzVFMTEw
QTU5ODNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c/ABWJYK1VH
5Q0e26zrBLcPkq5A6YOsMsv9Flz9JW96JraG7X7gsXBcMozbfSRgHnWG0jizemhD
xUnWO78oTXvMCRgIF9aJglFIgdN83fN6mDC6xRiJzjBh2yXUaTJx0jiEeCdL3SnC
XCyoAxBc1ZYK+eYyZxbBHTp87STH4W/IaVAnmTtOD5Z3LFqCaE2gh2H+bSvyOjEL
tuP3x7jAEPQzGdP5StWE53pSK0hVP1nRg12NWamMnoG8LPRCDr5/FpzX/rWxY46C
k/nzJRAqIfj6eSSRyn2tWkuZ5W49wXYT1Ugba+WDPqmXBbUkGpJ6eFxF+cTDmENg
UbX2ALi9nQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFLZcQ4qYuVt5M8uhkeWSdeEQ
pZg/MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxMjMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEANHI+QMEANjj3DANBgkqhkiG9w0B
AQsFAAOCAQEAgIy3L70J9onfphqVK4l8XTNv39NwyktNsTlb0jxo5miHnTUiSOqh
zcl1OZAH/IFPDciFeNxlP8evNPlCzpi5YGASAhBgdJ5XE1CZjQ3roHZIdHR5WARF
e2VfWr3aqwdXTTWzdxMsj8SvXZJ52Sxdlefl+eq2fnxXreCOIizaeuxTr90Z2S2/
6iTkrTRaQEcoLUxyNUDP7eZH1vEA3VX+Vqwj3gY0SeOUZvyKTvDIGjBcOO7QgGmT
oT+Jr9ylp88zzBx6cHVKMuBi8IXiQ0Xuk+E5epjsKgEGhWSUExZB7a4ZmpNHqFVx
Ez2WxO7elhuCi0JSM01om3Ai5w5PbP+aUA==
-----END CERTIFICATE-----
Generated at Wed May 1 00:35:08 2024 by rpki-client on console-ams.rpki-client.org