Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212336.roa
File:                     AS212336.roa (raw, json)
Hash identifier:          9G9J691qUgHVLM7Rh6aBiqobFngMe5tP5mWsuoNVJjI=
Subject key identifier:   6C:D9:C1:5A:8A:17:91:50:4D:7A:C7:B1:81:D1:AD:98:05:E3:85:42
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       37670C1ECEBBE2580B84BCD88630F69185A6B210
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212336.roa
Signing time:             Wed 23 Jul 2025 03:10:22 +0000
ROA not before:           Wed 23 Jul 2025 03:05:22 +0000
ROA not after:            Wed 22 Jul 2026 03:10:22 +0000
asID:                     212336
IP address blocks:        23.95.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:67:0c:1e:ce:bb:e2:58:0b:84:bc:d8:86:30:f6:91:85:a6:b2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 23 03:05:22 2025 GMT
            Not After : Jul 22 03:10:22 2026 GMT
        Subject: CN=6CD9C15A8A1791504D7AC7B181D1AD9805E38542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:c8:7d:9d:38:ae:e4:94:7d:cf:48:8a:d0:
                    fd:13:f9:90:46:d9:87:dc:ca:b3:7b:15:b1:6c:d3:
                    8c:7c:d7:e9:ca:64:92:12:07:39:ca:df:14:e5:7f:
                    31:47:44:20:d9:5b:1e:9c:32:91:59:54:dd:2e:cd:
                    53:35:16:b0:df:c6:61:58:85:8b:5e:13:45:fd:be:
                    a4:c3:6e:f2:1c:92:c9:fe:94:fe:84:ce:0c:16:85:
                    38:9f:7e:37:52:ba:d0:6e:e7:16:00:91:e1:3d:8c:
                    47:4f:97:55:86:6c:db:5e:c1:e4:ac:71:cf:a2:f7:
                    42:24:f3:50:24:03:53:80:68:4a:e2:14:77:17:14:
                    07:8e:dc:5e:4d:55:47:6d:a9:44:3e:ce:70:64:a4:
                    74:eb:49:fe:a7:fb:94:fc:85:20:34:b1:62:e1:01:
                    73:1d:37:a6:e5:b9:81:61:b9:6b:06:fd:f3:71:6d:
                    11:fc:8c:a7:88:ca:5e:ed:96:89:ab:52:51:89:2c:
                    15:1c:6a:0e:28:15:97:c9:8b:39:76:62:93:e7:d8:
                    5c:47:8a:78:40:a8:5f:a7:82:7a:83:73:16:3a:13:
                    20:90:b6:52:46:89:8e:de:60:af:bb:d6:24:fd:9b:
                    af:13:94:7d:08:f3:22:b7:34:4d:32:0d:92:c1:68:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D9:C1:5A:8A:17:91:50:4D:7A:C7:B1:81:D1:AD:98:05:E3:85:42
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:7d:86:73:41:2f:7d:9e:3e:85:e2:9e:ec:03:19:83:e1:ea:
         3f:c9:3d:c3:60:55:cf:2b:bf:18:0e:b0:8e:9f:ae:80:62:fb:
         58:d9:38:0f:4b:ff:84:84:40:b4:3d:d3:ce:7b:c2:aa:4b:bb:
         d9:08:f9:69:31:f9:f1:9b:57:14:db:49:f1:ee:ba:ed:06:60:
         94:78:ed:ac:28:22:4e:ff:72:fd:8d:6a:bd:9c:55:5c:8e:72:
         0f:31:c4:41:9d:8e:13:3e:17:02:b0:67:88:87:ae:83:6b:77:
         2a:5d:fb:ff:ec:58:90:4d:8f:c2:a6:1d:f2:66:60:31:6a:9b:
         28:e5:66:1f:4e:9c:b5:34:ff:40:b1:17:31:19:e9:c9:e2:e8:
         cf:66:3c:79:11:37:1f:c7:fb:bc:3b:0e:c3:d1:52:a9:72:3a:
         df:a7:91:4c:70:43:2f:77:04:f4:d8:70:99:b5:59:89:a3:bf:
         61:95:a7:a6:61:7f:8d:2e:ca:f8:ae:c0:39:4f:67:ef:b3:37:
         69:2c:35:83:6e:3d:cd:3d:11:cc:ae:aa:0d:9c:4d:65:62:80:
         a8:88:fe:bf:dd:ab:5e:ff:02:be:3b:ef:da:1d:ad:dc:b2:70:
         87:9d:eb:84:b8:f8:77:e1:22:bb:52:f7:b1:44:6f:82:bc:94:
         a2:48:45:95
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUN2cMHs674lgLhLzYhjD2kYWmshAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzIzMDMwNTIyWhcNMjYwNzIyMDMxMDIy
WjAzMTEwLwYDVQQDEyg2Q0Q5QzE1QThBMTc5MTUwNEQ3QUM3QjE4MUQxQUQ5ODA1
RTM4NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbzIfZ04ruSU
fc9IitD9E/mQRtmH3MqzexWxbNOMfNfpymSSEgc5yt8U5X8xR0Qg2VsenDKRWVTd
Ls1TNRaw38ZhWIWLXhNF/b6kw27yHJLJ/pT+hM4MFoU4n343UrrQbucWAJHhPYxH
T5dVhmzbXsHkrHHPovdCJPNQJANTgGhK4hR3FxQHjtxeTVVHbalEPs5wZKR060n+
p/uU/IUgNLFi4QFzHTem5bmBYblrBv3zcW0R/IyniMpe7ZaJq1JRiSwVHGoOKBWX
yYs5dmKT59hcR4p4QKhfp4J6g3MWOhMgkLZSRomO3mCvu9Yk/ZuvE5R9CPMitzRN
Mg2SwWg73QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGzZwVqKF5FQTXrHsYHRrZgF
44VCMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxMjMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdfezANBgkqhkiG9w0BAQsFAAOC
AQEAgX2Gc0EvfZ4+heKe7AMZg+HqP8k9w2BVzyu/GA6wjp+ugGL7WNk4D0v/hIRA
tD3TznvCqku72Qj5aTH58ZtXFNtJ8e667QZglHjtrCgiTv9y/Y1qvZxVXI5yDzHE
QZ2OEz4XArBniIeug2t3Kl37/+xYkE2PwqYd8mZgMWqbKOVmH06ctTT/QLEXMRnp
yeLoz2Y8eRE3H8f7vDsOw9FSqXI636eRTHBDL3cE9NhwmbVZiaO/YZWnpmF/jS7K
+K7AOU9n77M3aSw1g249zT0RzK6qDZxNZWKAqIj+v92rXv8Cvjvv2h2t3LJwh53r
hLj4d+Eiu1L3sURvgryUokhFlQ==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:25 2025 by rpki-client