Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212429.roa
File:                     AS212429.roa (raw, json)
Hash identifier:          lVjrMY9Y3rihKXUZbF9ALRl/lWtfiQHvS20iAFkkfRE=
Subject key identifier:   63:58:06:90:A1:A9:4D:59:DE:A6:73:35:8C:8F:D2:06:FB:7F:37:FD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       023D6F29D512B0D3F5509DFF6FA8E85DE878749A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212429.roa
Signing time:             Wed 24 Sep 2025 21:20:08 +0000
ROA not before:           Wed 24 Sep 2025 21:15:08 +0000
ROA not after:            Wed 23 Sep 2026 21:20:08 +0000
asID:                     212429
IP address blocks:        23.226.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 22:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3d:6f:29:d5:12:b0:d3:f5:50:9d:ff:6f:a8:e8:5d:e8:78:74:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 24 21:15:08 2025 GMT
            Not After : Sep 23 21:20:08 2026 GMT
        Subject: CN=63580690A1A94D59DEA673358C8FD206FB7F37FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:64:63:2c:a2:fd:fd:e8:36:9f:7b:06:68:
                    2e:0e:9d:13:81:73:2c:4c:77:e7:cb:a6:e1:83:4f:
                    08:e9:fe:0f:1c:86:31:af:aa:9f:06:6b:1c:fb:48:
                    51:c7:ea:05:87:91:8e:70:d1:70:66:48:64:9c:ab:
                    bd:24:bf:d3:4c:fd:6b:40:44:ee:5c:2c:ca:5f:3f:
                    15:85:c5:51:cd:6f:4a:d0:74:2d:98:b3:ad:35:b2:
                    17:94:72:59:ea:3f:65:fc:fc:40:b5:46:d6:f6:4c:
                    e8:95:2c:bc:11:60:31:f5:8e:86:ac:e4:26:52:cc:
                    a7:07:f9:b7:3b:ee:35:cc:47:00:73:a0:56:08:e6:
                    0d:f4:e8:f1:01:71:53:ae:ef:ed:7e:d0:24:06:bd:
                    f8:d0:42:95:ed:b5:f8:ab:55:6b:11:b0:e9:70:9d:
                    21:f0:0a:86:01:79:fc:49:c9:c8:99:63:06:78:ef:
                    34:2b:31:aa:55:31:bc:71:3c:3f:e1:1b:d3:cb:19:
                    31:52:91:e3:91:a4:10:82:c7:ac:81:2f:e3:6f:38:
                    ee:cb:79:b5:f1:01:5f:bf:09:d8:db:0c:d4:7b:3d:
                    27:a4:8a:61:9e:bf:58:9d:e4:7f:8a:fe:2d:fa:a3:
                    b3:91:c0:7d:02:1e:2d:f7:89:d9:48:88:ad:bd:41:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:58:06:90:A1:A9:4D:59:DE:A6:73:35:8C:8F:D2:06:FB:7F:37:FD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212429.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:97:9f:04:8c:ce:31:63:8b:36:68:66:ac:e5:ba:40:3c:cb:
         e3:a5:54:0c:36:d2:2c:29:83:c3:57:37:76:a8:a2:ee:e4:e3:
         73:46:2d:c6:72:cc:6e:48:60:ef:10:af:a2:38:42:c2:2a:8d:
         4d:6e:f6:30:06:16:b4:08:aa:fb:d8:e5:e4:32:4f:ee:9a:73:
         c0:10:7c:40:a5:c3:56:a9:15:d2:45:a3:09:84:00:e1:fd:be:
         d7:23:50:3f:43:2e:b4:c6:cd:6c:66:56:dd:c4:0c:57:4a:55:
         80:13:9b:10:81:03:d7:75:7e:88:81:cd:9c:b7:f2:9b:90:7c:
         e0:c6:d0:e5:8e:ea:37:62:9f:ce:e3:15:b2:a2:88:d3:b7:af:
         c8:05:2b:d4:4e:27:74:0e:67:46:49:6f:4d:02:7e:e5:70:95:
         16:10:85:a0:fc:ad:47:aa:56:e1:d1:eb:a8:6d:29:26:a0:34:
         e3:58:a7:c4:a0:ff:38:09:ac:b2:c2:65:bc:8c:eb:08:83:cc:
         73:9c:d4:d5:3f:92:0d:f9:cf:c2:5a:60:c2:cc:cf:e6:59:0d:
         59:6d:eb:85:c1:a7:37:92:08:3f:0c:99:4b:d0:13:56:07:c0:
         3d:11:39:fa:0c:32:88:0e:f1:13:59:7b:11:57:8e:eb:90:cb:
         ac:2f:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 20:17:18 2025 by rpki-client