Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          aqCbfLRRGYMYJ/wHXDJTWpHSULaVxDFV0Kyl4ZsBctw=
Subject key identifier:   FD:0D:FC:BD:A6:E8:D0:86:FC:9E:E7:9C:76:25:23:F9:BA:DA:AA:E8
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7AED524D4C640E494EF7127B559A73A98D7C8EA4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212669.roa
Signing time:             Thu 27 Jun 2024 13:25:10 +0000
ROA not before:           Thu 27 Jun 2024 13:20:10 +0000
ROA not after:            Thu 26 Jun 2025 13:25:10 +0000
asID:                     212669
IP address blocks:        23.95.175.0/24 maxlen: 24
                          192.210.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ed:52:4d:4c:64:0e:49:4e:f7:12:7b:55:9a:73:a9:8d:7c:8e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 27 13:20:10 2024 GMT
            Not After : Jun 26 13:25:10 2025 GMT
        Subject: CN=FD0DFCBDA6E8D086FC9EE79C762523F9BADAAAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:38:2e:3a:08:fc:49:aa:5b:d0:1e:1b:d6:
                    8d:6c:cd:ed:d5:2e:dc:7d:2e:ea:ea:d2:fb:87:f8:
                    02:4c:b9:da:84:f3:a3:ad:d4:51:7a:71:d0:98:43:
                    e2:d6:7a:24:c8:d0:31:ce:5e:aa:13:cf:6d:81:60:
                    29:c4:e3:af:47:eb:e0:da:6a:30:7d:e4:79:8f:78:
                    0f:10:db:db:22:85:c4:fb:01:08:b3:7d:a0:e4:14:
                    86:49:cf:7e:02:51:0f:97:47:0d:76:a8:cb:83:80:
                    5e:b6:3c:72:6b:a7:f9:7b:79:57:b3:62:5f:94:99:
                    8a:20:ec:5d:10:9a:2c:7f:bb:64:4f:83:8e:68:b9:
                    c4:43:97:e4:a9:dd:3c:a5:91:e4:a2:9d:9e:73:d5:
                    3c:b3:2b:fd:83:f8:36:3f:f5:25:cf:66:6a:4c:a0:
                    da:91:22:4c:35:38:13:98:f3:7c:2b:75:a4:d7:f0:
                    17:22:1a:fe:35:14:a8:c7:ad:1e:3e:8c:cf:a1:f8:
                    c6:fe:3a:df:1e:0d:b2:8e:ab:56:cf:ff:d5:08:62:
                    c3:86:8e:d0:e4:35:06:1a:88:e9:08:e1:15:b0:ef:
                    fe:03:0a:45:45:83:7c:a0:db:0a:ea:63:92:7c:10:
                    56:19:a3:5d:15:a5:05:00:dd:1c:32:86:b8:f2:c9:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0D:FC:BD:A6:E8:D0:86:FC:9E:E7:9C:76:25:23:F9:BA:DA:AA:E8
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.175.0/24
                  192.210.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:37:38:33:c6:69:66:fb:04:89:2f:a6:e4:16:d4:12:bb:1a:
         92:41:e2:6e:16:78:ea:6b:c9:5a:97:d9:83:8a:ee:f0:cf:67:
         27:61:45:78:9b:32:c4:01:ef:5a:b2:ff:2e:0b:9b:56:ff:f7:
         79:2b:05:b8:ab:fc:08:9c:64:77:5e:77:74:8a:15:86:1c:f6:
         e4:60:6d:64:66:a1:96:d1:ea:5f:86:ec:03:24:8d:7c:1d:68:
         6c:e9:b8:e1:83:33:88:8b:77:ba:89:aa:4b:ed:82:bf:c4:ef:
         d8:1b:12:3f:f9:d2:72:d6:f4:26:e3:6c:6e:65:f0:25:74:0f:
         42:25:34:f7:4f:09:38:b4:07:e9:18:90:2e:11:75:6c:f1:30:
         e9:0a:54:69:ba:f1:60:83:54:2d:33:57:cb:8d:0d:bb:2a:f9:
         70:d5:99:28:29:99:91:ca:a7:69:d7:8e:a0:ee:27:7b:c3:4b:
         71:0b:05:aa:6a:70:b3:6d:43:a2:7f:d7:cb:44:85:e8:14:46:
         5d:b3:c0:dd:6a:82:d3:57:61:39:79:5e:06:ec:00:c1:d1:4b:
         91:6c:bc:9f:02:0c:d5:c8:be:00:98:4a:5b:68:3a:51:c9:41:
         ac:e1:93:55:b9:ba:9e:c5:db:e8:96:90:36:d6:8a:df:a3:5a:
         8b:b6:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org