Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          TexzaluCqxRAUhVBf8fdQujxia1nyG3DmuR4I/OESg0=
Subject key identifier:   1B:57:97:D3:91:EF:90:09:26:FE:E9:0E:00:E1:0C:F6:A7:EB:CB:F4
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       74CFC19A97586FD52B92333DD555F6E7E59E8348
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212238.roa
Signing time:             Wed 24 Jan 2024 09:50:08 +0000
ROA not before:           Wed 24 Jan 2024 09:45:08 +0000
ROA not after:            Wed 22 Jan 2025 09:50:08 +0000
asID:                     212238
IP address blocks:        157.254.162.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 14:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:cf:c1:9a:97:58:6f:d5:2b:92:33:3d:d5:55:f6:e7:e5:9e:83:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 24 09:45:08 2024 GMT
            Not After : Jan 22 09:50:08 2025 GMT
        Subject: CN=1B5797D391EF900926FEE90E00E10CF6A7EBCBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:09:e2:56:65:28:be:ac:b1:96:b2:b1:f5:
                    6f:e8:a3:7f:89:78:12:9a:87:b5:88:2c:ef:ed:59:
                    5e:16:5c:8d:db:3f:7e:fe:fb:f8:82:9f:a9:2c:ce:
                    e2:b6:d2:84:ec:ab:68:4d:43:41:46:e3:78:43:10:
                    49:d9:ca:5c:97:80:61:0d:1b:a4:37:1a:d2:8a:8a:
                    13:48:a2:34:a8:56:34:cc:65:b1:02:61:02:cc:fb:
                    22:c2:4d:26:80:57:6c:41:88:88:6a:ed:e3:b3:db:
                    f7:39:f2:f8:fa:02:c6:0d:0b:8b:f6:12:f9:6b:f1:
                    8f:89:1f:0d:4a:a2:f6:9a:c3:a7:76:a1:0a:3b:35:
                    b9:82:cb:db:f4:72:2d:47:9e:88:67:44:65:19:cf:
                    30:cf:9d:46:cb:33:69:07:10:d9:a6:13:1c:44:40:
                    5d:63:32:27:38:bf:c4:13:0a:3f:32:d9:d9:77:8a:
                    ba:02:ec:80:80:e7:25:c4:83:52:14:28:c9:b6:12:
                    6d:a5:7e:2d:35:61:ff:b5:66:1a:74:1a:2f:e1:5f:
                    8b:7e:e7:31:8e:40:bc:bc:0c:9e:a1:40:6e:3a:cf:
                    76:b5:32:28:ae:4b:70:f8:c3:ac:81:98:25:86:89:
                    84:90:01:bd:3f:9c:35:8f:24:45:00:0e:a8:d8:6c:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:57:97:D3:91:EF:90:09:26:FE:E9:0E:00:E1:0C:F6:A7:EB:CB:F4
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:27:72:87:31:6c:e0:7e:65:55:95:a8:51:3a:0f:61:54:6c:
         57:d2:a0:e5:69:69:ad:fd:2a:62:83:6d:3d:b2:41:f4:cd:9a:
         02:db:64:aa:d6:98:4d:78:7d:05:99:3c:c3:10:22:24:41:5c:
         71:5c:1f:48:28:e5:0f:f9:f4:87:e5:cc:b6:15:47:f4:7a:64:
         7f:54:b2:76:b5:69:b0:51:91:02:10:ea:b6:31:51:99:0a:a9:
         9a:ed:9d:eb:c4:40:3f:8b:36:73:4e:71:1f:15:52:19:a5:2a:
         54:36:3a:ff:25:af:2d:d2:05:32:20:bb:da:2e:cc:f0:2b:c7:
         4a:a4:51:5a:fd:66:de:62:e5:cd:33:d4:ca:03:64:80:39:b8:
         53:37:fc:1a:91:97:ad:11:c8:15:e0:89:28:6f:f1:26:ad:4e:
         ab:6e:c8:6b:ae:dc:0f:ea:e1:0a:26:ba:af:e2:d6:68:de:1d:
         d8:db:4a:b1:83:86:fa:f0:7a:b9:e9:c6:b7:6e:74:71:be:b3:
         6b:b8:1e:52:aa:eb:4b:d9:c2:89:92:bc:18:c4:d2:2a:3f:91:
         d7:3c:de:b5:37:bc:f5:d9:4f:07:f1:39:ec:46:cb:1f:55:91:
         6f:03:f5:5b:3d:a5:a0:a3:31:97:18:9f:88:63:76:f3:96:75:
         0b:1b:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:13:00 2024 by rpki-client on console-ams.rpki-client.org