Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          xO5eM+L+701JPDSqmc7Obu6wysNDbcAkNEy042xCRag=
Subject key identifier:   83:01:2E:0A:B6:68:7A:7F:83:D5:59:F4:FC:C7:2D:5B:A8:B7:61:35
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3FB2A821149CAF0E1D76B2AF83D8E19DEBC57BF5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212238.roa
Signing time:             Wed 25 Dec 2024 10:28:23 +0000
ROA not before:           Wed 25 Dec 2024 10:23:23 +0000
ROA not after:            Wed 24 Dec 2025 10:28:23 +0000
asID:                     212238
IP address blocks:        157.254.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b2:a8:21:14:9c:af:0e:1d:76:b2:af:83:d8:e1:9d:eb:c5:7b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 25 10:23:23 2024 GMT
            Not After : Dec 24 10:28:23 2025 GMT
        Subject: CN=83012E0AB6687A7F83D559F4FCC72D5BA8B76135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:45:a0:0d:65:f6:1a:26:b9:c6:2e:71:16:da:
                    bf:47:e4:61:87:27:35:a3:d4:8a:85:32:af:cf:a5:
                    28:04:0d:75:a9:a3:14:d5:d0:70:e0:cf:f3:71:90:
                    d1:87:c6:d7:fb:f5:e5:23:e3:48:51:c0:36:5e:b4:
                    2c:3c:74:3c:95:50:14:3e:89:35:45:a1:1f:b3:a1:
                    63:3c:fb:77:37:47:4f:e4:51:b5:02:c7:74:90:c9:
                    b2:bc:94:57:36:22:f9:c1:1d:94:01:9e:d2:7a:69:
                    7f:09:22:b3:ed:e5:a2:b7:87:ec:6b:7e:d5:da:99:
                    42:8f:80:6d:0a:bc:5a:4f:b9:73:76:8d:fa:98:cf:
                    20:64:e3:20:11:21:62:aa:51:9d:38:4f:d1:28:06:
                    04:f8:a0:cf:bf:1d:be:d6:ae:ab:04:9a:13:22:0b:
                    97:3b:fd:95:2f:1e:2e:92:30:39:80:83:65:cd:86:
                    6e:08:fc:10:1c:77:9f:05:15:60:67:8c:2e:77:29:
                    d5:41:e1:37:ce:9a:b9:ce:3c:2f:6e:69:58:23:b6:
                    97:7b:d9:db:ea:7a:f2:ba:9f:ed:f6:37:c0:7c:b0:
                    36:f4:b7:91:0e:91:88:f5:25:f5:ef:d5:c7:3c:d5:
                    e7:2b:6c:f2:fd:8b:7d:c1:fa:f0:33:aa:fd:8d:d3:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:01:2E:0A:B6:68:7A:7F:83:D5:59:F4:FC:C7:2D:5B:A8:B7:61:35
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:a0:d9:da:df:69:be:44:10:1f:7f:fb:c3:46:c0:6e:80:79:
         24:d9:29:29:e2:89:07:7c:c0:2b:2e:92:64:79:a9:da:20:ab:
         2a:a5:ae:3b:ff:8c:b8:0b:58:88:8a:13:82:7f:ec:91:20:b9:
         dd:a7:91:a8:74:26:0c:1a:25:8a:54:6e:e8:a4:6f:51:1b:7c:
         70:97:34:b9:e9:0a:35:55:ec:e9:9e:7c:d5:76:05:b9:87:2b:
         d5:7d:7e:ee:c4:67:b1:25:77:65:c2:fa:bf:96:73:de:f3:e2:
         10:fe:e9:02:a3:9c:a2:2a:9d:a7:73:2c:8d:50:6c:7d:12:b8:
         df:d7:70:b1:c2:19:50:e8:70:a0:d8:79:4f:ef:79:30:4c:89:
         35:2f:ad:22:d3:10:db:e3:7f:72:42:0d:d1:6d:c2:c7:fc:e1:
         6b:ab:5c:ab:83:c7:f2:b3:fc:40:92:cf:8c:f9:48:2b:ef:26:
         93:e6:e8:d1:c3:b7:f6:ef:b6:ce:52:f2:25:b4:7c:4d:18:20:
         04:97:3e:af:c6:54:5c:2f:d7:df:4c:fb:df:3e:2c:87:53:54:
         75:01:30:c2:8a:42:a1:e4:48:7e:51:aa:9b:69:d1:d5:b2:0b:
         09:e0:d8:f4:df:58:80:a1:41:37:d7:8f:4d:fa:dd:c4:30:ac:
         c4:b0:a7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:33 2025 by rpki-client