Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa
File:                     AS212609.roa (raw, json)
Hash identifier:          11SKumYDjRN+FBcVqxYZ4MNwtSvMUW/RoW3JKFA+1KU=
Subject key identifier:   EE:A9:A4:A5:74:3B:AD:F5:91:0E:75:B0:1B:90:37:1D:E5:43:A3:8E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6E66391B6C47DBD319F2D10503BDA2D4918E8959
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa
Signing time:             Thu 31 Aug 2023 07:52:10 +0000
ROA not before:           Thu 31 Aug 2023 07:47:10 +0000
ROA not after:            Thu 29 Aug 2024 07:52:10 +0000
asID:                     212609
IP address blocks:        157.254.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:66:39:1b:6c:47:db:d3:19:f2:d1:05:03:bd:a2:d4:91:8e:89:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:10 2023 GMT
            Not After : Aug 29 07:52:10 2024 GMT
        Subject: CN=EEA9A4A5743BADF5910E75B01B90371DE543A38E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3c:54:a5:7e:aa:ff:9d:62:2e:e4:5a:78:ba:
                    82:8f:4d:9b:da:ae:17:f0:e5:d5:39:26:8a:24:71:
                    c2:0a:fb:12:9a:e2:3e:22:ce:df:2d:ac:2d:e6:17:
                    78:73:f3:56:7e:9d:65:91:eb:93:ae:17:f0:cd:02:
                    92:ae:64:84:49:88:66:2d:75:b0:32:b2:40:8c:20:
                    78:cf:9f:5a:89:86:e5:c5:55:a3:5f:42:ae:2b:2b:
                    65:05:64:30:e0:36:60:c1:f9:2e:02:6a:94:c6:24:
                    ed:1d:60:7d:d5:fa:a1:66:e3:47:e0:81:1d:b9:31:
                    ee:23:28:24:a8:60:6f:bd:3f:90:14:f7:41:80:ce:
                    e1:06:4f:d0:2b:d0:1e:f7:a7:0b:f9:f7:9a:ae:e0:
                    97:12:ba:df:ee:23:4b:2c:dd:31:e9:81:56:47:17:
                    0e:8e:40:85:de:e5:17:3c:a8:bb:6b:6e:a8:34:cd:
                    dc:14:44:63:36:89:33:2c:af:0e:dc:29:79:28:22:
                    bb:35:f4:64:9c:b5:73:5c:47:f1:b3:7d:85:04:ae:
                    3a:95:4f:5f:26:0f:83:cd:a1:80:c5:d6:ef:8c:81:
                    a3:b4:ac:bd:ef:a7:12:4e:ea:44:aa:34:b0:b5:cb:
                    3c:45:ca:31:ce:00:8f:54:d9:ef:f6:df:cd:ef:e2:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A9:A4:A5:74:3B:AD:F5:91:0E:75:B0:1B:90:37:1D:E5:43:A3:8E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:ec:fa:0a:03:51:9b:cd:b4:e4:4d:8b:8a:01:64:ce:b4:11:
         fb:65:19:a1:a2:c6:17:7f:a4:f3:35:36:ed:44:e9:b3:8f:6e:
         3c:17:e4:13:74:27:a3:5e:a4:1d:d7:40:40:b0:da:69:e9:36:
         0a:e1:7b:b2:fc:12:ab:40:2d:b2:18:54:c2:f5:9c:58:57:ce:
         3b:85:b5:ea:56:1a:70:51:51:e1:05:f9:a7:68:6f:e3:a1:e6:
         27:81:c1:8f:be:43:cc:2a:33:52:27:35:11:21:f8:5f:ae:31:
         34:16:f3:a8:8f:16:d8:75:e6:1d:a4:08:95:30:e5:2f:bb:c4:
         1a:b3:9c:da:95:21:ba:3b:87:12:87:05:a2:a8:59:f2:56:0b:
         31:76:39:19:96:00:66:78:44:fe:19:84:08:11:3b:17:68:20:
         2d:c2:28:f2:6f:7e:04:88:c1:da:1d:79:d2:50:c9:ca:06:75:
         c4:fc:a4:1d:81:57:ed:a0:f2:05:26:83:7c:13:1e:2c:fb:99:
         bf:7f:f7:ed:8c:2a:c1:64:4a:c2:e8:59:9a:4e:5f:b3:6d:ca:
         a7:00:b0:56:1a:9b:64:02:87:6c:fc:0e:f6:f8:23:31:17:ec:
         c2:cf:22:5b:25:46:2f:6d:c2:bf:55:44:32:3b:37:94:10:a1:
         a3:e6:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org