Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa
File:                     AS212609.roa (raw, json)
Hash identifier:          pUR0mqx+mZ46TXJmfCgn6FcHk88dflkexDO0HPBr66A=
Subject key identifier:   36:8D:0E:42:F9:E9:B1:D7:21:CF:A2:D2:3A:A0:55:94:2F:41:AB:68
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       056E2D09B606959D79481A6453C2F76EB1707398
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa
Signing time:             Thu 01 Aug 2024 08:48:59 +0000
ROA not before:           Thu 01 Aug 2024 08:43:59 +0000
ROA not after:            Thu 31 Jul 2025 08:48:59 +0000
asID:                     212609
IP address blocks:        157.254.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Dec 2024 00:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6e:2d:09:b6:06:95:9d:79:48:1a:64:53:c2:f7:6e:b1:70:73:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  1 08:43:59 2024 GMT
            Not After : Jul 31 08:48:59 2025 GMT
        Subject: CN=368D0E42F9E9B1D721CFA2D23AA055942F41AB68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:fa:ac:80:41:cd:9a:0a:4b:4f:70:f2:e6:
                    c3:46:ea:12:e1:45:60:3e:2c:51:ee:5a:38:77:07:
                    1f:41:17:7a:13:c9:83:23:c9:53:e6:ab:e9:a8:fb:
                    c1:7c:c6:ab:74:94:da:ca:bd:f1:7a:9a:f9:f6:dc:
                    cf:81:d8:37:de:49:ba:07:11:38:97:18:72:f4:1a:
                    28:76:86:35:0a:f4:db:c3:e3:d0:ba:eb:1f:e8:81:
                    e2:4d:06:8e:67:e9:28:76:38:65:64:f5:0d:0d:7a:
                    a1:cc:78:74:6c:3b:74:7d:78:23:42:4e:d5:fb:28:
                    4c:49:5e:5c:33:34:58:ce:04:bc:05:9e:03:29:b2:
                    b2:bb:d5:1f:57:5a:99:0f:a6:95:a2:44:0c:9a:d2:
                    80:63:ca:c3:7e:74:47:28:e9:39:0d:8d:9d:4a:d3:
                    c1:f7:f2:63:3b:be:28:1b:df:8c:00:ad:5b:d0:35:
                    3f:9f:9e:6c:20:e9:ac:70:b3:10:ee:80:33:90:ce:
                    13:6b:1e:f7:c1:09:43:f7:f4:56:78:82:5e:8c:08:
                    67:5f:5d:bf:07:97:8e:0f:7c:9c:f7:30:6d:ba:19:
                    d4:26:27:a6:34:c8:6a:77:01:94:b3:eb:7b:02:39:
                    35:7c:59:c9:91:7d:a2:34:45:cf:19:59:64:71:b0:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8D:0E:42:F9:E9:B1:D7:21:CF:A2:D2:3A:A0:55:94:2F:41:AB:68
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212609.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:4c:dd:a7:7a:47:76:2b:58:97:45:a0:a4:1d:9e:02:be:
         65:cd:d9:a3:ba:da:38:f7:bd:99:a6:f2:2d:55:ad:96:6c:a3:
         ed:ba:75:aa:59:cb:ba:d1:3f:35:fc:53:f8:26:52:fb:89:dd:
         20:59:d0:00:b4:86:f3:f1:56:f5:65:11:ec:26:b0:cb:63:12:
         42:65:3b:fe:5e:ec:93:66:d2:42:e5:9e:cb:42:f5:40:5c:6d:
         c9:de:09:02:ca:4b:21:0a:c1:59:22:e8:38:56:ce:b3:f4:c0:
         ea:0b:73:81:6b:61:8b:5d:9d:cc:15:93:51:35:26:25:25:5d:
         16:b0:b1:76:cb:34:95:df:cb:42:ac:a4:94:fe:74:c1:90:8f:
         fc:4b:b3:b6:09:ef:67:b9:ff:58:8d:51:5f:bd:78:3d:6a:a8:
         43:0e:56:54:96:52:01:4d:12:19:e1:89:ed:92:d7:1a:10:91:
         84:e6:f9:72:ef:3d:30:e7:f5:af:7d:40:b8:df:34:b8:b4:ad:
         7a:d3:1e:ec:cd:6a:fb:43:80:47:3b:9d:30:23:67:43:ce:4d:
         54:a6:00:c8:37:c4:d1:61:98:bb:9f:ee:0c:d5:87:04:07:c8:
         c4:06:23:e8:93:2d:53:bc:06:87:3e:e8:d1:a8:df:e6:97:9f:
         41:de:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 11 00:53:39 2024 by rpki-client on console-ams.rpki-client.org