Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          sgR8eop8M+87T98SP0rMkdfgLoHp6GPWW0QxXlkFQOk=
Subject key identifier:   54:D3:81:A3:47:0B:1C:2E:90:37:A9:9D:48:6A:32:3E:58:25:0F:8A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3D31B6FE5EF138E2193ADEC0DEDBE352F48D1B53
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212669.roa
Signing time:             Thu 31 Aug 2023 07:52:12 +0000
ROA not before:           Thu 31 Aug 2023 07:47:12 +0000
ROA not after:            Thu 29 Aug 2024 07:52:12 +0000
asID:                     212669
IP address blocks:        157.254.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:31:b6:fe:5e:f1:38:e2:19:3a:de:c0:de:db:e3:52:f4:8d:1b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:12 2023 GMT
            Not After : Aug 29 07:52:12 2024 GMT
        Subject: CN=54D381A3470B1C2E9037A99D486A323E58250F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:8f:59:7d:56:1e:65:21:89:21:3f:2f:0f:
                    9d:96:29:7a:94:25:cb:c8:68:09:16:fc:9b:6d:55:
                    ce:01:7b:21:ba:04:8e:b4:e0:80:4d:fd:5f:70:d8:
                    6c:62:5a:b5:9e:e4:4a:8b:2d:a2:00:bb:10:ca:bf:
                    09:d5:78:b4:ab:e1:b4:de:9a:2e:3d:92:08:a6:48:
                    a9:97:b8:03:76:0c:15:d0:c3:6a:c9:9e:c1:fb:ab:
                    e7:c3:b1:3d:b7:5e:3b:91:a2:58:bd:56:d1:b6:12:
                    1d:ab:f0:e8:67:e3:5f:3f:41:f9:2a:44:bd:7f:90:
                    87:c0:ee:cc:52:7f:8d:cd:80:5c:c4:23:3a:f4:c7:
                    e0:ef:c1:8d:71:f5:86:d7:e1:cc:6d:ee:25:92:39:
                    93:ca:a2:5e:ba:7c:c0:66:4a:52:bb:19:18:c0:cc:
                    8e:a5:77:7f:21:6f:b8:84:99:56:2c:cc:3f:04:8a:
                    77:43:28:38:e9:cb:68:88:ce:c5:30:e3:84:81:67:
                    4f:6a:e0:50:50:ad:4b:9a:a1:59:62:60:12:07:76:
                    90:47:25:37:15:75:f8:ba:ab:10:d8:b8:0d:1e:47:
                    b4:72:86:43:92:9e:e3:cd:ac:a0:66:ad:4c:a4:0f:
                    45:16:f8:e2:24:28:a3:de:d1:ef:69:b3:66:b3:fe:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D3:81:A3:47:0B:1C:2E:90:37:A9:9D:48:6A:32:3E:58:25:0F:8A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a0:21:b0:9a:22:33:dd:e0:94:c9:9a:f2:ff:2a:a0:e1:48:
         cb:4e:89:5e:3a:52:16:33:cc:3a:88:78:cf:cf:d3:8d:4f:40:
         0e:17:15:0b:79:62:6b:c2:62:3c:1b:ef:8e:a3:5e:a3:d8:88:
         84:d8:88:b7:7b:8d:54:16:ea:a7:72:35:6d:0a:82:8b:22:7f:
         27:81:45:85:ac:43:f0:7c:77:de:dc:82:e8:f9:94:e6:45:7a:
         b6:48:3b:6e:7d:5f:97:ce:aa:8d:1b:c8:77:ca:a1:2b:c2:4f:
         ed:16:cc:98:3b:e5:ae:1f:47:61:b5:30:1b:0e:3d:f1:b7:dc:
         78:99:26:11:f4:7b:55:05:ee:ea:63:77:3a:16:b0:c2:7e:98:
         9e:b5:06:64:bd:cc:7c:5f:c1:26:d0:6b:f9:51:49:95:47:1c:
         72:c7:90:d2:50:41:12:4e:f4:3d:9a:c6:85:ad:57:5e:21:e6:
         bc:cb:79:b6:b1:6a:b1:5c:e8:94:09:e1:47:9d:b1:f0:b6:6e:
         dc:c5:42:17:d7:ae:67:36:be:33:3c:b1:d9:d6:c5:d2:9d:a8:
         5c:9d:b9:03:93:e2:4a:bc:1f:68:e1:c7:ee:e8:61:fc:b1:07:
         48:ac:48:05:10:71:e1:af:0e:31:d5:ed:a5:ee:b7:c4:83:47:
         6d:09:91:d3
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUPTG2/l7xOOIZOt7A3tvjUvSNG1MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwODMxMDc0NzEyWhcNMjQwODI5MDc1MjEy
WjAzMTEwLwYDVQQDEyg1NEQzODFBMzQ3MEIxQzJFOTAzN0E5OUQ0ODZBMzIzRTU4
MjUwRjhBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnASPWX1WHmUh
iSE/Lw+dlil6lCXLyGgJFvybbVXOAXshugSOtOCATf1fcNhsYlq1nuRKiy2iALsQ
yr8J1Xi0q+G03pouPZIIpkipl7gDdgwV0MNqyZ7B+6vnw7E9t147kaJYvVbRthId
q/DoZ+NfP0H5KkS9f5CHwO7MUn+NzYBcxCM69Mfg78GNcfWG1+HMbe4lkjmTyqJe
unzAZkpSuxkYwMyOpXd/IW+4hJlWLMw/BIp3Qyg46ctoiM7FMOOEgWdPauBQUK1L
mqFZYmASB3aQRyU3FXX4uqsQ2LgNHke0coZDkp7jzaygZq1MpA9FFvjiJCij3tHv
abNms/7DGwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFTTgaNHCxwukDepnUhqMj5Y
JQ+KMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzIxMjY2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+3DANBgkqhkiG9w0BAQsFAAOC
AQEADaAhsJoiM93glMma8v8qoOFIy06JXjpSFjPMOoh4z8/TjU9ADhcVC3lia8Ji
PBvvjqNeo9iIhNiIt3uNVBbqp3I1bQqCiyJ/J4FFhaxD8Hx33tyC6PmU5kV6tkg7
bn1fl86qjRvId8qhK8JP7RbMmDvlrh9HYbUwGw498bfceJkmEfR7VQXu6mN3Ohaw
wn6YnrUGZL3MfF/BJtBr+VFJlUcccseQ0lBBEk70PZrGha1XXiHmvMt5trFqsVzo
lAnhR52x8LZu3MVCF9euZza+Mzyx2dbF0p2oXJ25A5PiSrwfaOHH7uhh/LEHSKxI
BRBx4a8OMdXtpe63xINHbQmR0w==
-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org