Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213186.roa
File:                     AS213186.roa (raw, json)
Hash identifier:          qBmhyOq03gmtGTvCoXAqNGMSSpIbuiZJHfuuqKMpROI=
Subject key identifier:   21:85:24:EA:46:95:F7:34:2A:D5:4E:1A:04:6F:10:A7:40:AD:70:30
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       533929705031C516F12F6CCC61397175FF1D5FBB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213186.roa
Signing time:             Thu 31 Aug 2023 07:52:09 +0000
ROA not before:           Thu 31 Aug 2023 07:47:09 +0000
ROA not after:            Thu 29 Aug 2024 07:52:09 +0000
asID:                     213186
IP address blocks:        157.254.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:39:29:70:50:31:c5:16:f1:2f:6c:cc:61:39:71:75:ff:1d:5f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:09 2023 GMT
            Not After : Aug 29 07:52:09 2024 GMT
        Subject: CN=218524EA4695F7342AD54E1A046F10A740AD7030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:6a:63:8b:1b:e7:18:ef:26:49:38:96:7a:
                    11:8d:25:36:2f:11:8f:50:f3:24:0d:e0:b0:3e:a5:
                    c2:01:3e:ab:02:d1:81:86:6d:c6:bc:03:07:59:be:
                    4e:6b:bd:c0:e8:5b:e7:04:34:be:e4:4c:78:3b:13:
                    9a:44:d6:6c:29:b1:f1:58:59:af:be:61:a8:6e:ea:
                    e9:93:4a:d5:06:b8:a0:36:46:ed:82:19:c3:57:14:
                    92:64:25:3f:d9:02:ba:95:3f:7e:19:bc:5b:5f:f5:
                    82:73:23:c5:69:82:02:fc:cb:44:69:9e:9d:a7:ac:
                    63:fb:25:73:be:48:ca:e2:6a:ec:20:5a:ae:4a:3c:
                    54:87:1e:45:40:a0:5d:37:52:7b:74:db:52:6d:20:
                    ad:6a:58:d3:66:e8:8b:e3:1c:48:4b:50:e1:8b:c1:
                    e8:fb:c4:87:6b:e6:bc:66:f8:49:42:f5:f2:81:51:
                    1b:2f:ce:d9:04:e6:31:71:e3:f7:6a:0c:1d:75:b8:
                    37:e5:50:8d:0b:47:4d:0e:0f:45:da:a9:53:31:00:
                    9d:5e:9c:f4:1b:46:93:63:5c:f1:03:de:d2:99:5e:
                    f1:a2:8e:30:87:11:d8:92:7c:1f:ec:80:fe:89:d1:
                    cd:02:55:a2:4b:ce:68:a2:21:90:5e:5c:dd:0a:c8:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:85:24:EA:46:95:F7:34:2A:D5:4E:1A:04:6F:10:A7:40:AD:70:30
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:75:96:7b:f3:02:b3:0d:fa:6d:41:fa:c3:ea:78:7e:8b:fd:
         fd:32:fc:39:5f:38:73:e9:fc:ea:88:1f:b5:62:22:e2:20:18:
         48:ea:07:9a:f4:10:10:07:e3:dc:d9:c7:80:4e:e9:6a:2d:ed:
         a8:64:7c:09:cd:81:ad:3a:af:72:62:6d:b6:88:47:be:34:83:
         e3:07:46:b6:df:cd:8a:90:65:78:c4:66:43:69:d7:d5:a4:8d:
         19:b9:35:8d:ab:63:59:26:fb:23:60:5a:2f:b1:f8:bf:66:bf:
         5b:e4:af:0d:13:dd:5d:7f:a2:35:9c:b5:20:95:82:bf:7a:8c:
         df:e1:13:fe:d0:bf:4a:19:8f:86:1e:e5:52:6e:6f:a5:88:84:
         8c:40:32:d8:7b:24:15:1e:80:ff:aa:eb:07:53:09:0d:59:43:
         d3:0b:1d:d9:34:dd:39:1b:77:26:de:b7:d6:eb:ab:d4:66:d5:
         93:bd:ee:3a:7f:77:d5:46:d9:e3:18:c8:43:23:d8:37:de:d5:
         ad:93:c1:b2:50:04:c0:8d:a9:96:75:0b:41:75:a4:bf:94:de:
         ba:d7:ee:67:01:d0:92:3a:30:99:7a:f2:f1:ba:b9:0a:0f:39:
         2c:3e:30:a3:a8:ef:25:f3:16:1c:77:6d:64:de:ed:18:32:1d:
         75:28:4f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org