Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          uDwECzu0kHE/pqOofH5eptgfMpHEsYS9nWnXc+JuzKQ=
Subject key identifier:   FE:04:6D:28:1B:8B:32:EB:2D:9A:80:96:A1:5A:C8:64:8A:DC:29:74
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       2AEDE243CD8D47D2C77927CB3EBDCC9F9318B078
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS212238.roa
Signing time:             Sat 16 Nov 2024 06:15:30 +0000
ROA not before:           Sat 16 Nov 2024 06:10:30 +0000
ROA not after:            Sat 15 Nov 2025 06:15:30 +0000
asID:                     212238
IP address blocks:        50.31.139.0/24 maxlen: 24
                          50.31.161.0/24 maxlen: 24
                          64.202.99.0/24 maxlen: 24
                          64.202.100.0/24 maxlen: 24
                          64.202.103.0/24 maxlen: 24
                          64.202.105.0/24 maxlen: 24
                          64.202.106.0/24 maxlen: 24
                          66.225.193.0/24 maxlen: 24
                          66.225.196.0/24 maxlen: 24
                          66.225.199.0/24 maxlen: 24
                          66.225.238.0/24 maxlen: 24
                          66.225.242.0/24 maxlen: 24
                          75.102.11.0/24 maxlen: 24
                          75.102.18.0/24 maxlen: 24
                          75.102.28.0/24 maxlen: 24
                          75.102.29.0/24 maxlen: 24
                          204.93.148.0/24 maxlen: 24
                          204.93.166.0/24 maxlen: 24
                          204.93.171.0/24 maxlen: 24
                          204.93.184.0/24 maxlen: 24
                          204.93.195.0/24 maxlen: 24
                          204.93.209.0/24 maxlen: 24
                          204.93.235.0/24 maxlen: 24
                          204.93.245.0/24 maxlen: 24
                          204.93.246.0/24 maxlen: 24
                          205.234.133.0/24 maxlen: 24
                          205.234.142.0/24 maxlen: 24
                          205.234.147.0/24 maxlen: 24
                          205.234.148.0/24 maxlen: 24
                          205.234.151.0/24 maxlen: 24
                          205.234.164.0/24 maxlen: 24
                          205.234.166.0/24 maxlen: 24
                          205.234.169.0/24 maxlen: 24
                          205.234.172.0/24 maxlen: 24
                          205.234.180.0/24 maxlen: 24
                          205.234.192.0/24 maxlen: 24
                          205.234.196.0/24 maxlen: 24
                          205.234.202.0/24 maxlen: 24
                          205.234.228.0/24 maxlen: 24
                          205.234.236.0/24 maxlen: 24
                          205.234.242.0/24 maxlen: 24
                          205.234.245.0/24 maxlen: 24
                          205.234.254.0/24 maxlen: 24
                          216.246.8.0/24 maxlen: 24
                          216.246.11.0/24 maxlen: 24
                          216.246.13.0/24 maxlen: 24
                          216.246.16.0/24 maxlen: 24
                          216.246.17.0/24 maxlen: 24
                          216.246.22.0/24 maxlen: 24
                          216.246.23.0/24 maxlen: 24
                          216.246.27.0/24 maxlen: 24
                          216.246.32.0/24 maxlen: 24
                          216.246.35.0/24 maxlen: 24
                          216.246.41.0/24 maxlen: 24
                          216.246.43.0/24 maxlen: 24
                          216.246.45.0/24 maxlen: 24
                          216.246.48.0/24 maxlen: 24
                          216.246.52.0/24 maxlen: 24
                          216.246.53.0/24 maxlen: 24
                          216.246.54.0/24 maxlen: 24
                          216.246.55.0/24 maxlen: 24
                          216.246.57.0/24 maxlen: 24
                          216.246.90.0/24 maxlen: 24
                          216.246.93.0/24 maxlen: 24
                          216.246.95.0/24 maxlen: 24
                          216.246.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ed:e2:43:cd:8d:47:d2:c7:79:27:cb:3e:bd:cc:9f:93:18:b0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 16 06:10:30 2024 GMT
            Not After : Nov 15 06:15:30 2025 GMT
        Subject: CN=FE046D281B8B32EB2D9A8096A15AC8648ADC2974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:46:43:0a:2f:db:f9:c7:67:01:7b:9d:fb:
                    a3:68:c8:b0:3c:0c:df:f1:1b:f0:08:ad:5c:ed:1a:
                    62:97:a8:6d:7a:77:bf:58:3d:95:c3:17:42:a8:ba:
                    8b:20:28:1d:52:b7:2d:38:fd:ea:25:46:7d:f4:f6:
                    59:86:24:46:8b:99:f8:1e:38:46:66:28:04:1e:4a:
                    af:de:aa:84:31:38:e2:f6:26:ef:8f:66:f8:e3:73:
                    5a:3c:06:9e:3a:13:28:da:ec:2b:75:72:90:4e:0c:
                    29:51:4b:eb:78:95:89:f1:01:c0:89:4e:f0:46:c9:
                    40:59:08:c0:47:7c:14:80:9c:66:97:d4:bd:01:1d:
                    c4:84:2a:9a:d8:5d:3b:7a:3b:28:d3:0f:7c:bc:91:
                    f8:29:64:d7:a0:ca:35:72:ab:ce:60:98:2d:82:2e:
                    45:0f:dc:b7:67:cb:1c:b3:a0:b2:07:3c:74:03:b4:
                    7f:ac:d2:cc:21:ef:32:65:26:f9:2f:8e:e3:74:96:
                    3c:5f:2b:e0:90:80:02:6e:ca:e2:6f:08:41:29:57:
                    72:35:7c:04:fc:3b:41:2b:4f:cf:85:b7:0e:26:7a:
                    f0:56:07:49:e9:31:89:e7:13:9d:02:23:3a:fe:24:
                    db:c7:77:65:12:d6:21:6c:52:4a:55:54:91:f4:ca:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:04:6D:28:1B:8B:32:EB:2D:9A:80:96:A1:5A:C8:64:8A:DC:29:74
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.139.0/24
                  50.31.161.0/24
                  64.202.99.0-64.202.100.255
                  64.202.103.0/24
                  64.202.105.0-64.202.106.255
                  66.225.193.0/24
                  66.225.196.0/24
                  66.225.199.0/24
                  66.225.238.0/24
                  66.225.242.0/24
                  75.102.11.0/24
                  75.102.18.0/24
                  75.102.28.0/23
                  204.93.148.0/24
                  204.93.166.0/24
                  204.93.171.0/24
                  204.93.184.0/24
                  204.93.195.0/24
                  204.93.209.0/24
                  204.93.235.0/24
                  204.93.245.0-204.93.246.255
                  205.234.133.0/24
                  205.234.142.0/24
                  205.234.147.0-205.234.148.255
                  205.234.151.0/24
                  205.234.164.0/24
                  205.234.166.0/24
                  205.234.169.0/24
                  205.234.172.0/24
                  205.234.180.0/24
                  205.234.192.0/24
                  205.234.196.0/24
                  205.234.202.0/24
                  205.234.228.0/24
                  205.234.236.0/24
                  205.234.242.0/24
                  205.234.245.0/24
                  205.234.254.0/24
                  216.246.8.0/24
                  216.246.11.0/24
                  216.246.13.0/24
                  216.246.16.0/23
                  216.246.22.0/23
                  216.246.27.0/24
                  216.246.32.0/24
                  216.246.35.0/24
                  216.246.41.0/24
                  216.246.43.0/24
                  216.246.45.0/24
                  216.246.48.0/24
                  216.246.52.0/22
                  216.246.57.0/24
                  216.246.90.0/24
                  216.246.93.0/24
                  216.246.95.0/24
                  216.246.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:34:49:c6:d1:1b:3f:98:d9:e0:7d:6c:f4:ab:7a:f8:6e:d0:
         88:01:54:14:06:90:ac:45:eb:c1:73:93:64:55:5f:9d:6e:d3:
         bd:bc:f0:94:38:c7:41:2a:7a:83:00:6c:1a:8e:4d:4b:07:1f:
         1c:dd:d7:f3:7f:0e:17:8a:86:01:37:80:76:08:84:a2:70:46:
         56:16:98:3c:38:16:39:44:b6:de:b9:b0:d3:67:29:90:d7:a7:
         66:1f:1f:21:3a:ec:94:1a:59:b9:80:ff:59:31:32:fb:fc:44:
         2b:ac:4b:55:1a:ba:61:8d:1d:26:85:a8:52:7f:f8:c0:19:1b:
         5f:cd:21:31:bc:02:34:2a:e8:28:fe:d3:fe:fd:88:bb:f4:24:
         e0:21:ba:84:f1:ee:bc:83:c3:30:4b:dd:35:2d:19:b9:30:1a:
         c2:f6:dc:f5:a4:68:33:49:68:ae:aa:1e:d2:73:91:30:d3:3c:
         01:1b:4f:03:9c:44:0b:7a:d4:d6:dc:a3:f2:38:a3:17:53:8b:
         5e:d5:67:44:72:92:de:67:f1:d7:fc:90:5f:c7:a1:70:58:1f:
         21:b5:fb:89:9f:0d:84:66:cf:c0:51:ce:c4:2f:9e:0e:af:25:
         4f:f9:ff:c5:44:47:9b:8c:b5:27:6f:24:87:98:8c:66:e0:49:
         66:b8:5d:18
-----BEGIN CERTIFICATE-----
MIIG8zCCBdugAwIBAgIUKu3iQ82NR9LHeSfLPr3Mn5MYsHgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMTE2MDYxMDMwWhcNMjUxMTE1MDYxNTMw
WjAzMTEwLwYDVQQDEyhGRTA0NkQyODFCOEIzMkVCMkQ5QTgwOTZBMTVBQzg2NDhB
REMyOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupxGQwov2/nH
ZwF7nfujaMiwPAzf8RvwCK1c7Rpil6htene/WD2VwxdCqLqLICgdUrctOP3qJUZ9
9PZZhiRGi5n4HjhGZigEHkqv3qqEMTji9ibvj2b443NaPAaeOhMo2uwrdXKQTgwp
UUvreJWJ8QHAiU7wRslAWQjAR3wUgJxml9S9AR3EhCqa2F07ejso0w98vJH4KWTX
oMo1cqvOYJgtgi5FD9y3Z8scs6CyBzx0A7R/rNLMIe8yZSb5L47jdJY8XyvgkIAC
bsribwhBKVdyNXwE/DtBK0/PhbcOJnrwVgdJ6TGJ5xOdAiM6/iTbx3dlEtYhbFJK
VVSR9MrRfwIDAQABo4ID8zCCA+8wHQYDVR0OBBYEFP4EbSgbizLrLZqAlqFayGSK
3Cl0MB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AZEGCCsGAQUFBwEHAQH/BIIBgDCCAXwwggF4BAIAATCCAXADBAAyH4sDBAAyH6Ew
DAMEAEDKYwMEAEDKZAMEAEDKZzAMAwQAQMppAwQAQMpqAwQAQuHBAwQAQuHEAwQA
QuHHAwQAQuHuAwQAQuHyAwQAS2YLAwQAS2YSAwQBS2YcAwQAzF2UAwQAzF2mAwQA
zF2rAwQAzF24AwQAzF3DAwQAzF3RAwQAzF3rMAwDBADMXfUDBADMXfYDBADN6oUD
BADN6o4wDAMEAM3qkwMEAM3qlAMEAM3qlwMEAM3qpAMEAM3qpgMEAM3qqQMEAM3q
rAMEAM3qtAMEAM3qwAMEAM3qxAMEAM3qygMEAM3q5AMEAM3q7AMEAM3q8gMEAM3q
9QMEAM3q/gMEANj2CAMEANj2CwMEANj2DQMEAdj2EAMEAdj2FgMEANj2GwMEANj2
IAMEANj2IwMEANj2KQMEANj2KwMEANj2LQMEANj2MAMEAtj2NAMEANj2OQMEANj2
WgMEANj2XQMEANj2XwMEANj2bzANBgkqhkiG9w0BAQsFAAOCAQEAKTRJxtEbP5jZ
4H1s9Kt6+G7QiAFUFAaQrEXrwXOTZFVfnW7TvbzwlDjHQSp6gwBsGo5NSwcfHN3X
838OF4qGATeAdgiEonBGVhaYPDgWOUS23rmw02cpkNenZh8fITrslBpZuYD/WTEy
+/xEK6xLVRq6YY0dJoWoUn/4wBkbX80hMbwCNCroKP7T/v2Iu/Qk4CG6hPHuvIPD
MEvdNS0ZuTAawvbc9aRoM0lorqoe0nORMNM8ARtPA5xEC3rU1tyj8jijF1OLXtVn
RHKS3mfx1/yQX8ehcFgfIbX7iZ8NhGbPwFHOxC+eDq8lT/n/xURHm4y1J28kh5iM
ZuBJZrhdGA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:40 2024 by rpki-client on console-fra.rpki-client.org