Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          FEFT6SwTCUCe17XCOCPPGQt2fiQcApDALlN2VuuHkfs=
Subject key identifier:   5E:17:58:85:20:F4:68:0C:AD:71:66:45:CE:2D:82:3F:8F:7B:56:98
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       745906A4D2A7C9CD1A5CC2F95C13ECDBF98C24B7
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212669.roa
Signing time:             Tue 15 Apr 2025 16:28:29 +0000
ROA not before:           Tue 15 Apr 2025 16:23:29 +0000
ROA not after:            Tue 14 Apr 2026 16:28:29 +0000
asID:                     212669
IP address blocks:        104.234.230.0/24 maxlen: 24
                          104.234.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 15:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:59:06:a4:d2:a7:c9:cd:1a:5c:c2:f9:5c:13:ec:db:f9:8c:24:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 15 16:23:29 2025 GMT
            Not After : Apr 14 16:28:29 2026 GMT
        Subject: CN=5E17588520F4680CAD716645CE2D823F8F7B5698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:1a:f2:ff:35:e4:0e:56:42:43:0e:2f:46:
                    38:50:f7:17:5c:43:90:9f:a5:09:8b:30:4b:47:5d:
                    0d:88:d9:bd:25:7f:14:bb:73:95:59:56:47:ae:72:
                    45:d1:ec:98:ea:a5:e7:03:5a:82:29:e8:5c:92:27:
                    eb:23:3c:f6:21:9a:8f:05:29:d7:9e:5d:4e:67:95:
                    c3:58:2d:82:4b:46:a6:a7:ad:e4:75:9e:08:b8:3a:
                    e5:c5:c4:37:64:75:eb:a6:86:aa:68:c9:a3:f5:83:
                    e4:df:fb:c8:54:e6:6f:5d:6b:b6:02:0b:86:e2:90:
                    3a:ec:3e:82:af:bd:53:40:9c:38:45:58:d0:9e:c6:
                    86:8b:3f:83:02:84:0f:2e:10:11:d1:bd:61:24:14:
                    30:03:4c:cd:30:27:56:2a:b0:91:56:5b:1d:5f:6b:
                    e5:52:2e:c4:ef:47:ed:ca:4d:24:a9:69:19:bc:10:
                    ea:9f:9d:51:5a:b7:ad:ba:07:42:b9:ce:fa:73:10:
                    c1:68:98:0d:b6:0c:0d:c5:ff:94:ff:f9:64:7e:d6:
                    0d:26:08:f3:08:2d:bc:bb:b0:2f:cb:31:46:c5:9e:
                    6d:aa:00:7d:95:e7:4b:15:f0:25:ae:08:ee:02:60:
                    5e:d1:92:fc:c0:5e:92:2d:6c:20:88:0b:d7:10:af:
                    8a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:58:85:20:F4:68:0C:AD:71:66:45:CE:2D:82:3F:8F:7B:56:98
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.230.0/24
                  104.234.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:28:d0:ea:45:49:8c:6a:40:ae:c5:b0:1a:8b:45:b7:7e:f8:
         31:bb:86:8d:83:ad:09:05:b2:d6:ac:72:d7:83:60:e5:08:52:
         24:60:f8:8f:ba:d8:e8:b5:8b:30:7b:c1:90:47:c0:cb:47:b2:
         0a:69:84:d1:20:ec:ec:42:58:0d:e5:cd:8a:2e:58:c9:db:bd:
         6c:b8:c3:2b:0b:4e:b2:ac:9b:e6:1e:7d:c3:f0:38:df:43:dc:
         ed:79:ec:20:38:2f:16:99:f4:b3:8d:4d:24:ca:29:ed:04:72:
         de:25:30:54:c0:6d:a6:66:f9:dc:12:ac:5a:db:e7:01:23:09:
         1d:fc:3e:9e:49:46:e9:57:68:f4:c7:21:1b:af:11:4d:8c:b6:
         d0:d3:30:12:0f:6b:b1:4b:a1:f0:c5:d5:21:ad:74:37:0a:c5:
         65:5a:4a:9f:f8:29:23:f1:af:18:04:2e:d0:92:33:41:79:08:
         04:bd:af:97:99:27:72:77:ea:eb:b3:2b:f9:28:7c:c5:9f:47:
         94:28:c0:41:36:81:6e:68:07:ed:ec:f3:22:09:d7:ac:ad:9d:
         1b:70:53:42:b1:8a:29:f6:91:9d:cc:31:8e:b2:b7:51:e3:f1:
         f7:03:a8:10:ea:06:60:56:e8:c7:29:e8:ea:6a:f4:eb:57:ba:
         c9:d3:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:51:56 2025 by rpki-client