Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          6pXnyZG9ddkvZSVl1PwfvDwsBd2UsSx2DQTkLDXHFmI=
Subject key identifier:   63:F5:94:1C:2E:37:16:AD:EE:95:14:2B:15:BA:98:37:A1:73:F1:04
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       670B6CF58F761A7F6B9C909527AA53CE89553016
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
Signing time:             Sun 15 Jun 2025 00:02:02 +0000
ROA not before:           Sat 14 Jun 2025 23:57:02 +0000
ROA not after:            Sun 14 Jun 2026 00:02:02 +0000
asID:                     212238
IP address blocks:        172.245.102.0/24 maxlen: 24
                          192.228.124.0/23 maxlen: 23
                          209.200.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0b:6c:f5:8f:76:1a:7f:6b:9c:90:95:27:aa:53:ce:89:55:30:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 14 23:57:02 2025 GMT
            Not After : Jun 14 00:02:02 2026 GMT
        Subject: CN=63F5941C2E3716ADEE95142B15BA9837A173F104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1b:b6:76:96:13:64:35:16:57:b0:22:93:30:
                    a2:e7:ad:3e:61:56:a1:17:a9:9e:56:08:bf:0c:71:
                    88:50:9c:da:6e:8f:c7:40:30:bb:c8:1c:20:26:3f:
                    35:8e:95:96:25:31:1d:30:70:07:1f:78:b3:95:eb:
                    19:b0:51:71:af:b7:d4:f7:53:8f:44:aa:ac:04:d6:
                    15:8e:0e:51:20:0a:dd:03:c7:d8:13:0b:f0:74:5a:
                    11:20:9c:ea:f7:f6:59:92:ba:35:e4:3d:7e:21:b9:
                    5e:47:33:ca:7b:42:22:78:0f:09:00:71:92:67:8f:
                    44:39:cd:8a:4d:3b:35:84:18:d7:0e:e6:f0:1c:48:
                    a3:e7:bf:95:2c:0f:f4:68:41:03:86:b7:24:f1:c5:
                    f2:0a:59:d9:9c:80:06:07:b9:84:04:95:6a:cb:f7:
                    83:b1:52:e8:37:d5:3f:84:84:3a:95:9b:32:bc:49:
                    7d:9a:43:5e:1e:c6:c7:69:9b:b2:d0:2a:cd:00:28:
                    3c:cc:68:f7:05:ea:cd:d2:0b:d0:72:5d:b3:08:59:
                    75:75:36:13:3b:92:a5:c7:55:61:2a:f5:4f:bf:88:
                    d6:27:e5:91:d5:b6:71:71:6e:0b:5b:e7:71:84:5a:
                    06:a6:93:30:d2:f5:79:96:f8:64:3c:5b:0c:a1:50:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F5:94:1C:2E:37:16:AD:EE:95:14:2B:15:BA:98:37:A1:73:F1:04
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.245.102.0/24
                  192.228.124.0/23
                  209.200.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:be:b2:2e:81:33:9b:24:3b:25:7b:f8:3a:f4:c7:5f:67:
         6e:cb:ab:63:d8:8e:3d:ae:28:10:d8:de:b3:a4:bc:0d:1d:c5:
         44:40:4b:d4:cb:7a:72:ac:95:6d:29:5a:50:b6:80:62:ae:65:
         de:07:bd:31:1f:65:1a:ef:cf:6c:85:f8:38:8d:2e:57:7d:7a:
         91:6c:a9:50:1e:50:5a:ab:a5:ca:37:ef:89:cb:12:89:ec:72:
         c7:c9:5c:d8:e0:5a:60:f6:69:14:3e:de:00:82:74:4b:e7:ae:
         bf:27:b5:a7:b0:a5:b6:1d:90:f7:ee:0e:d9:d7:e0:53:7f:3c:
         97:f0:4a:28:f5:83:cc:cf:70:ba:21:32:5f:e7:d7:7f:b4:e9:
         7a:b9:6c:59:cd:60:2d:55:ad:b7:cf:69:e4:16:04:41:85:f8:
         86:37:65:f3:02:b9:7e:7c:71:1d:78:c5:9a:18:47:01:69:68:
         ec:9d:bf:22:15:22:bf:99:47:be:30:76:ae:12:fe:ea:d5:fb:
         fb:85:13:9e:2a:44:8f:3c:f8:12:78:28:5c:af:b7:ae:a9:bf:
         98:e1:5a:28:10:0a:1e:ab:ef:c6:e2:ea:d3:52:c1:85:dc:0b:
         e8:b5:78:dc:4b:90:dd:ac:8c:42:a7:45:98:f4:08:cf:16:3e:
         1f:32:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:31 2025 by rpki-client