Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          1lDh55ep5PNmSHyA/SSGioasVCOKPwBRkaIkoV8yIp4=
Subject key identifier:   9A:51:F5:29:12:24:04:33:22:08:DC:00:11:F5:1E:09:23:3B:F5:F4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6AD575FC34C744F7923E39682A4EF72DE813C547
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
Signing time:             Mon 05 May 2025 07:12:30 +0000
ROA not before:           Mon 05 May 2025 07:07:30 +0000
ROA not after:            Mon 04 May 2026 07:12:30 +0000
asID:                     212238
IP address blocks:        64.50.176.0/22 maxlen: 22
                          64.50.188.0/22 maxlen: 22
                          67.210.96.0/22 maxlen: 22
                          172.245.102.0/24 maxlen: 24
                          192.228.124.0/23 maxlen: 23
                          209.200.252.0/24 maxlen: 24
                          216.227.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 19:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d5:75:fc:34:c7:44:f7:92:3e:39:68:2a:4e:f7:2d:e8:13:c5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  5 07:07:30 2025 GMT
            Not After : May  4 07:12:30 2026 GMT
        Subject: CN=9A51F529122404332208DC0011F51E09233BF5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:ad:22:de:98:cb:cb:0a:06:70:be:2f:ba:
                    8f:7d:51:e4:11:a9:72:1a:00:eb:2b:74:ba:2d:40:
                    28:c9:5f:08:01:10:04:89:a6:d2:cb:44:fb:d9:c5:
                    e1:51:3f:32:06:08:fa:1f:f4:8b:d7:b6:67:7f:eb:
                    64:98:8c:ff:29:8e:63:b4:12:00:78:94:2e:72:5d:
                    73:fe:30:15:f8:e7:45:16:5c:8a:e3:5b:d5:38:ea:
                    2a:35:9b:02:24:19:52:14:a5:99:23:d9:0e:ad:c7:
                    cb:6c:15:fb:20:ce:41:e6:8e:27:50:7c:c0:b3:31:
                    a6:96:f2:91:51:53:3f:ea:f3:32:81:3b:80:3e:98:
                    5d:90:8d:cc:2d:09:92:e6:dd:f2:85:1d:11:ca:bd:
                    e6:49:94:9b:5d:55:8e:e2:bf:9a:1b:d5:7a:5e:b0:
                    1c:c1:15:ea:d4:76:14:ea:7c:01:29:16:ed:e2:58:
                    78:f4:6f:fd:e4:5b:92:d0:14:bc:fe:e8:e9:b5:e2:
                    f4:57:cf:10:e3:90:13:3c:2c:16:0e:04:02:9c:fe:
                    df:21:d5:db:9e:0f:54:d6:40:3c:42:7d:27:87:94:
                    dc:bb:cf:41:20:e6:ea:cb:20:5e:59:65:11:60:23:
                    03:b3:14:47:eb:a0:c4:bf:fb:b3:25:10:5f:ac:db:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:51:F5:29:12:24:04:33:22:08:DC:00:11:F5:1E:09:23:3B:F5:F4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.176.0/22
                  64.50.188.0/22
                  67.210.96.0/22
                  172.245.102.0/24
                  192.228.124.0/23
                  209.200.252.0/24
                  216.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:e4:b5:34:3b:9a:a8:e4:7b:d8:10:98:de:a2:22:ac:3c:91:
         52:6b:b4:29:8a:51:d3:41:16:2f:d1:71:44:eb:c0:c8:0d:3f:
         d3:13:3b:f5:a6:04:f2:13:cc:7c:a3:99:d7:91:93:9d:85:a3:
         91:53:4b:65:be:00:a7:3c:cc:51:47:23:3e:0b:cb:d4:8f:f8:
         4c:cd:2d:2b:11:f3:97:28:c1:0a:1d:51:67:fb:8a:c1:97:82:
         73:5a:9f:e8:bd:70:11:ae:68:8f:c4:76:ba:dc:04:99:5e:0b:
         a9:81:26:9f:0b:75:33:dc:8b:39:b4:21:0b:3c:17:3d:47:31:
         50:39:26:15:e1:0f:84:c0:24:04:9d:ea:24:43:73:06:d3:58:
         05:71:d4:e7:9e:2d:b2:3c:12:46:0b:d6:78:0d:35:09:62:1b:
         67:d4:c1:02:e3:96:46:63:c7:e9:3c:33:87:3a:69:73:76:93:
         49:78:b3:c1:dc:a5:df:6d:f1:7d:0c:57:37:08:ea:6b:cb:d2:
         85:3b:f9:6a:75:7e:6a:ca:02:b0:1b:65:3a:e2:bd:2f:e4:8d:
         01:22:70:18:14:74:53:02:15:3d:0b:fc:55:21:0f:50:e8:d6:
         01:67:cf:77:f9:22:67:c5:7d:1d:0b:2f:e8:aa:9f:ce:e6:3d:
         ff:d3:0b:0b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIUatV1/DTHRPeSPjloKk73LegTxUcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTA1MDcwNzMwWhcNMjYwNTA0MDcxMjMw
WjAzMTEwLwYDVQQDEyg5QTUxRjUyOTEyMjQwNDMzMjIwOERDMDAxMUY1MUUwOTIz
M0JGNUY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXWtIt6Yy8sK
BnC+L7qPfVHkEalyGgDrK3S6LUAoyV8IARAEiabSy0T72cXhUT8yBgj6H/SL17Zn
f+tkmIz/KY5jtBIAeJQucl1z/jAV+OdFFlyK41vVOOoqNZsCJBlSFKWZI9kOrcfL
bBX7IM5B5o4nUHzAszGmlvKRUVM/6vMygTuAPphdkI3MLQmS5t3yhR0Ryr3mSZSb
XVWO4r+aG9V6XrAcwRXq1HYU6nwBKRbt4lh49G/95FuS0BS8/ujpteL0V88Q45AT
PCwWDgQCnP7fIdXbng9U1kA8Qn0nh5Tcu89BIObqyyBeWWURYCMDsxRH66DEv/uz
JRBfrNvqewIDAQABo4ICozCCAp8wHQYDVR0OBBYEFJpR9SkSJAQzIgjcABH1Hgkj
O/X0MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAkAysAMEAkAyvAMEAkPSYAMEAKz1
ZgMEAcDkfAMEANHI/AMEAtjj0DANBgkqhkiG9w0BAQsFAAOCAQEAUeS1NDuaqOR7
2BCY3qIirDyRUmu0KYpR00EWL9FxROvAyA0/0xM79aYE8hPMfKOZ15GTnYWjkVNL
Zb4ApzzMUUcjPgvL1I/4TM0tKxHzlyjBCh1RZ/uKwZeCc1qf6L1wEa5oj8R2utwE
mV4LqYEmnwt1M9yLObQhCzwXPUcxUDkmFeEPhMAkBJ3qJENzBtNYBXHU554tsjwS
RgvWeA01CWIbZ9TBAuOWRmPH6Twzhzppc3aTSXizwdyl323xfQxXNwjqa8vShTv5
anV+asoCsBtlOuK9L+SNASJwGBR0UwIVPQv8VSEPUOjWAWfPd/kiZ8V9HQsv6Kqf
zuY9/9MLCw==
-----END CERTIFICATE-----
Generated at Tue May 6 00:59:49 2025 by rpki-client