Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212336.roa
File:                     AS212336.roa (raw, json)
Hash identifier:          uKDSvkULEljfLhsMIcTOZjewxntnGzRDy3iVrRfxjxQ=
Subject key identifier:   BC:AA:B2:2A:19:83:4B:9C:54:18:62:19:A7:47:26:75:89:F9:D1:37
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       73223E427CB2A643E4B9F060275BAE1B12317DB0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212336.roa
Signing time:             Thu 23 Jul 2026 08:36:09 +0000
ROA not before:           Thu 23 Jul 2026 08:31:09 +0000
ROA not after:            Thu 22 Jul 2027 08:36:09 +0000
asID:                     212336
IP address blocks:        23.95.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:22:3e:42:7c:b2:a6:43:e4:b9:f0:60:27:5b:ae:1b:12:31:7d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 23 08:31:09 2026 GMT
            Not After : Jul 22 08:36:09 2027 GMT
        Subject: CN=BCAAB22A19834B9C54186219A747267589F9D137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:5b:77:5f:e2:f9:02:73:20:0e:da:f5:d4:
                    12:71:dd:00:6f:e9:dd:8d:c7:de:ef:73:d1:58:f9:
                    e2:8f:db:2c:14:fa:eb:9d:64:d7:03:fa:3b:da:63:
                    bd:5b:0b:04:91:5b:c4:0c:4b:64:dd:ac:32:bb:a7:
                    08:46:98:37:ed:be:67:88:1c:f1:38:91:1a:d4:54:
                    68:79:c7:a0:bf:d5:bc:76:ca:d1:3c:e8:e5:31:4f:
                    4f:e3:80:a6:3e:f8:2b:ee:6b:88:aa:2a:da:78:8e:
                    54:a3:ca:d3:eb:ad:7f:44:55:e4:28:d2:5d:35:81:
                    f3:1a:6f:de:e1:83:fd:79:31:ec:6e:02:de:1b:68:
                    89:99:c2:aa:bf:03:db:90:c8:0c:f6:41:59:a6:34:
                    68:51:51:bc:01:a8:bc:48:5e:c9:bb:be:49:5a:3b:
                    07:65:69:b2:54:0c:9e:93:19:25:be:fa:e0:67:1f:
                    a9:74:24:66:68:d8:45:d8:b6:f5:7f:36:b8:05:fb:
                    fa:e0:6b:c5:b1:95:72:b2:b1:3d:40:45:7b:64:8a:
                    fc:c5:fa:e2:3b:85:0e:2b:d2:08:a9:09:a4:e6:8c:
                    ec:bb:d7:ce:f7:91:38:a3:9e:1c:8b:1d:40:ed:b8:
                    3d:ef:47:42:68:75:48:7d:50:2f:86:14:3d:05:3c:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AA:B2:2A:19:83:4B:9C:54:18:62:19:A7:47:26:75:89:F9:D1:37
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:aa:99:36:59:51:e5:6a:3f:8f:be:cb:35:a5:35:ba:dd:80:
         af:c6:1a:48:fb:94:14:56:85:93:7b:3c:0c:18:51:99:91:bd:
         46:47:1c:1c:ba:bb:cf:31:8f:b3:4b:4a:e6:0f:fc:62:4e:f3:
         7b:1e:be:88:a6:eb:cf:35:1d:51:bf:ce:18:6c:19:8a:1b:81:
         84:f4:07:be:b5:fa:67:94:22:75:c2:26:28:0a:dc:12:a5:7d:
         93:0d:01:97:45:42:f7:bf:a0:77:d4:7e:2b:67:57:64:72:41:
         a0:1f:d3:0a:b6:40:fb:45:e6:18:b9:7d:3d:1a:9a:0b:92:aa:
         80:8b:a9:8a:7e:23:e5:a7:5f:10:6b:1e:c1:4e:dd:9a:6e:f0:
         19:bc:7b:b3:80:eb:62:55:75:f9:ab:84:07:94:1b:97:70:b1:
         a2:75:7b:6f:53:b5:73:2f:1d:25:b1:0f:e0:fd:b9:9b:5a:af:
         9b:da:d0:0a:d7:1b:c4:36:b9:6b:68:a9:ca:24:3a:f6:aa:47:
         ef:3d:61:7b:c3:98:c5:30:2c:31:5e:d3:be:36:d6:3a:a5:d7:
         dc:5b:f5:84:e6:ae:58:bf:34:58:9c:61:45:bb:29:21:ef:ff:
         c2:5b:95:24:59:2b:83:7f:b1:8d:84:1a:4b:15:97:29:5a:3a:
         7f:50:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:16:31 2026 by rpki-client