Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212336.roa
File:                     AS212336.roa (raw, json)
Hash identifier:          6+Z07k5DXrqLxPuN8HLD04TmqCNn2+/XAa7l795d6J4=
Subject key identifier:   80:58:53:93:B5:7B:8B:8E:DC:75:0B:BD:CB:E3:B1:27:9A:82:68:AD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       41741033F2EF4AE1388DC1FC828E918DA335E3F2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212336.roa
Signing time:             Thu 21 Aug 2025 08:17:52 +0000
ROA not before:           Thu 21 Aug 2025 08:12:52 +0000
ROA not after:            Thu 20 Aug 2026 08:17:52 +0000
asID:                     212336
IP address blocks:        23.95.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:74:10:33:f2:ef:4a:e1:38:8d:c1:fc:82:8e:91:8d:a3:35:e3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 21 08:12:52 2025 GMT
            Not After : Aug 20 08:17:52 2026 GMT
        Subject: CN=80585393B57B8B8EDC750BBDCBE3B1279A8268AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:f0:b7:e9:df:95:f6:ed:66:06:8c:84:ac:
                    3e:4a:26:14:d0:fc:2f:fc:ef:b8:4c:40:bd:13:95:
                    a8:8b:39:c2:ed:7f:09:84:04:32:ec:15:09:2c:25:
                    ee:b1:37:98:9a:08:dd:24:7e:a4:8d:2f:75:b8:b1:
                    5a:f9:e9:3d:e7:2d:ac:ac:97:dc:99:6c:8d:73:87:
                    ad:42:dc:3d:67:d6:3e:7d:f4:c2:8e:bc:4f:21:dc:
                    c4:2a:15:fd:f9:38:c4:25:24:e9:96:6b:14:8c:6d:
                    d8:6d:01:29:0c:20:ce:e9:62:49:64:8f:ac:47:80:
                    ef:58:58:2b:3e:15:79:85:15:d0:89:62:91:17:db:
                    bd:c1:28:64:d3:fe:48:4c:e1:33:81:e7:d8:e0:0c:
                    3d:fd:a5:e2:0a:09:2e:65:c3:63:44:f4:af:63:86:
                    07:b9:66:57:ae:de:17:c2:01:9d:91:6e:fb:70:03:
                    08:cd:2b:20:c6:bf:ca:38:3a:20:56:fb:3b:2d:8e:
                    52:16:00:32:6b:74:83:a3:c5:12:c0:c6:8a:02:5d:
                    24:37:64:1f:3f:f5:3e:34:c4:78:04:7e:ac:d5:65:
                    3c:e6:4e:61:65:55:8e:f1:fc:a3:bf:2d:8b:ae:52:
                    c7:a3:9a:38:ea:b9:7d:4a:c7:17:fb:de:70:d7:d4:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:53:93:B5:7B:8B:8E:DC:75:0B:BD:CB:E3:B1:27:9A:82:68:AD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:f9:db:bd:1c:de:8f:05:10:38:d0:eb:ca:00:6c:d8:7f:
         35:e2:ca:36:dd:61:c7:8b:fe:e2:f3:77:4b:aa:01:73:0e:ca:
         27:3a:e9:23:fe:5c:4a:77:33:a1:0b:36:63:ce:b6:d4:90:26:
         4f:ca:cd:c7:49:ff:9b:c2:89:1c:c4:c9:28:db:62:a2:ee:91:
         ac:fe:69:a7:be:6d:e2:ca:07:46:34:9c:3a:5e:1f:55:e3:40:
         99:53:5d:41:a2:c6:d6:22:a5:3e:79:d8:82:98:09:06:38:14:
         0c:ec:08:10:8d:a9:41:1e:14:34:62:75:74:05:14:ed:20:2c:
         a9:a8:4c:4b:30:bb:6f:83:9c:a7:c3:9c:37:e6:22:71:bd:4d:
         9b:dd:76:53:80:c0:af:46:b5:f0:3a:bf:88:74:fc:92:56:95:
         4b:4e:a1:ce:0c:55:3d:e6:86:87:00:20:60:7a:eb:26:18:34:
         eb:72:ee:17:0f:03:49:0a:2c:74:34:c7:51:01:07:00:ea:6c:
         0f:f0:5a:32:9f:18:18:19:e8:43:e8:9c:b9:2d:91:09:a5:85:
         83:68:a1:a0:7e:b7:14:3b:ef:be:17:a0:6f:5b:77:dc:a7:8b:
         90:6d:53:05:32:99:c1:5f:4b:92:52:d1:8c:72:47:b6:34:db:
         5e:ff:8d:71
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUQXQQM/LvSuE4jcH8go6RjaM14/IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODIxMDgxMjUyWhcNMjYwODIwMDgxNzUy
WjAzMTEwLwYDVQQDEyg4MDU4NTM5M0I1N0I4QjhFREM3NTBCQkRDQkUzQjEyNzlB
ODI2OEFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWbwt+nflfbt
ZgaMhKw+SiYU0Pwv/O+4TEC9E5WoiznC7X8JhAQy7BUJLCXusTeYmgjdJH6kjS91
uLFa+ek95y2srJfcmWyNc4etQtw9Z9Y+ffTCjrxPIdzEKhX9+TjEJSTplmsUjG3Y
bQEpDCDO6WJJZI+sR4DvWFgrPhV5hRXQiWKRF9u9wShk0/5ITOEzgefY4Aw9/aXi
CgkuZcNjRPSvY4YHuWZXrt4XwgGdkW77cAMIzSsgxr/KODogVvs7LY5SFgAya3SD
o8USwMaKAl0kN2QfP/U+NMR4BH6s1WU85k5hZVWO8fyjvy2LrlLHo5o46rl9SscX
+95w19QUvwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIBYU5O1e4uO3HULvcvjsSea
gmitMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxMjMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdfezANBgkqhkiG9w0BAQsFAAOC
AQEAHGj5270c3o8FEDjQ68oAbNh/NeLKNt1hx4v+4vN3S6oBcw7KJzrpI/5cSncz
oQs2Y8621JAmT8rNx0n/m8KJHMTJKNtiou6RrP5pp75t4soHRjScOl4fVeNAmVNd
QaLG1iKlPnnYgpgJBjgUDOwIEI2pQR4UNGJ1dAUU7SAsqahMSzC7b4Ocp8OcN+Yi
cb1Nm912U4DAr0a18Dq/iHT8klaVS06hzgxVPeaGhwAgYHrrJhg063LuFw8DSQos
dDTHUQEHAOpsD/BaMp8YGBnoQ+icuS2RCaWFg2ihoH63FDvvvhegb1t33KeLkG1T
BTKZwV9LklLRjHJHtjTbXv+NcQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:40:48 2025 by rpki-client