Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212609.roa
File:                     AS212609.roa (raw, json)
Hash identifier:          AcG0bFknAFFTUinHKQqX+PWYdTU15wm9LSSZftEEuGA=
Subject key identifier:   18:65:29:35:8C:AB:32:E7:D6:83:33:72:60:93:7C:CE:0A:47:F7:42
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       70E4D851F1C0824AA1FFD4E2CD8CF13D9290FCCD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212609.roa
Signing time:             Tue 24 Mar 2026 13:35:54 +0000
ROA not before:           Tue 24 Mar 2026 13:30:54 +0000
ROA not after:            Tue 23 Mar 2027 13:35:54 +0000
asID:                     212609
IP address blocks:        23.95.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e4:d8:51:f1:c0:82:4a:a1:ff:d4:e2:cd:8c:f1:3d:92:90:fc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 24 13:30:54 2026 GMT
            Not After : Mar 23 13:35:54 2027 GMT
        Subject: CN=186529358CAB32E7D683337260937CCE0A47F742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:35:ac:c2:c5:a1:ea:52:17:7a:92:b7:bd:
                    e2:cc:1d:de:ef:da:4d:e7:d9:fe:34:4f:d6:1e:8f:
                    fd:7c:14:e1:32:7c:03:47:34:81:ad:ff:df:74:ba:
                    24:95:0d:59:1b:be:86:7c:68:92:af:7c:09:d1:6a:
                    d1:a2:2f:50:78:2c:de:87:c8:04:f3:e3:5a:1a:ae:
                    06:b9:a2:09:af:4c:f4:96:b7:f9:ec:2f:0e:62:a6:
                    4f:42:0c:1c:d6:e7:53:ea:53:5f:39:84:78:1c:17:
                    2c:5e:13:50:09:dc:41:c6:a6:ca:dd:97:ea:5c:8a:
                    18:ba:d8:f4:6a:19:f5:5b:ee:fd:87:0d:5b:29:0c:
                    45:82:35:97:c8:1b:11:77:12:b7:e8:48:d1:67:6e:
                    fc:41:9c:c5:6b:ff:8c:b6:86:18:52:d8:17:de:d3:
                    93:48:6f:65:8a:14:9f:23:3a:13:3b:9e:98:3b:b0:
                    8b:31:cd:8a:d3:f3:b0:2b:48:13:a6:94:3f:3d:7f:
                    6e:c4:bf:94:71:89:a5:9c:86:8a:7e:c0:85:b2:33:
                    38:33:6b:0d:8e:9e:43:1e:36:19:24:11:de:ab:03:
                    df:1a:bb:dc:b3:0b:bc:54:c9:2f:56:da:ee:cf:d6:
                    5b:97:94:61:f1:0d:ba:7a:ad:8f:ff:c0:f3:95:72:
                    0d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:65:29:35:8C:AB:32:E7:D6:83:33:72:60:93:7C:CE:0A:47:F7:42
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212609.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:14:24:97:0a:35:a1:55:82:67:fc:1c:18:7a:d1:da:06:33:
         6e:a4:b9:eb:63:27:58:4c:21:a9:c5:02:5f:75:06:db:05:7a:
         89:08:f3:5e:49:23:91:8b:24:5c:14:ec:fb:47:fb:32:9d:97:
         90:4a:0f:a2:f8:86:17:a0:64:0b:25:c6:4d:a9:9a:4a:89:f0:
         24:96:21:95:11:0e:df:6e:ad:77:d5:35:e4:f7:06:56:9b:29:
         3b:6e:06:48:91:9c:b6:4f:42:9a:83:96:59:92:67:36:94:06:
         44:6f:df:2d:7d:7d:3d:d6:89:97:06:a6:76:b8:4d:5d:6d:c1:
         6c:31:a7:be:6d:b2:37:7c:fc:fc:d5:84:62:1e:8e:1c:c1:16:
         60:ef:8b:92:9b:bb:ad:fe:b0:4a:a5:9e:0f:39:83:b8:85:3c:
         f5:a9:1d:7e:c6:9d:ad:f1:1f:71:f1:cb:04:1b:6c:b4:23:2f:
         a0:ee:c0:c8:b4:82:0d:c5:3c:9a:21:bf:3a:4c:9e:57:eb:96:
         b7:de:e4:47:42:41:b6:c0:42:19:64:70:42:1f:66:d7:93:f5:
         2b:d3:85:59:04:e2:e4:49:9e:89:5d:31:88:7d:ca:c9:36:35:
         24:64:78:ce:ec:7e:d6:a0:0a:ee:1e:80:cb:fe:df:f6:0b:14:
         84:2d:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:34:02 2026 by rpki-client