Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211585.roa
File:                     AS211585.roa (raw, json)
Hash identifier:          4+ng6p4ipzsXRUPvwezkXr9VVQo8nre0t8CS5s+UYMA=
Subject key identifier:   3E:E4:B2:4F:E5:0E:35:D9:52:8D:4F:05:47:F2:9B:67:4F:6B:91:BD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       41A301B535356DA98F5FAB1EE97BCFF1827B3661
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211585.roa
Signing time:             Fri 25 Apr 2025 20:28:31 +0000
ROA not before:           Fri 25 Apr 2025 20:23:31 +0000
ROA not after:            Fri 24 Apr 2026 20:28:31 +0000
asID:                     211585
IP address blocks:        67.210.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a3:01:b5:35:35:6d:a9:8f:5f:ab:1e:e9:7b:cf:f1:82:7b:36:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 25 20:23:31 2025 GMT
            Not After : Apr 24 20:28:31 2026 GMT
        Subject: CN=3EE4B24FE50E35D9528D4F0547F29B674F6B91BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:ba:b4:55:b9:16:ae:cb:ec:0b:61:a5:d9:
                    89:1c:8e:bc:62:c7:7c:ce:c3:dc:63:d6:61:f4:fa:
                    10:4e:85:21:08:af:85:d0:06:f5:89:bc:e2:4c:3e:
                    c8:d8:78:2c:49:f9:ac:f3:5e:81:0b:3d:1f:83:1d:
                    85:4b:f9:37:7e:32:5e:c4:45:44:fa:61:4b:18:22:
                    5e:33:83:fc:74:a6:f4:ed:b8:5c:ee:ea:82:e5:11:
                    65:db:bc:62:fb:fa:44:0a:88:37:e9:b8:57:ab:ae:
                    e0:c1:57:f1:c4:9a:f2:84:56:3a:1c:a0:03:9d:8b:
                    f4:8b:df:68:99:15:d4:52:75:b0:9f:3e:49:de:b1:
                    f5:f0:1f:02:5b:c0:80:3f:4d:73:41:d0:a4:4c:79:
                    5c:f2:74:45:ba:fa:1c:a9:78:a4:07:1d:1b:a4:73:
                    6d:9f:76:ac:e9:b9:db:4d:5b:89:b3:4d:65:18:e5:
                    a3:e9:f4:0e:2e:da:e1:a0:b2:9c:97:37:18:32:3a:
                    42:bb:4a:12:a5:e7:07:18:f6:48:5e:e2:4a:45:e0:
                    b3:46:1c:ae:c8:46:80:5d:c7:a0:d4:d4:ab:f3:d6:
                    6d:d2:6c:84:b9:48:fe:b7:e5:6d:0d:fc:11:bb:02:
                    c0:b9:40:e3:72:e8:5c:7f:8a:b5:f7:5a:62:ba:f2:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E4:B2:4F:E5:0E:35:D9:52:8D:4F:05:47:F2:9B:67:4F:6B:91:BD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:95:19:c7:fb:3f:ee:c4:bb:c4:c2:e2:eb:60:3a:f5:1d:dc:
         05:ec:9b:0a:77:63:bc:71:89:14:3b:e8:0a:ab:8b:c3:3c:5b:
         55:7d:79:34:b3:72:5b:d3:75:48:24:1e:97:53:9d:db:5d:b2:
         6f:f4:ad:81:9a:57:76:d2:c7:a7:94:80:fe:8e:dd:04:e0:53:
         62:42:f4:2b:29:e4:f7:56:17:6b:75:cd:80:9c:28:21:32:b3:
         65:ff:f8:ca:07:1e:7e:ee:5e:b3:39:99:5b:4e:fd:59:03:e2:
         da:b0:39:dd:f8:3a:2e:7c:64:f3:14:9b:a9:76:65:f1:cd:9f:
         e1:0f:a4:bc:6d:31:bf:17:de:5c:d9:c0:26:88:9b:bc:ca:f0:
         54:25:bb:b1:fd:2c:cc:9e:7f:b9:64:62:e2:ab:39:b3:e6:93:
         72:b9:c5:7d:fb:59:cf:fa:76:4d:c8:31:cd:89:0c:3b:cf:7d:
         8a:e7:5d:64:38:61:65:3d:85:be:27:55:f8:41:a6:16:56:f9:
         8b:99:72:5d:dd:81:92:9f:6f:86:a8:a5:5e:fd:07:f1:40:c0:
         90:18:f5:f4:61:06:00:63:7a:48:d2:92:a8:64:0e:83:80:bb:
         51:70:cf:94:00:c8:ef:3e:3d:af:0e:29:b7:e4:4b:f7:61:f6:
         7e:ac:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:34:18 2025 by rpki-client