Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          dYGQfxU/ClxVqW+4JplvY4HFvtBQgaJbyb2o0P8cFhk=
Subject key identifier:   D4:76:44:46:C3:A0:B6:E7:F7:31:42:C5:A9:F3:E3:E4:E9:63:B7:71
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       34492BC471CDF32DEB29A31CD7AA0DF600C9EFC0
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212384.roa
Signing time:             Thu 04 Jun 2026 09:36:05 +0000
ROA not before:           Thu 04 Jun 2026 09:31:05 +0000
ROA not after:            Thu 03 Jun 2027 09:36:05 +0000
asID:                     212384
IP address blocks:        157.254.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:49:2b:c4:71:cd:f3:2d:eb:29:a3:1c:d7:aa:0d:f6:00:c9:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  4 09:31:05 2026 GMT
            Not After : Jun  3 09:36:05 2027 GMT
        Subject: CN=D4764446C3A0B6E7F73142C5A9F3E3E4E963B771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:d5:98:50:4d:da:c7:88:9a:8f:b3:47:13:
                    e5:45:63:78:86:e9:b4:49:71:c7:9a:c2:7b:b8:08:
                    2c:b8:0e:69:b5:5d:f5:a3:88:39:26:87:de:8a:94:
                    62:db:3e:61:09:7c:16:bf:45:8d:39:93:69:fe:26:
                    e1:cc:6a:38:c0:ac:6f:cc:16:18:92:74:6a:15:55:
                    9e:3d:0e:c9:e9:db:1e:64:7d:dc:30:c9:e8:25:65:
                    b4:2a:a5:6e:08:07:0c:7f:9e:02:3a:04:a9:02:8e:
                    9e:44:b4:48:a6:59:f4:7c:f2:db:07:2c:b0:32:f0:
                    b0:01:0c:e5:87:99:15:17:3e:c2:04:bb:f4:21:8b:
                    85:30:4d:de:90:df:d2:8c:d6:50:58:af:b1:c1:45:
                    71:ea:a4:d4:8b:b0:a1:1a:cf:1d:1f:a0:1d:65:97:
                    61:b8:18:e5:06:0e:ae:a2:24:64:bd:a2:a6:ce:e1:
                    5f:61:09:06:d3:37:63:88:02:90:60:3d:26:16:9b:
                    20:50:f6:ad:b2:32:4a:03:b5:ca:1e:ae:50:4d:59:
                    b4:75:28:35:1c:9c:41:64:3f:51:25:cf:20:3d:2b:
                    0c:51:43:49:35:7b:27:3b:3c:31:47:52:ce:31:75:
                    9f:d3:0f:9a:fb:e3:7a:5e:ea:3c:ed:38:3c:71:cb:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:76:44:46:C3:A0:B6:E7:F7:31:42:C5:A9:F3:E3:E4:E9:63:B7:71
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:51:24:5a:ce:12:58:66:c5:7d:93:13:fb:5f:6b:64:0e:4f:
         97:bd:77:b2:bf:cc:7d:f8:9c:27:a8:6b:f4:d7:65:2f:f9:48:
         12:4c:26:ae:23:db:fb:18:a5:91:f2:02:2a:6a:c1:7b:c4:cd:
         c9:d7:76:14:4b:4b:df:e8:90:2a:be:fa:64:c9:27:01:76:63:
         76:54:33:a0:d1:e8:f8:b3:4b:e7:2c:21:0d:9d:7f:cf:a3:f4:
         a5:42:99:e1:1e:2a:2a:6e:fa:a8:06:2a:76:aa:5f:00:55:46:
         e2:9b:4d:2d:3d:d2:f8:cb:0a:97:ef:85:9e:1f:56:68:c3:5d:
         38:5a:8f:cd:3f:7b:bc:e3:11:a4:e7:3a:c5:14:41:94:2a:1c:
         f6:37:eb:1b:98:6f:45:71:b0:06:1d:94:cd:96:ca:10:77:c0:
         a5:af:a8:7b:0c:92:ef:3f:66:7a:7d:32:e4:57:13:f1:3d:06:
         51:b7:ad:9a:9b:ee:f5:2e:b7:cd:17:af:b6:54:b5:d9:67:98:
         a3:02:39:49:2f:76:5b:56:c7:49:1a:d8:dd:72:ec:77:7f:74:
         7d:19:49:d7:ce:4e:ef:b8:e2:6c:aa:e0:78:c1:2a:7d:b4:9f:
         59:f5:b4:0d:09:c3:05:92:97:84:4e:4f:47:77:b2:d7:1d:2a:
         75:79:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:38:12 2026 by rpki-client