Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          mYKAQGKayS1W4GonwtY1wgw5pTBVX3+1k2RmKdhdu2M=
Subject key identifier:   94:B7:3B:20:69:A7:BF:47:68:C6:8C:8A:BA:98:C2:71:70:EA:C0:4F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       43979BD1B7A94FB660519BB394B663C6AC959021
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212669.roa
Signing time:             Thu 03 Jul 2025 09:29:44 +0000
ROA not before:           Thu 03 Jul 2025 09:24:44 +0000
ROA not after:            Thu 02 Jul 2026 09:29:44 +0000
asID:                     212669
IP address blocks:        157.254.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:97:9b:d1:b7:a9:4f:b6:60:51:9b:b3:94:b6:63:c6:ac:95:90:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  3 09:24:44 2025 GMT
            Not After : Jul  2 09:29:44 2026 GMT
        Subject: CN=94B73B2069A7BF4768C68C8ABA98C27170EAC04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:55:b4:01:ae:bd:3d:f6:4e:ac:37:b7:2a:
                    e6:9e:11:83:d4:a4:2e:c1:15:d7:7d:59:b7:71:1d:
                    82:88:c4:e6:96:66:26:aa:62:14:38:b3:d4:02:39:
                    1a:f1:66:a9:97:b3:b4:56:b4:28:17:d4:55:28:d6:
                    4d:82:1b:8e:d9:bf:d9:a3:4e:dc:99:3b:1f:68:5d:
                    11:d8:38:fb:6e:45:1d:8e:0c:62:11:70:15:bd:59:
                    97:8c:48:38:87:80:af:ec:76:8a:43:1c:02:65:11:
                    d6:ed:0c:ce:56:bb:21:f7:cf:76:38:68:9b:4b:51:
                    95:aa:cf:35:73:cf:01:0f:cd:65:a5:69:57:6e:fe:
                    aa:35:1f:ab:c1:3a:6e:db:2f:64:d8:e3:9f:15:3f:
                    29:70:5a:dc:32:ef:0f:27:86:82:be:71:59:f7:6f:
                    6e:00:b3:67:eb:ff:32:0e:96:db:7d:bf:ff:dc:c5:
                    c7:ee:89:d4:dc:11:bd:c6:83:dd:aa:4d:0a:d1:5a:
                    6a:71:4c:32:bb:cd:d3:46:24:f2:a8:fa:36:65:b0:
                    c4:d2:e3:ea:35:67:df:10:f2:7f:2f:dc:4d:59:af:
                    e3:23:b9:6d:1b:3e:b0:24:0d:69:20:29:6a:ad:ef:
                    88:ae:b5:ec:0c:e5:c8:12:6a:37:3f:e8:b8:7d:38:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B7:3B:20:69:A7:BF:47:68:C6:8C:8A:BA:98:C2:71:70:EA:C0:4F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:cd:95:57:56:d2:f1:b1:e6:e2:a5:bb:c5:78:9b:a2:d0:
         e6:05:fc:08:cf:ef:19:93:a6:13:15:5a:e3:79:66:67:b9:64:
         15:dc:1b:29:4d:0e:db:61:07:e4:57:a0:2c:54:ae:7f:a7:92:
         38:6e:41:a6:9d:82:db:0b:e0:08:ef:f4:cd:94:45:18:43:05:
         c2:5f:e9:11:8f:fe:cc:8b:a3:66:ba:5f:77:a6:92:ea:af:0a:
         b3:96:e0:66:ba:c9:6d:7a:b8:33:11:44:b3:90:07:dd:d2:4b:
         72:65:1c:e0:8d:24:6e:cf:8e:ad:fe:32:f3:b8:40:51:44:2f:
         6c:b6:e0:f8:29:f4:a6:36:38:76:47:88:c3:cb:4f:ab:1f:bc:
         18:a4:44:ba:f9:89:cc:67:86:bc:4b:76:76:0a:08:af:48:53:
         90:a4:77:3a:e8:38:28:a9:fb:6d:ba:0c:5f:d1:49:07:df:26:
         b6:f7:66:e7:3c:ce:c7:3a:4c:48:a9:3b:6b:5a:24:92:f1:5a:
         32:f0:57:34:29:c6:7b:d0:76:bc:0b:e4:d0:5b:ba:2f:64:97:
         6f:e6:f1:6b:c3:d5:9b:49:14:9b:9b:74:2b:28:9e:c6:43:2c:
         5d:27:2c:25:d6:f1:9b:37:25:35:69:88:32:f5:7d:14:3f:6f:
         9f:2d:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:06 2025 by rpki-client