Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa
File:                     AS209737.roa (raw, json)
Hash identifier:          Lw+HXw1/82BLSWcCSyxGyApz28AYfGxGiC1sdn2pMlQ=
Subject key identifier:   2B:AD:2B:EE:0D:E4:E5:85:D1:85:24:0A:A8:73:55:7C:F7:53:43:8C
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       2833B1D2373B95F969C2908E501494B00C35B521
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa
Signing time:             Tue 08 Jul 2025 22:29:44 +0000
ROA not before:           Tue 08 Jul 2025 22:24:44 +0000
ROA not after:            Tue 07 Jul 2026 22:29:44 +0000
asID:                     209737
IP address blocks:        140.99.44.0/22 maxlen: 24
                          140.99.180.0/22 maxlen: 24
                          140.99.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 20:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:33:b1:d2:37:3b:95:f9:69:c2:90:8e:50:14:94:b0:0c:35:b5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul  8 22:24:44 2025 GMT
            Not After : Jul  7 22:29:44 2026 GMT
        Subject: CN=2BAD2BEE0DE4E585D185240AA873557CF753438C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cc:a4:e2:98:e4:2b:77:79:f6:be:03:f6:20:
                    09:85:dc:02:7f:1f:70:90:41:49:42:bf:09:99:4f:
                    62:d3:3c:52:bd:49:9c:5f:f1:14:f4:7d:97:9e:a6:
                    ae:fa:5a:20:38:0a:99:10:96:16:8f:e3:d7:c9:24:
                    ca:a4:64:d3:5b:73:64:1f:6c:54:82:ac:cd:0b:b6:
                    3f:29:06:1f:71:4a:9e:32:59:ef:bd:17:2c:e8:6e:
                    75:d1:3e:55:38:0a:32:1b:3e:fd:e6:ba:8a:fc:f6:
                    ae:d5:9e:05:e9:91:b2:c5:02:58:aa:b1:57:12:66:
                    2e:41:67:29:48:9d:12:96:8b:bf:81:9c:37:6e:5a:
                    f6:e0:62:d4:f7:79:cc:4a:b6:62:b5:24:0f:e9:88:
                    5a:e9:74:d8:af:99:71:18:90:8a:bf:3f:ab:ac:7b:
                    b9:26:03:b6:84:87:fb:4e:6a:b5:2f:b4:5e:ed:de:
                    69:f6:b8:5f:0d:ad:22:05:c9:cb:25:28:fa:5d:e5:
                    db:82:1a:63:e4:9e:df:5e:a6:39:a1:72:aa:66:16:
                    ec:c0:11:14:cf:79:ae:ec:4f:4d:23:d1:18:51:65:
                    e5:47:61:43:78:e2:7d:57:7c:3a:14:b8:04:08:fb:
                    76:b0:f4:5b:a2:31:58:81:73:de:6d:50:de:f7:a1:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:2B:EE:0D:E4:E5:85:D1:85:24:0A:A8:73:55:7C:F7:53:43:8C
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.44.0/22
                  140.99.180.0/22
                  140.99.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:4a:02:f0:32:6c:6a:43:cb:a3:d6:a0:92:92:0d:74:a0:11:
         29:45:18:d7:7f:78:8c:c6:65:fc:bf:e1:8c:8e:da:ba:52:05:
         a9:9c:2b:76:32:b5:65:9d:b5:81:1a:46:33:d2:3f:3a:33:4a:
         1f:55:90:00:71:f3:d2:13:c3:10:3e:e0:de:7f:f0:91:e1:b7:
         6b:20:5e:f9:53:a9:e5:ee:c9:a8:0c:51:9a:95:63:b6:a1:b2:
         00:74:8b:52:81:a1:ec:09:b9:28:5a:cc:e3:39:9f:72:95:cd:
         33:21:5b:76:27:1c:2c:20:be:63:5b:13:1b:d9:a2:54:e1:25:
         94:fd:0a:2c:c0:20:eb:e5:2b:4c:2e:9e:9b:77:ed:0b:2e:9c:
         b1:44:b2:f7:57:ce:45:30:58:14:d4:ec:e0:82:fb:18:27:62:
         93:c8:96:cd:23:7f:43:1d:2e:bf:90:54:c0:49:b2:69:bd:df:
         56:da:cc:4b:2f:4a:8a:a4:25:b0:6b:96:2a:12:a1:97:fb:73:
         50:50:7b:1d:ea:73:d9:4d:b9:06:bf:4b:36:ec:16:5f:88:aa:
         e1:98:47:37:8a:76:ec:4e:0a:f8:c6:85:26:ec:8e:9f:31:f8:
         ff:ed:be:36:a6:25:03:ac:14:62:d0:b3:79:5c:05:63:22:14:
         9c:75:6c:1d
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUKDOx0jc7lflpwpCOUBSUsAw1tSEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwNzA4MjIyNDQ0WhcNMjYwNzA3MjIyOTQ0
WjAzMTEwLwYDVQQDEygyQkFEMkJFRTBERTRFNTg1RDE4NTI0MEFBODczNTU3Q0Y3
NTM0MzhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8yk4pjkK3d5
9r4D9iAJhdwCfx9wkEFJQr8JmU9i0zxSvUmcX/EU9H2Xnqau+logOAqZEJYWj+PX
ySTKpGTTW3NkH2xUgqzNC7Y/KQYfcUqeMlnvvRcs6G510T5VOAoyGz795rqK/Pau
1Z4F6ZGyxQJYqrFXEmYuQWcpSJ0Slou/gZw3blr24GLU93nMSrZitSQP6Yha6XTY
r5lxGJCKvz+rrHu5JgO2hIf7Tmq1L7Re7d5p9rhfDa0iBcnLJSj6XeXbghpj5J7f
XqY5oXKqZhbswBEUz3mu7E9NI9EYUWXlR2FDeOJ9V3w6FLgECPt2sPRbojFYgXPe
bVDe96ErbQIDAQABo4ICizCCAocwHQYDVR0OBBYEFCutK+4N5OWF0YUkCqhzVXz3
U0OMMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIwOTczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAoxjLAMEAoxjtAMEAoxj0DANBgkq
hkiG9w0BAQsFAAOCAQEAvEoC8DJsakPLo9agkpINdKARKUUY1394jMZl/L/hjI7a
ulIFqZwrdjK1ZZ21gRpGM9I/OjNKH1WQAHHz0hPDED7g3n/wkeG3ayBe+VOp5e7J
qAxRmpVjtqGyAHSLUoGh7Am5KFrM4zmfcpXNMyFbdiccLCC+Y1sTG9miVOEllP0K
LMAg6+UrTC6em3ftCy6csUSy91fORTBYFNTs4IL7GCdik8iWzSN/Qx0uv5BUwEmy
ab3fVtrMSy9KiqQlsGuWKhKhl/tzUFB7Hepz2U25Br9LNuwWX4iq4ZhHN4p27E4K
+MaFJuyOnzH4/+2+NqYlA6wUYtCzeVwFYyIUnHVsHQ==
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:30 2025 by rpki-client