Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS208504.roa
File:                     AS208504.roa (raw, json)
Hash identifier:          tPTGTsX+qZkCSDCI9LiClFLEennBLNKr/LXx2e6vRFU=
Subject key identifier:   AC:9D:49:8A:31:86:35:74:01:EF:1B:41:3F:CA:49:96:B4:AA:8C:EC
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       677F014C60337AD4F58949F195B1090A1F650755
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS208504.roa
Signing time:             Thu 23 Apr 2026 07:00:22 +0000
ROA not before:           Thu 23 Apr 2026 06:55:22 +0000
ROA not after:            Thu 22 Apr 2027 07:00:22 +0000
asID:                     208504
IP address blocks:        40.27.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 10:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7f:01:4c:60:33:7a:d4:f5:89:49:f1:95:b1:09:0a:1f:65:07:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 23 06:55:22 2026 GMT
            Not After : Apr 22 07:00:22 2027 GMT
        Subject: CN=AC9D498A3186357401EF1B413FCA4996B4AA8CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:6d:8f:8b:46:0e:c0:c4:07:28:bc:82:18:
                    1b:fa:ec:f7:3e:8b:d4:08:15:b6:20:56:f2:3c:30:
                    86:0a:f3:b5:15:bf:27:82:e8:06:a1:ff:be:81:ca:
                    a3:29:93:b0:29:2e:9e:91:9f:ba:ef:91:90:8d:1a:
                    a2:69:fa:61:fc:f4:7a:d8:ae:92:16:ee:5c:23:25:
                    54:42:90:d5:86:97:e8:ea:92:64:70:42:04:f0:21:
                    8b:f1:3c:7b:7e:97:6e:c2:47:9c:f0:1e:f4:77:f1:
                    8b:bd:0a:c6:32:42:26:87:0b:1d:6d:cb:42:08:5c:
                    8c:52:06:71:f9:0b:2a:56:87:c0:be:1f:a8:37:93:
                    3e:3a:f5:10:b9:c7:0e:de:9c:3e:3a:51:a7:af:85:
                    62:6b:9a:c5:53:71:b0:26:39:a7:22:f4:2b:a1:28:
                    80:68:b0:9b:24:3f:18:25:cb:d5:73:69:70:92:b1:
                    43:14:34:c8:32:be:99:0f:f7:80:9b:f9:88:24:7f:
                    c9:91:b4:1d:6f:a5:11:fe:50:fe:21:84:9f:30:70:
                    ca:04:3d:4d:e4:c3:db:e0:3e:1d:d5:6d:46:28:4a:
                    08:e4:e0:65:0f:9f:47:24:95:80:0d:25:ef:2d:0e:
                    47:1b:19:c2:c3:03:a0:4c:f8:3f:be:fa:cc:be:42:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:49:8A:31:86:35:74:01:EF:1B:41:3F:CA:49:96:B4:AA:8C:EC
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS208504.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:de:bf:ac:7c:5f:81:14:e2:ee:83:91:8b:7f:33:00:44:
         fc:b8:2b:9d:0f:fe:e0:1a:b8:b6:0f:68:29:ca:d3:15:35:09:
         46:5b:f4:ab:78:a4:51:eb:93:30:a6:74:85:96:37:41:e2:9e:
         27:66:78:f7:e1:27:7a:e6:f2:5d:87:e4:09:9e:67:68:25:d9:
         bd:b2:12:92:0a:da:98:cf:a7:5b:72:af:1d:c8:7d:71:92:b1:
         38:66:04:7a:11:11:d6:27:08:fe:14:52:2f:bb:1f:04:66:26:
         ff:b6:75:0b:9d:ae:8d:eb:b2:5b:4b:a6:22:f4:03:cf:f4:3c:
         c1:9d:55:93:fb:40:a7:b9:0d:c3:30:93:eb:9b:1a:c6:81:5a:
         17:b7:2f:78:46:37:a8:e2:af:13:c7:81:2c:b0:c7:38:75:ce:
         d7:3d:d6:da:e2:52:28:54:5d:18:b1:e5:f3:81:35:c5:a6:3e:
         ee:f5:5e:5d:a9:c2:f4:d6:08:f8:dd:15:a2:b9:31:bd:79:da:
         20:a0:36:d6:8a:cd:c4:58:39:4e:fc:60:3c:de:b0:fc:cf:13:
         60:f6:11:59:6f:79:1e:7d:dd:93:38:a0:69:5b:98:3c:2e:b8:
         a6:41:f9:09:8b:9c:92:a3:91:3f:29:53:16:9b:74:ef:12:9c:
         41:e7:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:51:35 2026 by rpki-client