Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207043.roa
File:                     AS207043.roa (raw, json)
Hash identifier:          TZkkFTkp2yHhEC8rceGEVPtpV1P3RbkLPmoiBKNM4fs=
Subject key identifier:   17:A1:DD:1B:85:EB:1E:32:C1:BF:0D:06:BB:FE:DA:28:6A:87:B8:D6
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5718981C3053BA0C182837EC2AFFD6A265E820D9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207043.roa
Signing time:             Thu 03 Sep 2026 16:36:20 +0000
ROA not before:           Thu 03 Sep 2026 16:31:20 +0000
ROA not after:            Thu 02 Sep 2027 16:36:20 +0000
asID:                     207043
IP address blocks:        23.94.145.0/24 maxlen: 24
                          23.94.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 03:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:18:98:1c:30:53:ba:0c:18:28:37:ec:2a:ff:d6:a2:65:e8:20:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep  3 16:31:20 2026 GMT
            Not After : Sep  2 16:36:20 2027 GMT
        Subject: CN=17A1DD1B85EB1E32C1BF0D06BBFEDA286A87B8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:5c:d7:2a:fc:54:1b:32:1f:64:2c:d2:d0:
                    ff:60:2e:4c:66:6f:46:4c:19:ce:95:2b:4f:f5:46:
                    9c:53:b5:fc:ff:71:44:0e:a5:5c:ff:d1:29:b8:b4:
                    7d:c6:b1:6c:e4:b6:45:cf:c6:be:c1:29:af:df:32:
                    04:82:48:38:36:9b:4d:84:a0:ed:0e:22:eb:07:15:
                    a5:9d:9a:cb:04:1b:f0:11:0e:58:fd:1d:0d:ab:05:
                    30:4d:31:f0:cd:fd:ae:a4:bb:e8:62:49:04:be:45:
                    88:4d:3b:62:47:60:c9:86:75:7e:9f:ca:2b:30:a0:
                    d5:21:d8:3a:05:0c:10:fe:ce:3b:fb:cc:50:2e:60:
                    e8:cb:a8:f2:55:fe:2d:2d:ee:01:43:2b:cc:36:51:
                    74:0f:37:78:34:ba:86:7e:97:5d:18:84:8c:16:9c:
                    b1:53:a6:17:a5:99:59:70:6c:90:4f:a5:ca:2a:09:
                    1f:ba:b2:28:14:30:7c:55:fc:85:82:7b:f6:05:58:
                    c3:8e:bc:b5:9f:2f:8f:ab:f9:c1:9c:b4:6d:14:e2:
                    2c:95:0e:58:01:80:ec:97:54:cf:77:20:24:a2:a5:
                    8b:e7:b5:26:c3:69:2f:3b:7f:83:85:33:93:cf:a6:
                    00:22:73:9b:f9:79:b3:b0:84:5b:2a:02:18:c1:07:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:DD:1B:85:EB:1E:32:C1:BF:0D:06:BB:FE:DA:28:6A:87:B8:D6
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.145.0/24
                  23.94.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:6c:d9:88:2e:f0:36:c7:31:ac:2c:5a:6b:a7:ba:8a:53:
         e1:43:9c:c6:f0:5d:73:ac:45:69:9f:a3:76:3f:6d:94:37:7c:
         e4:4d:21:01:3a:c6:92:44:c5:0c:05:6e:7e:c7:74:e9:05:cd:
         78:56:b6:c8:6c:90:fc:5f:ad:0c:d5:69:ec:aa:37:88:93:b8:
         70:31:43:bc:f2:e0:b3:fc:9a:3d:60:7c:42:ad:f1:c8:cf:96:
         c2:84:a7:bd:6a:f2:20:dd:60:30:28:db:5d:53:bb:ac:60:a9:
         b8:d2:86:3a:37:d8:dd:11:51:d2:18:af:56:3b:81:cd:a3:0e:
         60:1b:a5:5e:6c:d1:76:e6:12:80:e1:a4:3a:e7:c5:17:48:42:
         a9:5d:a6:f0:3d:4e:d9:a2:fc:83:44:24:8a:f6:70:8e:68:b0:
         ea:55:f8:99:df:95:98:cd:4a:7a:e3:ca:87:0b:cf:08:77:f2:
         6a:8f:3b:83:33:ef:8c:96:2f:3d:49:cf:84:ec:3f:7d:9a:db:
         f9:9c:d0:96:54:48:da:a1:93:2b:9c:e0:ef:e4:fe:0e:f1:ed:
         44:30:43:10:df:f9:6f:5d:71:cc:99:d2:38:00:c9:bb:97:2e:
         f0:ef:c1:b9:97:00:5c:12:6b:a6:55:37:8d:8f:87:2e:9d:52:
         73:13:06:e5
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUVxiYHDBTugwYKDfsKv/WomXoINkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwOTAzMTYzMTIwWhcNMjcwOTAyMTYzNjIw
WjAzMTEwLwYDVQQDEygxN0ExREQxQjg1RUIxRTMyQzFCRjBEMDZCQkZFREEyODZB
ODdCOEQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgxc1yr8VBsy
H2Qs0tD/YC5MZm9GTBnOlStP9UacU7X8/3FEDqVc/9EpuLR9xrFs5LZFz8a+wSmv
3zIEgkg4NptNhKDtDiLrBxWlnZrLBBvwEQ5Y/R0NqwUwTTHwzf2upLvoYkkEvkWI
TTtiR2DJhnV+n8orMKDVIdg6BQwQ/s47+8xQLmDoy6jyVf4tLe4BQyvMNlF0Dzd4
NLqGfpddGISMFpyxU6YXpZlZcGyQT6XKKgkfurIoFDB8VfyFgnv2BVjDjry1ny+P
q/nBnLRtFOIslQ5YAYDsl1TPdyAkoqWL57Umw2kvO3+DhTOTz6YAInOb+XmzsIRb
KgIYwQfyNwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFBeh3RuF6x4ywb8NBrv+2ihq
h7jWMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIwNzA0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEABdekQMEABde/DANBgkqhkiG9w0B
AQsFAAOCAQEAKjRs2Ygu8DbHMawsWmunuopT4UOcxvBdc6xFaZ+jdj9tlDd85E0h
ATrGkkTFDAVufsd06QXNeFa2yGyQ/F+tDNVp7Ko3iJO4cDFDvPLgs/yaPWB8Qq3x
yM+WwoSnvWryIN1gMCjbXVO7rGCpuNKGOjfY3RFR0hivVjuBzaMOYBulXmzRduYS
gOGkOufFF0hCqV2m8D1O2aL8g0QkivZwjmiw6lX4md+VmM1KeuPKhwvPCHfyao87
gzPvjJYvPUnPhOw/fZrb+ZzQllRI2qGTK5zg7+T+DvHtRDBDEN/5b11xzJnSOADJ
u5cu8O/BuZcAXBJrplU3jY+HLp1ScxMG5Q==
-----END CERTIFICATE-----
Generated at Mon Sep 7 02:39:00 2026 by rpki-client