Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207419.roa
File:                     AS207419.roa (raw, json)
Hash identifier:          slO2iMX8DUkSWTZPKdqiIbDkB1TbdLHg1d2qF+kGVrE=
Subject key identifier:   58:87:0A:F8:9A:24:B7:8A:5C:70:97:1F:15:6F:B5:2A:41:74:56:5E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       40F2CA3639A89106E41475B4FF2B8F4A9CC732AC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207419.roa
Signing time:             Fri 12 Sep 2025 13:29:45 +0000
ROA not before:           Fri 12 Sep 2025 13:24:45 +0000
ROA not after:            Fri 11 Sep 2026 13:29:45 +0000
asID:                     207419
IP address blocks:        209.200.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f2:ca:36:39:a8:91:06:e4:14:75:b4:ff:2b:8f:4a:9c:c7:32:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 12 13:24:45 2025 GMT
            Not After : Sep 11 13:29:45 2026 GMT
        Subject: CN=58870AF89A24B78A5C70971F156FB52A4174565E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:3a:6c:c9:36:b0:b9:b1:bc:8e:8a:f8:2a:
                    1f:0f:57:fa:79:5e:d1:db:66:08:34:7e:aa:0a:4b:
                    1d:8f:d2:d8:05:de:1c:b6:64:34:52:39:5e:f9:30:
                    4f:3a:ee:b1:48:cc:96:f1:aa:57:ff:73:77:f3:51:
                    c9:07:62:e7:28:21:7a:5e:a2:d4:77:1d:dd:f8:63:
                    e7:99:aa:d4:3c:69:57:d3:fc:45:ed:03:17:af:83:
                    80:f8:31:08:4c:d8:45:1f:53:05:24:54:7a:77:d7:
                    bf:46:a4:5a:bf:e0:41:f1:c5:4d:3c:d9:df:b4:f7:
                    42:85:ee:17:04:ce:6b:fe:ee:ba:54:4c:d2:81:57:
                    c6:4e:ce:3d:bb:22:72:e6:bb:d9:b6:8c:37:96:67:
                    42:84:25:c4:1a:89:33:1c:3d:7e:ac:82:a8:88:e7:
                    66:08:62:2b:81:9d:01:f1:4a:bb:8d:42:a0:a7:e2:
                    8f:51:ab:c6:5f:ad:f5:92:25:9c:15:b1:81:c9:7d:
                    4e:d6:b0:04:a0:92:b4:9e:62:af:2b:d0:88:d2:a3:
                    5f:cb:7d:f0:3c:9b:82:51:cf:4e:26:ee:00:f1:a7:
                    d8:d6:e2:1b:6b:6e:34:e6:e6:ea:4b:f7:6c:a0:30:
                    87:e5:f8:9a:b9:0b:07:89:4f:da:35:b2:b5:77:fa:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:87:0A:F8:9A:24:B7:8A:5C:70:97:1F:15:6F:B5:2A:41:74:56:5E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207419.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:fe:dd:f8:e1:30:b8:98:f7:22:56:e2:6c:9a:8f:a1:1f:e6:
         6b:2a:54:4a:44:67:4c:75:69:c0:3b:31:31:ef:4e:77:40:0f:
         f3:bd:ae:e5:a5:5e:97:7d:ee:7c:8a:47:28:ff:0a:01:38:cf:
         47:43:78:5d:7c:eb:37:76:76:bd:13:9a:98:c4:39:f3:63:ab:
         24:88:59:2d:53:a2:9e:73:cf:de:39:4e:11:ca:19:86:2c:8a:
         3c:d6:38:44:df:af:9e:f8:05:2f:5f:de:da:56:fc:fc:d6:c4:
         7c:56:e3:ed:70:80:21:c1:c8:5a:a9:b9:9f:c0:3b:50:47:9c:
         8a:9d:7e:3c:86:ef:37:29:94:8f:4e:9a:fb:8f:d9:74:ac:76:
         7d:6d:c0:8b:46:97:64:9c:4c:7f:b0:50:0c:01:17:9f:41:d8:
         5a:01:b6:58:96:c7:7c:8f:28:5f:12:3a:4a:9b:9f:06:fb:dc:
         49:d5:59:21:89:6e:0d:99:1f:a9:ef:e9:23:91:00:c5:58:af:
         11:dc:de:3a:fd:c3:4d:6e:f0:d9:7f:57:7d:16:d8:77:06:c3:
         e8:4f:05:c9:17:50:db:35:50:37:67:62:c6:41:dc:3f:c9:e0:
         cc:d7:58:ba:79:cc:54:98:6e:a1:e2:dd:09:ed:f0:c8:2d:0d:
         aa:0f:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:45:50 2025 by rpki-client