Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209043.roa
File:                     AS209043.roa (raw, json)
Hash identifier:          AjFRktM8aB+MW355/G2LBT62bEmGZoEuyyqcfC0inl8=
Subject key identifier:   53:70:20:97:94:B5:ED:78:F1:E5:76:68:7D:86:4F:EB:EF:4B:E4:3B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1A6CF62F8FA29FDC9032B68C2EF8E2CC3FB2C98C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209043.roa
Signing time:             Wed 10 Sep 2025 08:15:25 +0000
ROA not before:           Wed 10 Sep 2025 08:10:25 +0000
ROA not after:            Wed 09 Sep 2026 08:15:25 +0000
asID:                     209043
IP address blocks:        209.200.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6c:f6:2f:8f:a2:9f:dc:90:32:b6:8c:2e:f8:e2:cc:3f:b2:c9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 10 08:10:25 2025 GMT
            Not After : Sep  9 08:15:25 2026 GMT
        Subject: CN=5370209794B5ED78F1E576687D864FEBEF4BE43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:17:2d:0f:9b:72:ae:88:9d:a0:ee:4d:67:
                    19:40:a0:72:5f:a8:83:87:d1:f6:bd:d2:d2:67:c5:
                    57:76:24:36:e1:77:7a:a3:b2:b8:ef:15:22:db:86:
                    2f:7a:9a:23:76:0b:ea:4a:17:f3:43:98:da:6c:a6:
                    53:a3:74:d5:8b:31:15:6d:f3:ba:62:89:b2:a7:45:
                    dd:d4:a8:03:20:16:7a:df:87:4a:8a:56:e1:a7:88:
                    0b:77:69:46:60:cf:15:f3:10:ca:f0:39:fc:88:98:
                    47:63:1e:cd:d3:ea:ae:1f:b9:11:1a:d8:67:2a:d3:
                    6a:3f:ff:85:67:f2:19:14:85:53:b7:4b:3b:9f:12:
                    6e:a9:8b:20:ba:86:e3:90:c5:12:99:8f:50:19:4c:
                    cf:95:a8:78:2a:8f:d9:df:4a:1c:0f:87:f9:ee:80:
                    c2:55:62:a3:10:3d:3d:de:4b:d5:89:5b:0f:af:8f:
                    5c:6d:db:be:e6:3c:a8:4d:eb:64:af:4c:3d:d6:cb:
                    ba:0d:c6:45:43:00:6e:3f:db:a7:55:56:de:ae:62:
                    58:e9:aa:d3:e9:4c:23:5b:1f:30:df:71:62:2f:62:
                    30:a8:6a:41:d1:91:b1:29:b1:f3:db:b2:0e:71:65:
                    d4:8d:c2:bc:ff:22:76:89:fa:40:9b:45:e1:99:e2:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:70:20:97:94:B5:ED:78:F1:E5:76:68:7D:86:4F:EB:EF:4B:E4:3B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:69:56:8d:5b:bf:4c:28:82:26:58:08:f9:ff:1c:8e:d4:
         73:a3:08:f5:47:91:6c:b8:0e:90:28:d0:23:dc:b8:5f:c0:88:
         2b:98:d9:cf:c7:79:b1:a8:66:41:f1:c9:83:1f:95:14:36:7a:
         16:70:12:b3:66:c1:89:d1:ed:62:d9:26:bb:0c:5b:74:b4:e2:
         1c:1b:bc:be:97:92:71:17:d1:97:6a:02:10:b7:6d:1c:00:bf:
         f7:02:ba:82:a2:f4:d1:25:e4:55:97:58:99:fe:ee:3d:d3:e6:
         af:97:cc:d0:f6:96:19:d3:77:c8:0b:33:52:00:02:76:d2:5b:
         3b:15:b8:9f:d4:2a:54:61:b0:cd:16:3d:aa:e8:ae:e0:71:a6:
         f7:43:00:5e:e9:27:c4:ab:05:77:cf:f2:26:a7:b9:dc:d6:e3:
         18:71:8d:ca:ce:82:9e:70:db:0b:78:65:12:18:02:9a:f4:48:
         49:6f:2f:ae:45:78:63:4a:ba:9b:da:fb:2e:a4:d8:70:b2:50:
         74:65:7e:13:a6:40:31:03:7c:d8:35:fe:63:7b:1b:c1:c9:6c:
         a1:b1:10:7f:be:34:16:15:cf:d9:dc:a3:5c:da:38:49:9c:d1:
         ed:dd:13:e1:e2:cc:11:71:db:62:53:36:d6:f0:a5:7e:40:61:
         16:a7:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:39:23 2025 by rpki-client