Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa
File:                     AS209888.roa (raw, json)
Hash identifier:          4R7UpMuMnjt62PvCYb10GtCpRLX1v/UU0nToTiBMs00=
Subject key identifier:   B7:86:A5:8B:02:BA:9B:35:F9:EE:3E:2B:1A:31:41:06:BC:9F:D8:8C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3AF7F3F1FE8499C68023CDE6340C07DA989CF22E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa
Signing time:             Fri 20 Mar 2026 09:48:33 +0000
ROA not before:           Fri 20 Mar 2026 09:43:33 +0000
ROA not after:            Fri 19 Mar 2027 09:48:33 +0000
asID:                     209888
IP address blocks:        74.50.12.0/24 maxlen: 24
                          74.50.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 17:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f7:f3:f1:fe:84:99:c6:80:23:cd:e6:34:0c:07:da:98:9c:f2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 20 09:43:33 2026 GMT
            Not After : Mar 19 09:48:33 2027 GMT
        Subject: CN=B786A58B02BA9B35F9EE3E2B1A314106BC9FD88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:27:4f:28:bb:f1:78:19:34:61:43:63:86:fc:
                    6c:6c:51:28:67:51:8d:10:b6:12:4d:58:a9:bd:51:
                    11:01:c6:31:ee:48:39:8a:19:79:59:f9:b3:21:65:
                    b8:e2:d6:12:fb:c4:8f:e9:6d:42:90:17:ca:c6:fc:
                    27:78:c8:b0:ac:67:64:ef:6c:04:92:46:ad:86:9d:
                    5a:a1:8e:4d:03:10:07:3d:8c:5d:39:9b:fa:c8:4c:
                    4f:20:fc:b2:76:ec:9c:41:59:70:46:25:65:96:89:
                    bd:34:30:9a:3f:c8:f0:70:b3:31:23:1c:fb:41:de:
                    53:ce:bd:77:d5:36:90:5f:fc:b5:8d:27:a4:40:44:
                    46:94:5b:2b:90:dd:0b:41:83:95:26:c9:14:54:71:
                    a1:5e:51:c9:2e:b5:ef:e7:4f:8b:b4:b2:c8:86:35:
                    97:98:4c:d4:5f:36:84:91:aa:3d:87:aa:dc:f9:87:
                    2f:b5:3e:70:8b:b3:90:91:02:f5:b5:31:5c:ce:6c:
                    82:f0:0a:6c:8c:1f:ea:38:2d:e8:39:b5:cf:9c:f5:
                    d3:f4:88:79:dd:31:0e:17:42:4b:8b:24:1d:32:05:
                    d6:16:b4:99:e0:1f:40:fd:ab:2b:ca:04:40:55:7e:
                    43:cf:23:6d:6a:25:d8:50:01:3b:7d:76:58:5d:f2:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:86:A5:8B:02:BA:9B:35:F9:EE:3E:2B:1A:31:41:06:BC:9F:D8:8C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.12.0/24
                  74.50.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6a:30:57:06:ab:36:45:d3:e0:42:99:24:8b:76:17:bb:7c:
         dd:1c:ef:31:65:10:09:52:15:b0:02:5f:db:8b:db:cf:0e:ff:
         f3:fb:e8:24:37:07:5e:6e:2a:33:48:67:16:dc:35:bb:42:6a:
         f3:9d:e6:d8:06:a6:d8:5e:2a:a1:50:f2:ad:07:b9:fa:63:89:
         fc:b8:90:1b:76:83:b9:56:83:8e:3f:23:71:b2:83:e0:97:0c:
         da:59:6f:b2:0b:6f:d7:35:a5:56:e4:8b:aa:77:1b:ff:05:96:
         3b:f0:8f:ab:0e:3d:85:08:33:67:f2:5f:5d:fb:0f:cd:f5:29:
         f9:c5:0b:a9:8e:a3:79:4d:bf:55:0c:bf:d5:a6:27:83:9e:0d:
         45:3e:7f:7f:3e:14:99:85:e3:1a:7e:1e:c0:d1:57:00:9c:9b:
         23:06:6a:44:3f:4e:fd:57:6b:b6:13:45:76:88:a6:9e:59:07:
         fc:b7:f8:a0:80:90:4d:f3:de:c7:17:e5:68:40:7b:b5:d7:9e:
         5c:17:68:8d:bd:f8:f8:62:f2:2d:c1:17:0f:97:d9:29:28:b8:
         26:1e:8c:a9:b4:6e:1d:db:44:60:b9:e0:37:85:2f:cb:ee:62:
         87:3d:e8:7d:80:fd:fe:e0:73:5b:7d:2d:8d:59:b0:d6:a0:f6:
         74:6a:63:d5
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUOvfz8f6EmcaAI83mNAwH2pic8i4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwMzIwMDk0MzMzWhcNMjcwMzE5MDk0ODMz
WjAzMTEwLwYDVQQDEyhCNzg2QTU4QjAyQkE5QjM1RjlFRTNFMkIxQTMxNDEwNkJD
OUZEODhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8idPKLvxeBk0
YUNjhvxsbFEoZ1GNELYSTVipvVERAcYx7kg5ihl5WfmzIWW44tYS+8SP6W1CkBfK
xvwneMiwrGdk72wEkkathp1aoY5NAxAHPYxdOZv6yExPIPyyduycQVlwRiVllom9
NDCaP8jwcLMxIxz7Qd5Tzr131TaQX/y1jSekQERGlFsrkN0LQYOVJskUVHGhXlHJ
LrXv50+LtLLIhjWXmEzUXzaEkao9h6rc+YcvtT5wi7OQkQL1tTFczmyC8ApsjB/q
OC3oObXPnPXT9Ih53TEOF0JLiyQdMgXWFrSZ4B9A/asrygRAVX5DzyNtaiXYUAE7
fXZYXfJh7QIDAQABo4IChTCCAoEwHQYDVR0OBBYEFLeGpYsCups1+e4+KxoxQQa8
n9iMMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIwOTg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAEoyDAMEAEoyDzANBgkqhkiG9w0B
AQsFAAOCAQEAaGowVwarNkXT4EKZJIt2F7t83RzvMWUQCVIVsAJf24vbzw7/8/vo
JDcHXm4qM0hnFtw1u0Jq853m2Aam2F4qoVDyrQe5+mOJ/LiQG3aDuVaDjj8jcbKD
4JcM2llvsgtv1zWlVuSLqncb/wWWO/CPqw49hQgzZ/JfXfsPzfUp+cULqY6jeU2/
VQy/1aYng54NRT5/fz4UmYXjGn4ewNFXAJybIwZqRD9O/VdrthNFdoimnlkH/Lf4
oICQTfPexxflaEB7tdeeXBdojb34+GLyLcEXD5fZKSi4Jh6MqbRuHdtEYLngN4Uv
y+5ihz3ofYD9/uBzW30tjVmw1qD2dGpj1Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 02:14:12 2026 by rpki-client