Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210008.roa
File:                     AS210008.roa (raw, json)
Hash identifier:          Gj9YquKgjcfmNJNoZc5hZ8w/HiOLBmegYTX6pCv9xOA=
Subject key identifier:   91:56:49:A6:B5:1B:8E:D0:CD:9B:12:6C:C2:82:F3:B9:49:4F:5F:A4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1320E899A375C0F9556300CDC54CDA663C5B8504
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210008.roa
Signing time:             Sat 18 Apr 2026 12:35:59 +0000
ROA not before:           Sat 18 Apr 2026 12:30:59 +0000
ROA not after:            Sat 17 Apr 2027 12:35:59 +0000
asID:                     210008
IP address blocks:        209.200.244.0/23 maxlen: 24
                          209.200.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 18:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:20:e8:99:a3:75:c0:f9:55:63:00:cd:c5:4c:da:66:3c:5b:85:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 18 12:30:59 2026 GMT
            Not After : Apr 17 12:35:59 2027 GMT
        Subject: CN=915649A6B51B8ED0CD9B126CC282F3B9494F5FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:5d:25:ed:da:23:6f:c3:f6:80:7f:32:ec:
                    d0:8e:84:45:d1:9c:c1:b4:66:ce:1b:15:9e:ae:66:
                    ee:03:3d:7c:d4:d5:28:d2:0d:b9:17:6e:47:8e:89:
                    98:35:f3:44:f8:42:bd:1c:43:14:5c:d5:b9:e3:20:
                    39:ed:b2:fb:8a:6c:fa:5e:af:ea:ec:eb:5b:3b:97:
                    26:3a:3b:76:c8:56:13:98:51:4f:0c:cc:a5:8e:b4:
                    b9:ac:db:83:59:6c:8f:ce:54:a5:f0:77:95:d6:19:
                    74:0f:f3:74:a7:fa:89:58:da:79:6d:ab:a0:10:bc:
                    c4:25:ca:7f:50:9a:b7:c0:6f:b4:d9:b5:3d:e9:cd:
                    fc:a1:42:16:51:00:b0:85:8d:ba:d1:c2:57:db:c9:
                    f6:ad:ef:c7:8c:c3:c0:48:59:67:9f:65:ca:b7:55:
                    67:9d:8a:aa:8e:24:53:23:8a:f1:18:50:93:c0:49:
                    e9:5b:ac:f0:7d:a5:a3:57:e8:58:f8:c0:3a:0e:8a:
                    b8:1f:99:11:5b:94:5b:e1:e2:c7:62:0a:90:24:7c:
                    f2:62:91:39:7f:86:af:ef:07:73:cd:b5:7a:1c:57:
                    7a:9d:cf:33:f7:d5:fd:09:2c:e5:3b:b0:52:62:b8:
                    c4:79:91:d5:94:2f:e4:a2:54:17:f4:0f:0a:7b:9c:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:56:49:A6:B5:1B:8E:D0:CD:9B:12:6C:C2:82:F3:B9:49:4F:5F:A4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210008.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.244.0/23
                  209.200.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:80:84:f7:b0:1c:f8:0f:7b:f9:6b:14:b5:74:3e:2b:09:7e:
         99:e4:a0:66:ad:71:a2:aa:6f:3a:a9:03:76:ce:a6:a2:1a:89:
         59:fb:8a:cd:37:d1:e1:e1:4c:84:15:b3:20:c5:de:24:4e:38:
         a9:df:11:dd:f0:37:ba:bd:39:c4:82:7e:12:03:4e:dd:3a:23:
         ae:be:e3:72:3f:f9:83:02:5e:05:2a:c4:bb:72:17:f3:e3:32:
         bc:a1:8b:05:2a:c8:9d:b9:2c:6c:27:5e:5f:77:bc:bb:e3:fb:
         aa:df:b7:4f:d4:08:60:fb:c6:83:37:13:45:cf:26:a2:06:81:
         da:a9:64:c4:e1:29:7c:1f:f1:7d:7b:fd:20:11:13:70:b6:0b:
         22:a7:f3:15:a1:18:5e:05:60:6a:b9:ca:c0:9b:e7:3a:b0:fe:
         cf:57:22:d2:e3:d7:8f:6c:d4:25:46:c6:e8:6b:b2:8a:89:bd:
         6e:f4:f7:e4:d5:1c:4c:1e:aa:a7:7f:ca:70:c7:f4:23:5b:33:
         a5:60:e1:db:87:05:94:b8:5e:dd:69:fa:e4:44:fa:ef:f2:0c:
         24:7f:29:60:ea:64:a6:7d:ab:ea:02:1c:88:a6:57:1c:5c:3b:
         85:4b:a7:13:7f:8f:98:97:b4:54:00:a5:59:f8:eb:16:e3:4b:
         70:36:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:23:20 2026 by rpki-client