Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214271.roa
File:                     AS214271.roa (raw, json)
Hash identifier:          VaYTBNjVqvksBqpS8E2nWXvxkwt6FOD2P0OdB19nw1c=
Subject key identifier:   4D:DA:32:E2:33:67:F4:54:64:92:BB:48:7E:7B:B9:D4:45:D4:DD:15
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1131841D53E698E4331045936EADE7A692B20D04
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214271.roa
Signing time:             Tue 29 Sep 2026 08:36:20 +0000
ROA not before:           Tue 29 Sep 2026 08:31:20 +0000
ROA not after:            Tue 28 Sep 2027 08:36:20 +0000
asID:                     214271
IP address blocks:        209.200.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 01:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:31:84:1d:53:e6:98:e4:33:10:45:93:6e:ad:e7:a6:92:b2:0d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 29 08:31:20 2026 GMT
            Not After : Sep 28 08:36:20 2027 GMT
        Subject: CN=4DDA32E23367F4546492BB487E7BB9D445D4DD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:48:bb:f5:ed:b6:86:c1:8e:67:9d:6d:db:
                    71:81:48:76:e9:46:fd:97:52:12:d2:b7:1a:9d:53:
                    47:b5:56:b9:05:bc:80:8d:f9:bd:64:87:42:07:53:
                    fd:39:0b:dc:ba:91:bf:84:a2:50:b7:1f:96:86:b8:
                    50:55:72:a8:c8:c5:4f:4a:88:2d:c4:42:27:7c:2a:
                    6e:24:34:b2:44:1c:9f:8f:1a:aa:bd:7c:48:b6:b0:
                    21:77:cd:0c:23:ee:fe:7e:df:91:3a:84:1c:94:35:
                    f3:ff:0c:01:b2:22:a7:81:02:96:fd:ef:4f:10:bf:
                    aa:29:68:6d:2f:0d:44:ff:84:bf:4f:0a:34:7d:2d:
                    d3:e0:ef:f8:73:f7:6f:3e:bd:2e:4d:ac:47:8a:c9:
                    9a:3d:85:f8:e2:31:d9:b8:f6:4d:73:13:ab:08:b4:
                    49:97:10:b0:ab:42:f2:69:41:29:46:25:4e:53:f6:
                    41:63:2c:7e:fe:42:90:d4:af:0e:28:be:7f:21:0d:
                    50:00:5d:83:5b:3d:0a:12:e5:ff:0e:da:0f:31:de:
                    26:44:31:8c:8e:c6:14:b3:77:ac:e5:18:14:2c:01:
                    e1:9f:87:56:60:09:11:88:f6:52:43:48:2f:26:70:
                    7b:8f:50:55:da:70:d6:c0:7e:ac:b1:27:37:cb:f3:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DA:32:E2:33:67:F4:54:64:92:BB:48:7E:7B:B9:D4:45:D4:DD:15
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:72:86:e6:e7:bf:e4:c2:12:e6:cc:34:0c:be:3e:fa:62:36:
         5e:29:ad:23:6f:7b:96:ee:c5:11:9a:d4:10:4f:19:31:36:67:
         5a:b2:05:84:13:7b:49:2a:93:cb:27:48:f1:c9:21:e4:57:42:
         8e:d0:f6:6d:7c:27:d2:dd:00:c2:6a:6b:36:09:53:da:0c:45:
         73:0f:4d:44:a3:4d:5e:3a:49:3c:09:b1:ac:02:ad:bc:10:91:
         e6:d4:74:6f:82:70:78:91:51:26:0b:50:58:4d:c4:c4:5f:eb:
         04:7a:f4:d8:51:ec:9a:f1:79:18:74:fa:2d:af:ca:26:10:f2:
         18:07:ef:1d:4a:bf:79:a8:fe:e0:dd:85:d4:b5:32:38:05:06:
         45:2c:79:1d:11:0f:f4:1d:a9:28:70:31:34:ba:79:3f:ab:80:
         51:6a:4c:bb:d8:21:3a:e6:cb:d7:d4:49:3d:4b:f7:a2:f9:59:
         b1:16:02:37:46:52:7a:56:0b:a0:ed:9e:e8:e7:2f:d3:c0:ae:
         f8:a2:ac:54:24:83:29:a5:4a:1d:5a:72:45:bb:4a:87:21:46:
         2c:d5:22:9f:af:87:32:37:09:f6:56:60:a4:c0:c2:11:e6:d1:
         33:a6:73:ce:72:71:85:b3:44:bc:1c:7d:cf:2d:b1:8d:79:99:
         9e:b2:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:56:54 2026 by rpki-client