Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209336.roa
File: AS209336.roa (raw, json)
Hash identifier: 7Ggq3TeU2NLMmafdc8/V5rMDeDL8/eNLDj1ckuZP9TM=
Subject key identifier: 41:C4:DB:00:54:39:27:FB:7D:44:76:C8:AB:30:0E:17:F0:E8:DC:2F
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 684F3D7669906F912F96D60848F25C3CDA4DA957
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209336.roa
Signing time: Tue 10 Nov 2026 15:36:22 +0000
ROA not before: Tue 10 Nov 2026 15:31:22 +0000
ROA not after: Tue 09 Nov 2027 15:36:22 +0000
asID: 209336
IP address blocks: 67.210.103.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4f:3d:76:69:90:6f:91:2f:96:d6:08:48:f2:5c:3c:da:4d:a9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Nov 10 15:31:22 2026 GMT
Not After : Nov 9 15:36:22 2027 GMT
Subject: CN=41C4DB00543927FB7D4476C8AB300E17F0E8DC2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:fe:f7:30:c5:72:09:a0:8d:5a:9c:b9:40:
94:ef:e8:54:f5:44:da:1d:3d:f2:2e:2c:4d:52:3e:
c9:90:73:51:34:8d:80:16:70:5c:a2:64:bf:75:8b:
43:42:f2:d7:1f:33:c8:5a:46:67:60:5e:b0:9b:88:
36:97:2f:13:8f:c1:34:cb:04:3d:e1:a5:38:89:e3:
4a:f0:b6:c0:50:a7:f3:ef:ae:ed:73:dd:ed:6d:a5:
a5:ee:9c:e9:58:8a:c0:f6:f1:61:30:74:0d:0a:d6:
37:e9:a7:af:a3:99:41:ab:d5:f3:38:b8:b2:5e:56:
bf:79:6b:ac:be:ed:8f:88:c9:19:17:b9:e7:7a:55:
ac:85:b0:4f:91:30:61:d8:89:16:0f:90:91:ce:38:
17:8b:68:2c:d8:20:40:b9:ac:87:60:6a:26:99:82:
1e:49:61:86:22:77:6b:77:23:9f:b8:5f:ae:f0:2f:
24:25:6c:ec:98:9c:e1:61:77:46:2f:89:ce:93:a8:
85:57:f0:d1:6e:1c:c3:38:31:b4:c6:f1:de:ec:82:
d4:75:7d:ac:30:b3:18:96:26:c8:88:ea:91:c9:60:
13:a2:be:ae:b2:56:50:03:c6:6e:9c:6e:44:6d:ec:
c8:4e:11:54:fb:b8:6c:36:a5:fc:9f:84:2e:d6:40:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:DB:00:54:39:27:FB:7D:44:76:C8:AB:30:0E:17:F0:E8:DC:2F
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2f:0b:8e:81:aa:07:08:1c:25:c3:96:20:37:80:76:51:4f:
ce:1e:c3:d0:6d:2f:76:05:c1:6e:83:1d:a8:7f:39:b2:7f:1f:
b2:b6:6f:a2:c6:53:00:5a:98:91:0a:b3:f6:1e:df:17:ed:7f:
0e:fb:d7:93:45:24:2a:a2:2c:71:04:fc:3a:a4:76:06:4c:ae:
30:d2:47:ad:89:42:ef:6b:ac:55:64:7f:3b:d1:a3:e6:ad:d2:
d8:e5:ae:a5:29:09:88:d6:c9:9b:71:4e:2a:3e:b6:3c:f2:8a:
de:88:c1:39:48:88:c2:f4:60:2f:90:48:af:e9:8b:21:6c:f5:
01:51:44:bd:ac:8c:99:5b:1e:47:eb:72:01:e1:3c:56:96:07:
dd:f9:55:24:56:17:f9:29:28:bf:d3:be:05:eb:f8:41:f2:a7:
31:eb:a0:94:b3:71:2e:41:7b:c1:0a:a5:94:a5:6b:48:f4:ed:
77:53:b4:3e:12:ab:74:43:26:df:53:76:cf:fc:e1:a9:9d:44:
3a:eb:7c:f8:12:bc:f2:c5:c3:28:3b:03:19:73:b5:a9:ad:c0:
56:34:30:f0:a9:de:06:6d:7a:e1:39:1f:e6:84:fc:e5:f1:c7:
dc:a6:3c:41:83:5e:a2:09:d2:cc:79:68:a9:f4:81:f1:d4:7e:
9e:4b:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:51:53 2026 by rpki-client