Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa
File:                     AS209888.roa (raw, json)
Hash identifier:          x7Ppq8PTWu/Wb669CG+2G/As11I6xL7G9TC3Phb0v5s=
Subject key identifier:   62:70:9D:47:85:C4:98:A2:FB:41:A6:09:C7:12:54:2D:88:E2:15:2B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       70DC4AA7905A09820DFFDF83EDBAB509E2F96721
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa
Signing time:             Sat 18 Jul 2026 10:18:46 +0000
ROA not before:           Sat 18 Jul 2026 10:13:46 +0000
ROA not after:            Sat 17 Jul 2027 10:18:46 +0000
asID:                     209888
IP address blocks:        74.50.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:dc:4a:a7:90:5a:09:82:0d:ff:df:83:ed:ba:b5:09:e2:f9:67:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 18 10:13:46 2026 GMT
            Not After : Jul 17 10:18:46 2027 GMT
        Subject: CN=62709D4785C498A2FB41A609C712542D88E2152B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fd:ff:82:15:65:4e:69:14:d2:c5:1b:58:d3:
                    98:2d:b8:86:46:5c:46:8c:f5:3a:81:5a:d5:4f:05:
                    aa:3f:77:2a:d7:9f:1e:e3:2f:6a:64:ba:4d:c8:3a:
                    42:48:3f:3f:72:8c:13:04:e9:ef:fd:c8:0d:f1:ed:
                    a6:db:06:14:bb:4c:14:a0:ce:0a:a4:f4:15:61:c2:
                    97:16:1a:3f:19:7b:ea:b1:59:75:3c:8f:06:7e:81:
                    a2:21:06:46:47:e5:3e:63:0c:f7:58:6d:b1:db:fc:
                    c9:dd:cc:a8:da:b0:c0:83:15:4d:09:77:e2:80:7f:
                    43:ff:e5:e1:45:ec:79:90:a2:22:c1:9d:c9:a2:26:
                    a3:6f:3d:91:62:5b:e1:13:87:91:3f:42:bd:92:5c:
                    15:88:5f:86:fb:31:96:a8:07:10:82:56:da:70:6e:
                    b7:4d:88:fd:4a:92:e5:df:c5:84:f9:17:3c:fd:28:
                    55:9b:ed:6a:62:f7:7f:8d:60:3e:a9:1b:8e:b5:dd:
                    80:06:c2:c3:e7:92:13:0c:46:bf:64:8a:c7:d9:be:
                    a7:41:58:dc:59:de:d4:ab:dc:75:2c:64:76:48:0c:
                    75:3f:3f:5b:27:b6:99:5d:01:21:97:c3:5f:83:97:
                    fe:71:32:35:d0:cb:0e:39:48:b7:d5:17:85:ce:3d:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:70:9D:47:85:C4:98:A2:FB:41:A6:09:C7:12:54:2D:88:E2:15:2B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:e1:7d:45:50:94:53:18:a5:b4:27:39:b6:af:f8:0f:dd:02:
         26:eb:22:11:c4:4d:71:f8:18:5b:fd:9a:fa:2c:28:a6:42:45:
         f8:f9:2c:b9:fa:aa:49:24:16:5b:31:be:fb:28:af:5a:85:cf:
         43:5f:9e:01:15:2b:7f:3c:87:d1:cc:84:3f:46:3d:30:a7:f5:
         9c:43:98:cb:dc:96:e2:17:42:a6:13:2f:b6:40:20:de:bd:f7:
         00:27:10:4d:bc:9b:d5:36:a1:7e:17:de:da:b8:4b:58:4b:de:
         7d:20:bc:6e:28:e2:b5:3d:20:4d:05:91:d0:77:76:9e:76:ce:
         35:cc:f6:5d:f7:23:08:ec:88:1d:a0:2b:e9:9b:62:79:4b:e1:
         fc:c8:8e:8c:cb:65:5c:d8:47:50:16:6b:94:ad:bc:be:14:89:
         d8:a8:c8:15:a3:03:2b:7c:c8:7e:06:80:31:81:d7:0a:63:85:
         ab:a4:e5:6c:25:55:97:b0:1f:88:72:c5:f8:ef:50:96:cb:70:
         8d:6d:73:e3:cf:88:34:80:cb:6a:be:90:c8:bb:56:7e:99:18:
         8f:f5:09:93:bb:5c:78:85:c2:2a:2f:28:d2:ab:44:67:04:84:
         87:7d:9a:5e:9d:db:62:a2:22:34:28:2c:b5:26:2b:48:aa:50:
         c0:ce:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:50:51 2026 by rpki-client