Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS219427.roa
File:                     AS219427.roa (raw, json)
Hash identifier:          dgWfC0SAKUQq6KQf2JStE/7N612/+V3S94QHH4vDvPg=
Subject key identifier:   5D:63:4C:11:A2:99:16:CD:99:58:C4:68:C7:9D:4C:50:5F:11:E1:75
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1CB1CB212D3A12FF6074D798CDB7994350F4B22C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS219427.roa
Signing time:             Tue 22 Sep 2026 06:15:15 +0000
ROA not before:           Tue 22 Sep 2026 06:10:15 +0000
ROA not after:            Tue 21 Sep 2027 06:15:15 +0000
asID:                     219427
IP address blocks:        209.200.229.0/24 maxlen: 24
                          209.200.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b1:cb:21:2d:3a:12:ff:60:74:d7:98:cd:b7:99:43:50:f4:b2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 22 06:10:15 2026 GMT
            Not After : Sep 21 06:15:15 2027 GMT
        Subject: CN=5D634C11A29916CD9958C468C79D4C505F11E175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:8c:24:37:75:5c:d2:8a:50:05:4c:ea:04:
                    75:03:da:2f:e0:6c:7b:dd:6a:b5:82:bd:23:3a:5e:
                    26:da:c0:06:46:b9:91:1e:8e:58:96:0d:d4:f4:cd:
                    46:4c:f6:b6:7c:bf:d7:e0:d5:44:3d:23:ac:1c:79:
                    85:78:1d:27:43:3a:d6:05:db:0e:51:f5:5b:d5:e5:
                    64:9b:ee:58:43:b8:1a:0c:25:dd:80:71:ae:0d:81:
                    b6:d0:07:5e:89:47:f5:a2:99:bc:64:07:be:2a:85:
                    c7:9a:89:15:a4:f9:60:2f:2f:5b:66:f7:37:6b:46:
                    86:99:88:41:f5:94:28:fa:29:66:c2:0f:6b:20:83:
                    86:a9:2a:ee:e6:71:09:68:77:43:9b:a3:16:bc:6f:
                    2d:60:4d:04:25:d0:85:f9:b1:01:96:30:a3:f3:27:
                    a8:aa:88:21:e2:88:9c:94:85:d4:43:46:da:3a:9c:
                    29:e3:ab:06:a2:ee:85:bb:0c:6b:d4:46:b4:c9:89:
                    8b:a3:74:1f:58:13:f4:3a:2a:6b:74:0d:c4:a6:3c:
                    1c:98:45:d2:8f:8e:7b:0b:6f:bb:9b:bf:bd:83:af:
                    1b:88:d0:11:d8:91:9d:0b:96:67:4f:04:72:51:06:
                    ac:48:51:a6:a8:bd:3e:55:27:56:36:a9:8d:d8:ba:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:63:4C:11:A2:99:16:CD:99:58:C4:68:C7:9D:4C:50:5F:11:E1:75
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS219427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.229.0/24
                  209.200.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:19:20:0c:e0:74:81:b6:53:1e:be:c5:d3:4b:34:1a:a4:ec:
         95:e4:33:51:c0:0a:e9:37:a2:da:00:cc:ea:17:dd:f7:b1:87:
         e0:e3:1a:4a:31:83:19:6a:4c:78:1b:be:62:a9:16:61:f6:8a:
         1e:81:9f:a2:cb:52:6f:ed:67:34:87:28:4b:dc:9e:32:f3:aa:
         f0:21:4d:84:e6:61:67:c8:50:dd:45:a3:ea:af:21:f7:ff:f2:
         d7:07:0e:44:15:f4:f0:1d:e3:ea:32:b3:b2:c2:3f:47:69:c3:
         12:8e:59:a6:a1:a9:e4:80:f9:f6:46:73:79:e4:4c:c8:63:8f:
         83:29:89:31:fe:50:e0:44:10:84:a4:21:bd:8d:51:18:90:71:
         6a:98:80:0d:3c:c4:13:c1:fd:bb:b5:c6:af:af:48:a2:dc:49:
         1a:a0:90:85:a2:2e:32:8f:45:dc:83:fc:ec:35:22:c4:30:ec:
         f5:3b:fc:57:a9:55:8d:b4:73:1c:d7:02:5f:18:a2:98:dd:ca:
         a9:7c:1e:db:a4:d5:f5:2e:3f:70:05:cb:5f:b3:3a:af:47:5a:
         5e:93:be:cb:ae:6f:d8:09:e3:90:56:f3:9d:eb:75:44:63:82:
         21:95:3c:0c:2e:90:06:a1:a4:97:62:f9:6e:a6:d5:a4:17:3a:
         a5:51:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:13:13 2026 by rpki-client