Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209854.roa
File:                     AS209854.roa (raw, json)
Hash identifier:          NZ3kLB9w2eBpS2G5IJg6xj0jQKD5WrbEpNsJXJC6DnA=
Subject key identifier:   6B:F9:A1:66:26:E1:9B:90:5F:2C:F1:22:00:53:14:61:1B:EE:C8:42
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       0871CC512DB486FDA4838578D1612F5DCBCBF011
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209854.roa
Signing time:             Sat 18 Oct 2025 06:30:39 +0000
ROA not before:           Sat 18 Oct 2025 06:25:39 +0000
ROA not after:            Sat 17 Oct 2026 06:30:39 +0000
asID:                     209854
IP address blocks:        216.246.29.0/24 maxlen: 24
                          216.246.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:71:cc:51:2d:b4:86:fd:a4:83:85:78:d1:61:2f:5d:cb:cb:f0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 18 06:25:39 2025 GMT
            Not After : Oct 17 06:30:39 2026 GMT
        Subject: CN=6BF9A16626E19B905F2CF122005314611BEEC842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fe:7d:ff:20:b7:ff:84:a0:ad:22:3a:6c:bf:
                    de:ef:f8:42:6e:af:2c:77:6f:41:31:e8:03:24:f5:
                    89:c3:8a:32:ce:da:e8:8e:89:6c:14:11:90:76:81:
                    b0:0d:18:3c:18:bc:8f:29:14:6d:7e:24:b2:c7:66:
                    ab:a9:66:1d:bc:ac:92:74:94:94:bc:10:82:ce:1c:
                    ed:46:e2:c2:18:e7:38:4f:b2:dd:f1:f4:de:10:e3:
                    1d:58:35:09:2d:6c:ab:72:fe:c2:35:d3:47:96:91:
                    1a:4c:fd:93:7e:63:77:d7:94:05:31:e4:99:48:7b:
                    8b:ef:f0:85:79:68:f5:c8:9f:19:81:83:6f:6e:1f:
                    19:45:d8:62:0d:2e:9f:a4:d0:aa:9b:25:ab:49:25:
                    e4:27:be:5e:71:e2:9d:73:30:ba:3f:09:e3:2b:23:
                    4f:4b:5b:66:e5:89:a2:40:75:b0:66:5f:b8:e8:47:
                    5a:0b:80:af:5a:54:67:ec:75:20:77:10:b0:e6:1b:
                    3e:a1:0c:10:72:b8:df:3e:8a:19:07:18:e9:91:e5:
                    f2:c8:fa:29:97:64:59:92:d4:05:2f:2d:9f:1f:e8:
                    35:3e:b7:09:dc:98:39:49:ec:86:07:24:03:bf:c3:
                    d8:87:dc:f9:8c:fd:aa:dc:71:db:7f:e1:7e:0d:0a:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:A1:66:26:E1:9B:90:5F:2C:F1:22:00:53:14:61:1B:EE:C8:42
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209854.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.29.0/24
                  216.246.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a0:99:d8:4c:74:3e:a5:dc:46:3b:e8:97:20:3c:03:63:ab:
         4e:57:a4:75:46:d9:74:5c:78:cb:84:42:b8:8b:a2:e3:90:86:
         dc:94:42:b4:7c:66:b9:ba:ff:c7:74:e8:69:c2:6c:0e:0d:9e:
         e7:ed:46:2e:de:90:27:58:ac:e6:ed:c7:68:76:00:21:70:1e:
         c5:3a:9f:5d:40:8b:ec:41:ad:25:e5:b0:5b:d0:40:ca:f5:6d:
         82:33:af:55:a9:b8:95:54:27:2a:99:d2:c3:19:82:bf:71:4e:
         2d:a0:d0:0a:7b:91:6a:eb:47:f0:24:e2:22:e9:32:ab:68:10:
         f2:b3:07:0a:ac:81:f6:26:38:08:97:60:1f:68:7a:04:d5:15:
         5d:32:7c:d9:c1:29:cd:06:77:59:a0:a4:86:4d:c5:d1:e1:cb:
         58:08:eb:02:84:cb:d0:f4:41:8d:fa:44:01:52:0a:fd:85:a6:
         03:b3:d6:a5:84:cb:6a:ab:07:3c:9e:80:54:36:07:97:7b:c6:
         d6:ef:9a:1f:3b:59:58:7c:ce:be:bb:99:fd:15:f0:c5:c7:0c:
         d5:06:74:bc:43:a4:7f:47:03:5d:fe:6c:65:fc:ad:e7:2b:3a:
         fd:b9:34:52:96:f8:73:7f:25:d2:a7:0c:5e:79:9b:17:92:54:
         4a:d2:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:45 2025 by rpki-client