Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa
File:                     AS209737.roa (raw, json)
Hash identifier:          FOmHry/ot1FCaYG14JiHC6MEQPQ9jSs7mWzx59t5Gps=
Subject key identifier:   93:46:2E:68:7C:C5:AA:81:A4:35:99:DF:57:6A:70:94:43:A7:15:FF
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       76EB41F62D0297E7D2A511B989977C0B161435D0
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa
Signing time:             Tue 09 Jun 2026 22:36:05 +0000
ROA not before:           Tue 09 Jun 2026 22:31:05 +0000
ROA not after:            Tue 08 Jun 2027 22:36:05 +0000
asID:                     209737
IP address blocks:        140.99.44.0/22 maxlen: 24
                          140.99.180.0/22 maxlen: 24
                          140.99.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:eb:41:f6:2d:02:97:e7:d2:a5:11:b9:89:97:7c:0b:16:14:35:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun  9 22:31:05 2026 GMT
            Not After : Jun  8 22:36:05 2027 GMT
        Subject: CN=93462E687CC5AA81A43599DF576A709443A715FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:37:f9:f9:17:39:06:1d:a4:4a:9a:cc:11:
                    dd:57:dd:c5:9e:5e:13:c7:79:bf:5c:68:25:51:93:
                    88:91:81:e2:d7:9d:63:65:df:2f:ca:1b:cb:0a:cb:
                    cc:dd:aa:1e:71:7b:77:e4:f3:11:47:df:0f:3d:f2:
                    d2:b8:85:5e:37:91:e6:fb:ad:40:07:2c:ba:a9:9b:
                    92:8e:44:26:26:e3:9d:be:98:96:85:46:4a:00:ab:
                    a6:6c:c7:66:de:d9:a5:a8:b9:e0:a5:b7:69:ee:86:
                    91:63:53:73:7d:7f:d6:8f:27:c2:25:79:d8:b6:21:
                    87:63:06:77:75:03:67:fb:64:4f:83:77:c5:b2:50:
                    65:82:3d:09:15:af:ef:02:61:89:df:7f:6c:ca:2b:
                    3b:f6:ef:a7:26:27:34:46:17:23:15:87:8e:67:5c:
                    cf:5f:99:45:bc:4f:27:21:0c:cf:e9:45:1e:61:72:
                    96:1c:37:38:80:cc:1e:64:9e:53:9f:ea:64:7d:40:
                    08:e6:10:b2:83:3e:53:02:3c:3c:78:0d:d3:2e:18:
                    2f:66:dc:3c:18:13:ea:38:02:a8:a5:9c:47:24:01:
                    6d:27:d6:8f:94:ed:30:e3:de:82:2d:1e:ff:92:b1:
                    1f:7d:86:6f:89:3d:ac:78:43:af:61:98:8c:c1:50:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:46:2E:68:7C:C5:AA:81:A4:35:99:DF:57:6A:70:94:43:A7:15:FF
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.44.0/22
                  140.99.180.0/22
                  140.99.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:72:39:dd:28:ed:39:94:a0:2f:9f:3e:7c:fe:20:f1:0b:ac:
         ef:a3:3b:13:77:95:54:07:d5:6e:82:2c:f2:a7:d3:a5:36:81:
         dc:25:50:c7:6b:98:97:5e:4b:24:ca:29:18:c3:f8:ef:01:5a:
         7c:7a:68:6e:24:81:ef:bd:9c:09:5e:8f:ba:1e:44:ae:cc:49:
         c6:c3:61:fc:16:02:c6:7b:d0:d2:11:c1:9a:86:92:51:0a:1c:
         74:38:17:aa:76:4c:3f:4a:b0:95:3c:96:78:a1:2a:47:95:ec:
         f4:cd:a8:67:5d:90:65:1d:62:40:4e:34:09:32:0d:67:ab:ce:
         99:fc:4c:83:7c:e8:a8:4f:37:e7:72:3e:df:87:1a:22:f2:f2:
         6d:35:59:71:19:44:68:f3:c7:ef:b8:86:51:56:46:0e:a1:32:
         a0:6a:8e:1e:17:57:8e:57:13:56:0c:0c:65:df:cb:5d:89:ff:
         c3:8f:92:2c:8e:20:57:5f:37:99:0f:5c:33:b9:52:d6:5e:62:
         4a:c6:11:5d:84:d8:74:c7:0c:ad:36:c6:94:19:99:f8:8f:23:
         44:90:2b:62:db:0d:cb:15:0c:02:e6:e1:25:ef:84:f6:fd:1d:
         8c:5b:53:3d:b7:e3:f2:e0:db:7b:bf:31:6b:78:5b:32:4a:4a:
         fd:e0:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:12:41 2026 by rpki-client