Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa
File:                     AS209888.roa (raw, json)
Hash identifier:          NFgz+xe1+qfvOtl6RBAWVY/Wb+qiHNShJw/TQqCEr3I=
Subject key identifier:   F9:A1:B5:FD:28:A9:22:A9:CE:A8:18:DA:C4:6D:D4:92:11:F3:EE:9F
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       43671FEE8EB18399BD82B6F56D65CBD90E303036
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa
Signing time:             Sat 06 Jun 2026 08:58:04 +0000
ROA not before:           Sat 06 Jun 2026 08:53:04 +0000
ROA not after:            Sat 05 Jun 2027 08:58:04 +0000
asID:                     209888
IP address blocks:        40.27.132.0/24 maxlen: 24
                          40.27.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:67:1f:ee:8e:b1:83:99:bd:82:b6:f5:6d:65:cb:d9:0e:30:30:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun  6 08:53:04 2026 GMT
            Not After : Jun  5 08:58:04 2027 GMT
        Subject: CN=F9A1B5FD28A922A9CEA818DAC46DD49211F3EE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:c8:b1:bf:ef:0d:34:e9:3d:98:b6:43:64:
                    06:c6:a2:da:80:f9:4e:7d:44:59:c4:9c:27:50:5f:
                    52:79:c5:0c:e9:f4:a2:d7:74:aa:e8:df:32:28:75:
                    d6:5d:1a:f4:f5:0c:32:e8:32:fe:9e:81:63:0b:72:
                    c9:c1:99:54:1f:a5:ce:39:ab:36:ec:12:64:4a:5f:
                    e2:f9:e2:f4:95:17:39:7a:e1:19:09:02:75:b5:02:
                    8c:b4:f9:57:49:75:1a:29:ad:50:39:6a:be:98:b3:
                    72:dd:ef:08:14:eb:5b:3b:b0:1e:a4:52:8a:c3:18:
                    63:af:e3:cd:fd:cf:a5:8f:13:02:e1:bc:6b:c4:ab:
                    c8:35:16:7a:bd:f0:e2:bb:38:31:c1:0d:4d:7e:1e:
                    30:2b:53:80:fe:b6:f4:fb:f3:d6:32:45:f1:46:e8:
                    e7:35:a3:a1:10:fc:b1:c5:9a:ac:27:52:20:8b:c4:
                    77:d6:4e:3e:67:77:be:ae:10:7d:bd:34:1c:40:f9:
                    5d:d1:39:39:0b:31:2b:75:e6:ed:e0:22:9c:10:aa:
                    07:61:1f:97:02:9c:c6:6a:25:45:81:71:25:fa:4c:
                    68:ab:58:bd:0f:00:9f:22:4a:41:58:34:2f:14:3b:
                    d4:e3:3d:06:84:5c:b8:2d:b3:a7:77:51:73:0e:d0:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:B5:FD:28:A9:22:A9:CE:A8:18:DA:C4:6D:D4:92:11:F3:EE:9F
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.132.0/24
                  40.27.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:55:f5:35:31:f9:d9:03:ae:c8:7d:ed:df:d5:60:b4:15:e2:
         4c:57:02:b3:1c:31:9b:06:f9:a4:0d:d3:ba:df:d5:9d:d8:1e:
         d6:12:73:ff:f4:90:8d:d2:c3:fa:35:60:f3:79:bd:6a:4a:15:
         72:64:40:49:e2:79:f7:10:6f:4e:8d:47:e0:d7:bb:55:5a:a0:
         2d:bd:41:a5:8f:f3:63:31:b5:eb:b6:fe:d3:49:c5:e1:06:11:
         97:1e:9b:ae:06:d8:6b:5c:49:27:6b:7c:6a:2e:5e:7c:5a:0d:
         cc:28:dd:38:a9:2d:9c:44:33:91:8f:6d:51:05:e6:14:da:12:
         e9:e5:3e:ed:c6:3f:96:d9:d3:b1:22:74:1c:96:c2:73:0d:df:
         e1:b0:dd:81:98:04:c1:a2:7d:11:ac:22:34:07:ca:b1:30:7a:
         b0:a4:31:15:0f:a0:b8:84:58:99:f0:19:74:08:50:0f:0c:ff:
         50:81:b3:6f:54:6e:9a:37:e1:20:f3:c8:f5:4e:f8:39:06:fa:
         12:3b:1e:dc:ec:2f:7d:a2:4f:8f:84:1e:cf:36:ea:43:86:df:
         b2:cf:fd:6a:b1:2a:1e:b2:46:91:6b:4d:c6:8f:05:2c:4b:53:
         d6:74:7f:a6:b0:86:cd:7c:2d:8b:e9:53:e3:ae:eb:bb:f0:ad:
         65:79:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:01 2026 by rpki-client