Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207419.roa
File:                     AS207419.roa (raw, json)
Hash identifier:          RSGwVWfGOGLeuE98Ydi/7y/douTwkTpOFhzTpzQTybQ=
Subject key identifier:   58:F1:6C:81:CA:B6:2D:90:19:DD:AD:76:75:5B:0A:9D:4D:BF:13:4C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       20E20A993AA8AB87939867CAA0CD3D749DFCDC8D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207419.roa
Signing time:             Fri 14 Aug 2026 13:36:20 +0000
ROA not before:           Fri 14 Aug 2026 13:31:20 +0000
ROA not after:            Fri 13 Aug 2027 13:36:20 +0000
asID:                     207419
IP address blocks:        209.200.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e2:0a:99:3a:a8:ab:87:93:98:67:ca:a0:cd:3d:74:9d:fc:dc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 14 13:31:20 2026 GMT
            Not After : Aug 13 13:36:20 2027 GMT
        Subject: CN=58F16C81CAB62D9019DDAD76755B0A9D4DBF134C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:36:5d:1d:1c:fa:48:1c:b8:80:42:bd:27:
                    80:9a:e5:2d:60:9b:02:ad:31:59:ad:9b:a6:b6:97:
                    a6:3b:5f:55:3a:7d:6a:88:0e:80:43:25:cc:c1:d5:
                    5e:46:44:2c:55:ba:5d:f4:ac:5a:fd:74:6e:f8:72:
                    c0:86:c6:c8:10:83:c5:b4:dd:a9:07:d1:35:5c:72:
                    aa:65:34:0a:eb:a3:22:92:29:7c:27:85:ff:19:cc:
                    b6:9a:53:bc:91:26:31:fe:1c:b4:ea:dd:d9:ed:af:
                    16:70:88:d6:22:31:ba:ee:4e:85:99:4d:3b:99:35:
                    94:f6:1d:8f:0e:74:4e:8b:3c:f9:68:f3:8f:16:11:
                    96:21:18:23:bf:70:cc:e8:1d:48:63:8a:4e:1b:d6:
                    ba:dc:fa:64:ad:13:e8:1e:8e:9e:46:8a:22:b5:46:
                    49:92:16:f6:7f:f6:1f:b4:d1:8f:70:1a:5e:3d:ac:
                    8f:0e:b5:ba:d9:2e:fd:a7:b3:99:d2:9d:1f:85:91:
                    0d:99:b1:9c:10:f4:87:e7:e8:d1:4d:3b:cf:f5:2b:
                    c7:a9:52:b8:99:f9:ea:7d:93:97:95:14:c6:b2:12:
                    45:ee:a9:eb:13:74:25:30:d0:d5:2b:ce:5b:5d:f4:
                    f9:d8:60:18:0b:99:ad:87:32:45:3e:c7:ce:e2:2c:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:6C:81:CA:B6:2D:90:19:DD:AD:76:75:5B:0A:9D:4D:BF:13:4C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207419.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:60:6b:7a:f6:bd:04:bf:17:14:c9:f3:e9:fb:ff:41:bb:82:
         1d:c7:5d:d3:06:51:ef:38:e3:6b:cb:10:a6:88:44:e9:5a:3e:
         7f:b8:cd:8a:45:0c:5a:8e:54:c1:f1:f9:00:6b:64:b4:7b:ae:
         9c:72:20:61:be:12:d2:5e:ea:7a:2e:ef:f6:40:28:11:07:11:
         00:6a:10:1b:12:55:4d:f5:87:1b:a1:b1:d4:57:be:16:91:b5:
         a4:82:51:d2:9c:ac:a6:00:69:38:27:db:37:c4:47:36:6e:f1:
         4b:cb:8a:e3:c7:04:0d:54:a2:aa:21:fb:0e:7c:59:9a:d2:11:
         e9:8a:20:aa:2b:86:4b:a1:50:fe:81:46:15:78:82:58:5a:99:
         18:8e:77:40:29:de:b8:3d:73:8c:93:38:9a:a5:ea:23:59:91:
         4f:71:6b:48:d0:f9:eb:8d:5b:6e:39:8a:59:aa:c6:60:e2:f7:
         7c:25:0c:b1:2e:a4:c2:1b:06:50:1b:c7:0f:4c:c4:5f:4c:72:
         c5:06:60:6b:90:7e:56:b4:ff:93:28:1e:c9:d8:94:f6:60:fd:
         f0:2a:27:b0:22:cc:12:66:5e:ef:79:85:2b:11:15:15:e9:9e:
         ef:a1:0f:8f:6e:94:a8:50:41:a5:e2:6e:df:7a:5b:be:80:0f:
         45:db:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:19:54 2026 by rpki-client