Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa
File:                     AS209888.roa (raw, json)
Hash identifier:          7YiqegJmg6FKEfmf1lC1hAeiTqhkt10sxGynH/4fCg4=
Subject key identifier:   2D:A8:85:39:F1:84:6D:DA:4D:50:1E:C6:C5:19:EB:1A:77:1A:00:A4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1635F587B76605D53D3DFE9EA15C3880DDDC69AB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa
Signing time:             Fri 05 Jun 2026 16:41:26 +0000
ROA not before:           Fri 05 Jun 2026 16:36:26 +0000
ROA not after:            Fri 04 Jun 2027 16:41:26 +0000
asID:                     209888
IP address blocks:        74.50.12.0/24 maxlen: 24
                          74.50.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:35:f5:87:b7:66:05:d5:3d:3d:fe:9e:a1:5c:38:80:dd:dc:69:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  5 16:36:26 2026 GMT
            Not After : Jun  4 16:41:26 2027 GMT
        Subject: CN=2DA88539F1846DDA4D501EC6C519EB1A771A00A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:06:67:1a:70:7c:3e:f4:08:fe:dc:66:ad:
                    15:cf:78:b0:85:07:0e:5d:9c:ab:10:31:d1:0c:67:
                    72:e7:82:b4:20:57:c2:74:cc:e4:30:14:79:46:44:
                    78:7b:eb:14:f3:2a:6e:e1:dc:15:10:e4:4a:a6:54:
                    ba:ca:00:f0:65:4d:64:90:05:04:12:f3:31:fb:b9:
                    a3:98:6f:df:ee:40:6c:73:a2:29:96:14:64:43:6f:
                    b8:6f:41:3e:57:dd:db:22:ed:80:7f:35:6f:bf:bd:
                    d3:c0:90:59:f8:d9:3a:69:16:16:64:ad:b5:55:82:
                    46:23:60:ee:c4:59:c6:c1:30:ca:fb:7a:30:87:6d:
                    b7:1b:af:32:f8:7b:7a:1b:c2:b7:4c:70:02:00:ab:
                    af:6b:85:0d:73:a4:8b:17:e5:91:71:4c:fd:9e:8c:
                    69:7e:1e:24:d6:a6:04:1a:30:82:68:5f:c5:8d:2b:
                    4c:92:8e:4f:7e:5b:be:6d:2a:0b:4d:f3:7b:78:98:
                    43:3f:c0:da:5d:3b:a5:82:e8:76:89:67:79:b1:d3:
                    d0:c8:67:dd:bc:3c:4a:23:d5:b1:1a:e6:d1:2d:47:
                    1f:50:bd:7a:b3:ac:67:37:81:28:1f:c6:78:0e:53:
                    27:0e:65:e6:a1:f7:82:83:f0:b0:6a:89:5c:7f:55:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A8:85:39:F1:84:6D:DA:4D:50:1E:C6:C5:19:EB:1A:77:1A:00:A4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.12.0/24
                  74.50.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:42:29:28:ee:25:70:f1:34:99:3c:2b:ce:f5:bc:ae:cf:22:
         40:9f:3b:2f:97:aa:2a:ec:77:64:de:ce:04:fd:71:0b:b7:55:
         93:e6:b3:32:98:44:ee:4b:4d:55:53:8e:96:be:24:45:98:d0:
         c2:49:30:9c:1a:f0:88:7b:69:a5:7f:55:7d:87:13:63:60:10:
         e0:6b:84:ce:7f:d4:24:99:7a:80:8b:72:7f:c2:a9:a2:48:9c:
         b2:65:eb:ca:90:48:b0:2f:27:32:ef:7f:de:d5:74:7b:3b:ef:
         d2:ea:54:96:e5:e8:b0:76:05:02:82:77:41:36:bd:80:3e:09:
         31:41:65:2d:fd:d6:3e:19:a9:de:70:9c:08:5a:a5:18:91:8d:
         6c:01:da:6d:0d:ff:87:f1:9d:9e:24:ba:7d:62:e9:2d:e5:60:
         c5:0c:48:8e:62:57:41:19:17:06:fe:b5:3a:46:ad:c8:52:bd:
         e7:97:10:80:34:63:69:62:2b:c7:62:9b:20:c7:d1:ed:c0:c0:
         de:22:ff:89:b4:a1:ea:17:a2:83:98:69:b3:b0:68:3a:4c:00:
         6b:29:ea:70:23:87:19:23:67:8f:cb:88:36:e8:62:89:fe:34:
         ef:a3:69:27:95:4f:d1:ee:30:49:7f:97:57:e8:2e:d9:27:f8:
         35:39:ff:a8
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUFjX1h7dmBdU9Pf6eoVw4gN3caaswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNjA1MTYzNjI2WhcNMjcwNjA0MTY0MTI2
WjAzMTEwLwYDVQQDEygyREE4ODUzOUYxODQ2RERBNEQ1MDFFQzZDNTE5RUIxQTc3
MUEwMEE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlMGZxpwfD70
CP7cZq0Vz3iwhQcOXZyrEDHRDGdy54K0IFfCdMzkMBR5RkR4e+sU8ypu4dwVEORK
plS6ygDwZU1kkAUEEvMx+7mjmG/f7kBsc6IplhRkQ2+4b0E+V93bIu2AfzVvv73T
wJBZ+Nk6aRYWZK21VYJGI2DuxFnGwTDK+3owh223G68y+Ht6G8K3THACAKuva4UN
c6SLF+WRcUz9noxpfh4k1qYEGjCCaF/FjStMko5Pflu+bSoLTfN7eJhDP8DaXTul
guh2iWd5sdPQyGfdvDxKI9WxGubRLUcfUL16s6xnN4EoH8Z4DlMnDmXmofeCg/Cw
aolcf1XI3QIDAQABo4IChTCCAoEwHQYDVR0OBBYEFC2ohTnxhG3aTVAexsUZ6xp3
GgCkMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIwOTg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAEoyDAMEAEoyDzANBgkqhkiG9w0B
AQsFAAOCAQEAMEIpKO4lcPE0mTwrzvW8rs8iQJ87L5eqKux3ZN7OBP1xC7dVk+az
MphE7ktNVVOOlr4kRZjQwkkwnBrwiHtppX9VfYcTY2AQ4GuEzn/UJJl6gItyf8Kp
okicsmXrypBIsC8nMu9/3tV0ezvv0upUluXosHYFAoJ3QTa9gD4JMUFlLf3WPhmp
3nCcCFqlGJGNbAHabQ3/h/GdniS6fWLpLeVgxQxIjmJXQRkXBv61OkatyFK955cQ
gDRjaWIrx2KbIMfR7cDA3iL/ibSh6heig5hps7BoOkwAaynqcCOHGSNnj8uINuhi
if4076NpJ5VP0e4wSX+XV+gu2Sf4NTn/qA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:14 2026 by rpki-client