Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS207343.roa
File:                     AS207343.roa (raw, json)
Hash identifier:          JOrH08VqMNrtOMazFSdCnGaqvLIdlA7yH8ocIYok44k=
Subject key identifier:   10:00:42:62:46:92:2E:98:D4:5C:0D:4A:6C:4C:0D:B6:3B:C0:07:F2
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       47ED29740C0B7AE21C5BCC3C628AEA0FD489E8AB
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS207343.roa
Signing time:             Thu 29 Oct 2026 17:12:33 +0000
ROA not before:           Thu 29 Oct 2026 17:07:33 +0000
ROA not after:            Thu 28 Oct 2027 17:12:33 +0000
asID:                     207343
IP address blocks:        199.235.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ed:29:74:0c:0b:7a:e2:1c:5b:cc:3c:62:8a:ea:0f:d4:89:e8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Oct 29 17:07:33 2026 GMT
            Not After : Oct 28 17:12:33 2027 GMT
        Subject: CN=1000426246922E98D45C0D4A6C4C0DB63BC007F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:94:e6:fd:2a:ed:7b:a1:77:55:81:18:2e:
                    3c:e3:e9:8a:1c:a5:f5:15:de:28:23:1b:e8:01:28:
                    bd:c2:5b:fc:f6:4b:d0:d5:9b:d1:e2:21:50:9b:61:
                    17:d4:26:d9:e0:6b:cc:b5:24:88:78:ae:d7:29:fe:
                    4a:6b:5e:2e:95:5d:d4:60:68:7f:0b:ff:9f:97:a2:
                    39:09:1e:9f:02:7a:54:12:70:36:b9:90:16:57:af:
                    a4:b8:ef:0b:5b:70:bf:88:0f:88:48:2d:14:d1:f2:
                    33:06:84:81:5c:92:c2:7d:4e:ab:a4:b9:ad:13:42:
                    b7:44:ee:dd:c0:34:48:81:d6:14:5f:ce:b8:44:b1:
                    8b:fa:b4:62:8c:fe:96:10:ea:07:f3:d2:92:5b:fc:
                    fb:4f:5b:46:48:2d:ef:32:db:13:7c:f1:6c:15:c1:
                    b1:8f:4a:93:48:bc:47:e9:eb:d6:c4:aa:75:70:fc:
                    55:91:40:bd:9c:58:dd:44:30:40:11:3a:67:2d:69:
                    f0:d8:20:eb:5c:08:35:bb:fb:10:44:3b:2d:40:79:
                    cb:45:48:6f:12:b6:a0:ca:41:ce:82:10:90:06:cd:
                    7a:fb:0c:6e:90:0a:33:02:31:cf:9c:03:3b:ef:0d:
                    17:48:fe:8e:fb:f1:3d:8f:82:13:07:25:59:5d:67:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:42:62:46:92:2E:98:D4:5C:0D:4A:6C:4C:0D:B6:3B:C0:07:F2
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS207343.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:58:4d:cf:bc:ae:32:4c:72:b8:63:5e:6d:bc:12:f7:2f:8c:
         78:8e:2a:77:2d:3d:2f:97:1c:6a:8d:ab:63:93:f5:bc:47:e6:
         c3:fb:7d:b1:2f:1a:57:24:56:c6:43:d0:08:2a:e6:ab:f7:24:
         7e:63:fa:19:cb:ff:63:cc:55:24:cf:1e:72:a8:c2:d2:96:c9:
         4d:08:76:32:12:d5:a2:b1:72:99:a3:80:d4:b7:5c:e9:42:25:
         ce:88:56:b6:f7:01:6a:a9:bc:1a:df:28:6b:7b:d8:5f:2d:6a:
         30:04:d4:3a:81:85:a1:80:c9:4c:d6:8b:7c:0c:c1:39:90:d2:
         b6:7d:8e:05:55:e4:af:76:69:6a:be:79:67:b2:a2:43:8e:41:
         29:07:0d:39:2c:4b:88:3b:11:e2:5b:54:10:93:cc:8e:44:9b:
         17:b6:f3:9a:8f:94:0b:fb:11:8c:06:36:43:10:37:03:9d:32:
         ca:53:f4:f4:b2:87:68:a5:08:3b:0a:ed:ef:9c:26:39:9f:62:
         2b:85:b1:2e:e2:c4:c2:71:ce:70:d2:21:cb:da:79:85:72:c2:
         5a:d8:20:09:33:38:a7:ef:65:d8:3a:48:25:c1:81:86:ef:66:
         9a:3c:b4:ed:c0:62:7b:e7:3c:da:f3:11:4c:70:da:6a:5b:19:
         85:97:f1:72
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUR+0pdAwLeuIcW8w8YorqD9SJ6KswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYxMDI5MTcwNzMzWhcNMjcxMDI4MTcxMjMz
WjAzMTEwLwYDVQQDEygxMDAwNDI2MjQ2OTIyRTk4RDQ1QzBENEE2QzRDMERCNjNC
QzAwN0YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqqU5v0q7Xuh
d1WBGC484+mKHKX1Fd4oIxvoASi9wlv89kvQ1ZvR4iFQm2EX1CbZ4GvMtSSIeK7X
Kf5Ka14ulV3UYGh/C/+fl6I5CR6fAnpUEnA2uZAWV6+kuO8LW3C/iA+ISC0U0fIz
BoSBXJLCfU6rpLmtE0K3RO7dwDRIgdYUX864RLGL+rRijP6WEOoH89KSW/z7T1tG
SC3vMtsTfPFsFcGxj0qTSLxH6evWxKp1cPxVkUC9nFjdRDBAETpnLWnw2CDrXAg1
u/sQRDstQHnLRUhvEragykHOghCQBs16+wxukAozAjHPnAM77w0XSP6O+/E9j4IT
ByVZXWe+qQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFBAAQmJGki6Y1FwNSmxMDbY7
wAfyMB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvYmFiNWQ1OTI4MmJiNGIyZWJmZWQ5YTdhMzAy
MzE5NTUvMC9BUzIwNzM0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMfraDANBgkqhkiG9w0BAQsFAAOC
AQEAHVhNz7yuMkxyuGNebbwS9y+MeI4qdy09L5ccao2rY5P1vEfmw/t9sS8aVyRW
xkPQCCrmq/ckfmP6Gcv/Y8xVJM8ecqjC0pbJTQh2MhLVorFymaOA1Ldc6UIlzohW
tvcBaqm8Gt8oa3vYXy1qMATUOoGFoYDJTNaLfAzBOZDStn2OBVXkr3Zpar55Z7Ki
Q45BKQcNOSxLiDsR4ltUEJPMjkSbF7bzmo+UC/sRjAY2QxA3A50yylP09LKHaKUI
Owrt75wmOZ9iK4WxLuLEwnHOcNIhy9p5hXLCWtggCTM4p+9l2DpIJcGBhu9mmjy0
7cBie+c82vMRTHDaalsZhZfxcg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:30:31 2026 by rpki-client