Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402215.roa
File:                     AS402215.roa (raw, json)
Hash identifier:          GuNmooRVBBu+StZlV7yzHYO+RH7VwD4ECimo5s+AIRo=
Subject key identifier:   A2:EF:41:30:85:60:34:1E:2A:AB:90:49:57:6E:C4:C1:7B:BA:56:F3
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       41A9A04DAFDB87B82D789ACE3308D4EF174E8996
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402215.roa
Signing time:             Tue 21 Jul 2026 06:46:44 +0000
ROA not before:           Tue 21 Jul 2026 06:41:44 +0000
ROA not after:            Tue 20 Jul 2027 06:46:44 +0000
asID:                     402215
IP address blocks:        207.180.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a9:a0:4d:af:db:87:b8:2d:78:9a:ce:33:08:d4:ef:17:4e:89:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jul 21 06:41:44 2026 GMT
            Not After : Jul 20 06:46:44 2027 GMT
        Subject: CN=A2EF41308560341E2AAB9049576EC4C17BBA56F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:b9:3d:77:85:55:2b:8d:65:ab:60:4a:1e:
                    13:f1:fb:d8:e3:0c:ec:78:f5:1f:6b:3a:ee:ce:63:
                    a2:3e:51:d7:e5:04:c2:4f:4b:93:d4:62:33:75:45:
                    9d:2a:15:ae:3c:9a:8f:3c:86:d6:cc:89:ce:b7:fc:
                    26:75:13:59:cd:07:73:c0:81:c0:f1:14:ff:db:85:
                    d9:34:f4:8c:ba:bc:3d:d2:6a:f8:ee:34:7c:86:fe:
                    15:7b:f3:fc:56:8f:fc:85:64:4a:82:27:d0:27:59:
                    ec:3f:74:2e:ff:05:5d:a6:96:79:1f:b8:4d:fa:2a:
                    e3:2c:09:d4:ab:5f:a2:5b:c8:f3:c4:62:51:a7:bb:
                    35:e7:49:3a:72:49:2e:44:dd:f7:a8:33:92:a6:3b:
                    62:55:b0:fa:f8:0d:0e:e0:dc:b8:17:87:c5:58:d8:
                    af:30:b5:62:6b:46:c2:35:63:06:59:b6:b8:de:7e:
                    41:3a:4b:52:b3:6e:1b:7c:a4:a4:c7:5e:69:bb:4d:
                    62:7e:aa:6e:f6:30:5c:aa:85:a8:88:0d:40:a2:29:
                    99:68:7a:8c:25:15:ae:97:53:8e:15:ec:bf:8b:80:
                    11:4a:0c:4b:ee:72:a4:4c:7b:b7:6f:f7:47:fd:74:
                    c2:e1:78:a0:65:62:5f:28:70:57:66:50:8b:10:be:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EF:41:30:85:60:34:1E:2A:AB:90:49:57:6E:C4:C1:7B:BA:56:F3
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402215.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:66:92:60:35:1a:b2:21:ce:3b:c7:08:44:3f:96:e2:b4:
         ea:0d:c5:65:32:e9:cb:7e:1d:24:3f:10:6e:aa:c2:cd:6f:5d:
         a1:ac:11:f1:ef:49:6f:02:ef:7f:e8:f2:c1:aa:a8:3b:3d:42:
         ef:d9:10:c7:d5:b0:78:c8:cb:43:8d:26:ab:1a:d2:61:9c:89:
         1b:60:c4:da:28:6b:6d:1c:ef:b4:d5:e4:78:f1:d7:71:4e:f3:
         ed:fa:a1:62:57:60:41:af:86:6d:01:5e:17:f2:32:80:22:73:
         6f:6a:a5:df:24:fb:e5:1d:92:ce:1f:bd:dd:05:7b:c2:e0:3a:
         8e:b7:5c:b7:c9:92:c0:f8:96:9d:c9:59:19:94:00:a3:73:d1:
         af:c9:b9:ba:84:a4:14:a3:e0:e0:94:a2:1f:ad:16:ba:23:35:
         8d:a8:4f:13:07:d5:e0:c5:2f:92:a3:4d:a0:26:00:14:99:67:
         f0:3c:22:2f:7b:e8:9c:50:f5:21:07:33:2a:ba:85:17:f0:c6:
         b8:ac:7b:80:40:84:5e:67:cd:fe:4a:b1:82:c9:78:2d:df:2b:
         12:c7:a9:48:d1:a4:c0:f6:9d:2c:a5:1a:64:fe:d2:2d:99:48:
         a9:18:45:2c:89:e1:26:ad:d6:b8:39:16:58:c1:fc:a7:d5:a5:
         94:6c:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:35 2026 by rpki-client