Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402215.roa
File:                     AS402215.roa (raw, json)
Hash identifier:          JGVldBNYh0WlSdM0H2f4p+BisBW4dQm+3eao1Kf2Rfo=
Subject key identifier:   47:C3:C7:8B:32:2C:71:7B:6E:D2:DE:DB:5D:E1:6B:1B:48:87:CE:A6
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0E8D754A46EC6E0573F09398345FA326AABD47A4
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402215.roa
Signing time:             Fri 08 May 2026 13:02:06 +0000
ROA not before:           Fri 08 May 2026 12:57:06 +0000
ROA not after:            Fri 07 May 2027 13:02:06 +0000
asID:                     402215
IP address blocks:        207.180.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 11:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8d:75:4a:46:ec:6e:05:73:f0:93:98:34:5f:a3:26:aa:bd:47:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  8 12:57:06 2026 GMT
            Not After : May  7 13:02:06 2027 GMT
        Subject: CN=47C3C78B322C717B6ED2DEDB5DE16B1B4887CEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:cc:48:bd:1c:9b:a6:43:79:d9:a5:00:6a:
                    97:9d:f3:37:f0:bb:38:7d:66:35:07:4c:98:f8:c2:
                    d1:39:39:6e:34:b4:69:44:6f:11:f3:c6:8b:60:81:
                    c6:11:29:fe:0c:78:97:1a:14:ca:23:8f:77:30:7d:
                    b4:34:b3:88:40:b3:c4:de:56:8d:ac:83:5b:ac:44:
                    b6:a8:0f:ec:1f:d6:e3:28:ef:40:cf:ab:65:09:21:
                    9e:3a:df:4c:ce:bc:05:2a:60:9a:50:f6:ae:b3:60:
                    1e:91:b3:7b:b7:ce:7c:36:49:4f:af:69:9e:3b:77:
                    f9:b9:0c:70:1e:28:b1:21:f3:6c:4d:87:7f:48:41:
                    71:ff:4f:ff:c9:c3:30:de:44:ba:c6:3d:61:bd:fa:
                    0e:06:78:52:5d:bb:37:e0:f6:a9:be:7b:f6:15:d7:
                    f3:86:57:93:a0:cd:71:b1:cc:a3:b9:3f:54:81:3c:
                    c2:0b:1d:f0:f5:59:e0:e6:38:70:5c:6e:e3:73:a4:
                    83:36:1e:0a:e8:53:06:06:9b:fa:8c:83:63:f3:93:
                    7b:97:55:e6:a3:f7:71:82:d9:85:41:cd:3d:3f:5b:
                    47:5f:43:44:75:4e:43:cf:3f:0d:31:50:a7:5d:1d:
                    1f:41:82:ed:1e:ca:3b:23:43:c1:6e:ce:7a:c6:d9:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C3:C7:8B:32:2C:71:7B:6E:D2:DE:DB:5D:E1:6B:1B:48:87:CE:A6
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402215.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:fc:47:9c:3e:7b:06:84:9b:2f:2a:87:26:52:6d:08:19:e0:
         7d:1c:c8:4e:f9:09:ec:fe:a7:6b:12:fd:63:de:7a:27:4e:31:
         3f:5e:6a:51:f3:f8:67:03:55:ad:33:f3:fa:27:aa:5e:59:86:
         01:97:cb:18:a2:37:0f:97:19:7b:0e:72:21:2d:bc:22:9e:16:
         0a:37:d3:8e:12:6e:73:71:a1:fc:79:c9:67:ec:21:4d:b9:2d:
         f5:ba:53:f6:f3:5c:13:bc:2f:77:fb:e9:ae:4b:ad:07:24:a2:
         17:47:ea:88:29:0c:78:ec:3b:64:de:fb:7e:6d:1e:e2:98:2e:
         9c:34:8a:3f:ec:78:61:01:eb:f1:e9:f4:76:83:d5:69:c9:a1:
         a7:5d:a7:2c:8c:e2:e3:ec:a8:dc:07:0e:7d:d6:a7:45:34:c8:
         71:35:1a:38:6a:53:04:11:69:a6:a2:ef:12:c8:27:f6:d8:32:
         c7:21:3a:60:3b:89:47:5d:00:53:e6:49:1c:2b:c1:39:19:8f:
         f3:58:48:6b:1a:3c:8d:0c:54:64:be:33:89:9b:bd:97:25:2d:
         b8:a4:1d:96:f8:fa:b2:c7:55:27:df:71:16:ee:8f:08:e3:56:
         e8:b6:5e:bf:0f:63:65:22:d9:a7:10:74:ac:66:17:6e:8d:29:
         0b:59:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:59 2026 by rpki-client