Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS147281.roa
File:                     AS147281.roa (raw, json)
Hash identifier:          QpdwT1A4uEzEJxMubXMEWfXCPu1dP+UV1+5XKLoq0EA=
Subject key identifier:   C3:E7:40:15:51:42:B6:12:CC:E5:2B:D4:B3:FC:19:D5:8C:3C:27:A0
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       46F8153450021DA7D5AD3989F47BECD253DF5F7D
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS147281.roa
Signing time:             Thu 12 Nov 2026 02:39:16 +0000
ROA not before:           Thu 12 Nov 2026 02:34:16 +0000
ROA not after:            Thu 11 Nov 2027 02:39:16 +0000
asID:                     147281
IP address blocks:        207.180.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 22:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f8:15:34:50:02:1d:a7:d5:ad:39:89:f4:7b:ec:d2:53:df:5f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Nov 12 02:34:16 2026 GMT
            Not After : Nov 11 02:39:16 2027 GMT
        Subject: CN=C3E740155142B612CCE52BD4B3FC19D58C3C27A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:b2:87:e6:ca:fc:99:33:0c:5b:9a:60:b5:
                    ab:86:65:4e:31:e9:6b:49:a2:9e:d4:37:ea:24:3f:
                    67:6c:70:d4:87:3d:56:0f:0d:49:42:bb:e7:e8:7f:
                    0e:e7:5e:69:06:4a:e0:e1:03:1a:cb:e0:4d:01:18:
                    1d:a7:af:3d:e4:60:26:ce:fe:49:49:02:9d:b7:3d:
                    51:ec:2e:a5:81:b3:0f:3f:60:94:41:e9:e3:8e:4c:
                    89:72:fa:92:1f:76:16:47:16:db:2d:2f:0e:e8:44:
                    1a:a2:95:8e:aa:4e:f7:b7:4d:93:40:16:c4:9b:9a:
                    22:ac:ce:67:fb:68:4a:6e:a8:09:82:f0:3e:53:30:
                    44:78:cd:fb:1b:50:4d:18:2a:00:8e:1a:2b:75:8b:
                    1d:16:96:f5:f6:5c:94:41:6e:f4:2d:de:17:71:d7:
                    f6:67:61:3a:d9:25:31:d9:b9:40:fb:4a:77:47:1f:
                    45:74:d9:17:17:b6:12:5d:58:51:bc:da:c6:c0:bf:
                    c4:61:6e:e9:4e:d7:41:62:b2:87:d1:6e:f0:83:8d:
                    f3:36:cc:1b:dc:25:90:5c:f1:30:5d:3d:8e:f1:d9:
                    29:4b:97:20:d5:6d:c1:6d:81:c1:89:70:a1:22:b6:
                    2f:4e:70:33:33:64:bb:b1:42:74:06:1b:de:b5:57:
                    78:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E7:40:15:51:42:B6:12:CC:E5:2B:D4:B3:FC:19:D5:8C:3C:27:A0
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS147281.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:27:97:df:cd:f3:ec:44:d9:fc:df:a3:e4:4f:2c:b9:e9:65:
         ed:3d:b1:7f:99:85:56:b6:f2:9e:6f:8f:56:7d:d2:48:b7:11:
         f6:ad:ab:e6:95:54:6f:c0:43:67:3e:0f:dc:36:be:a5:e2:a4:
         1c:4a:e8:a2:ec:ff:c1:0f:ae:3a:36:2e:9a:41:6e:92:71:09:
         43:9c:4b:da:21:a2:59:34:d4:77:76:d9:79:26:14:7a:3b:6a:
         4f:62:7f:91:e7:16:9b:a4:86:dc:f3:d0:e3:48:79:95:8a:44:
         ea:8f:c9:6d:1f:35:b2:fd:15:14:c0:8b:25:5f:0f:e6:c1:3e:
         66:17:f1:7b:d6:a9:31:2c:a0:8b:4d:07:40:d4:54:f2:9d:0a:
         c2:fe:09:03:a9:a4:bd:36:64:f2:cd:d9:ea:87:3d:e9:68:af:
         e0:e5:af:bc:05:59:a0:2f:df:22:df:0a:13:74:14:51:1a:48:
         8b:0f:b9:59:6d:ff:e6:a6:c0:15:b2:68:29:2c:e7:f9:01:7e:
         ce:3c:62:19:37:d7:61:c5:f3:ac:38:e4:30:af:87:bb:c4:5e:
         49:c6:7c:88:4b:6c:30:48:91:2e:e7:81:bc:35:62:98:0f:17:
         01:87:be:f3:f3:01:74:e6:05:f2:9a:a9:12:42:cf:6a:b1:46:
         fa:21:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:40:15 2026 by rpki-client