Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS200105.roa
File:                     AS200105.roa (raw, json)
Hash identifier:          gwbnFm9CzVgbeVaqKvnWyjFtMw4NpVSPAPUrFun3CCg=
Subject key identifier:   25:36:1F:2F:7C:3E:8D:10:03:16:47:3B:AE:61:E0:BF:A9:E0:6A:09
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       23DBF207D57195F1E8E7EB97C5F2DAB4E1915F21
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS200105.roa
Signing time:             Tue 15 Sep 2026 03:15:12 +0000
ROA not before:           Tue 15 Sep 2026 03:10:12 +0000
ROA not after:            Tue 14 Sep 2027 03:15:12 +0000
asID:                     200105
IP address blocks:        207.180.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:db:f2:07:d5:71:95:f1:e8:e7:eb:97:c5:f2:da:b4:e1:91:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Sep 15 03:10:12 2026 GMT
            Not After : Sep 14 03:15:12 2027 GMT
        Subject: CN=25361F2F7C3E8D100316473BAE61E0BFA9E06A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3c:e9:f7:fe:6d:7a:c3:d3:4e:17:5d:bc:a3:
                    0f:8e:31:c0:7b:43:ea:b6:5e:af:b8:c7:b0:c0:9f:
                    22:13:10:39:9d:d6:af:07:1a:7a:c3:85:7c:7a:00:
                    38:0b:a6:4c:91:2b:25:8f:15:5c:a6:d1:3c:08:cc:
                    98:72:10:9e:78:80:37:64:82:c3:61:7e:3a:19:05:
                    81:f1:94:79:cd:19:a1:fe:71:60:ed:c3:cc:34:db:
                    22:92:5a:b3:5e:fb:1e:97:0f:5c:a8:db:6d:c2:a8:
                    72:72:d3:5f:ef:33:ac:b1:91:54:68:49:d5:ea:b7:
                    4f:6d:3b:7e:82:eb:33:60:16:ba:3c:5b:54:4a:69:
                    0e:75:92:07:65:d4:a0:2e:b2:16:dc:ff:e6:78:d3:
                    f9:2e:b6:65:4a:57:b5:52:07:22:d0:a9:de:40:89:
                    55:f2:25:56:42:e7:03:96:ac:36:8c:9b:e1:5b:10:
                    82:56:d5:0a:27:43:a5:13:b7:97:2b:04:f8:5a:37:
                    c3:7e:e0:0b:5f:60:cd:cf:e0:c4:b5:81:c2:0a:93:
                    13:5f:76:c0:c4:31:6c:55:fd:e9:f9:bf:4b:e7:dc:
                    17:a4:55:a5:4e:45:fa:39:b1:e8:18:b8:7c:d3:bf:
                    c9:12:f9:0c:e0:8a:06:56:74:2d:d5:f6:27:d4:2e:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:36:1F:2F:7C:3E:8D:10:03:16:47:3B:AE:61:E0:BF:A9:E0:6A:09
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS200105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:2e:05:7c:ec:96:88:f1:6a:57:04:e0:2b:7f:4d:67:d6:32:
         a2:4c:32:ee:f9:5c:51:f5:83:d3:10:bf:18:b3:b8:67:5c:6e:
         a6:f5:f1:5a:8c:1c:b5:35:63:cb:b1:9d:42:06:6d:62:bc:b4:
         16:e3:45:c7:c7:88:b6:c8:8a:57:79:0b:e2:cf:34:c2:bd:2f:
         87:06:88:e7:98:1e:f9:08:b9:40:a5:1b:3e:e5:1c:75:16:4c:
         4a:7e:05:bb:e5:cf:53:fb:40:88:d1:e3:e0:06:c2:d1:21:27:
         3c:5b:4e:78:d4:18:e9:2c:4e:74:a7:91:8b:77:a0:de:e8:8b:
         67:bc:b2:42:a3:3c:90:e5:fa:f0:d4:12:5b:c2:d7:31:35:50:
         eb:41:de:60:6b:c4:4f:1b:be:4c:d0:08:d2:5e:8a:2f:8d:4b:
         53:32:1b:ce:1d:e4:70:05:4b:09:49:ff:cc:d1:43:1a:cf:d1:
         99:d5:8d:9e:a8:43:fe:7f:db:10:4b:6a:bc:b8:92:1c:43:72:
         9f:48:7a:5a:bb:59:3c:8f:67:37:25:fd:c7:36:92:11:08:af:
         89:de:cf:5d:6b:25:47:7a:d8:a0:13:87:5d:cc:4c:d3:74:11:
         8f:07:7e:52:48:b1:db:a8:51:28:16:f8:ca:8d:90:c0:13:ef:
         79:63:5d:99
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUI9vyB9VxlfHo5+uXxfLatOGRXyEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwOTE1MDMxMDEyWhcNMjcwOTE0MDMxNTEy
WjAzMTEwLwYDVQQDEygyNTM2MUYyRjdDM0U4RDEwMDMxNjQ3M0JBRTYxRTBCRkE5
RTA2QTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jzp9/5tesPT
ThddvKMPjjHAe0Pqtl6vuMewwJ8iExA5ndavBxp6w4V8egA4C6ZMkSsljxVcptE8
CMyYchCeeIA3ZILDYX46GQWB8ZR5zRmh/nFg7cPMNNsiklqzXvselw9cqNttwqhy
ctNf7zOssZFUaEnV6rdPbTt+guszYBa6PFtUSmkOdZIHZdSgLrIW3P/meNP5LrZl
Sle1Ugci0KneQIlV8iVWQucDlqw2jJvhWxCCVtUKJ0OlE7eXKwT4WjfDfuALX2DN
z+DEtYHCCpMTX3bAxDFsVf3p+b9L59wXpFWlTkX6ObHoGLh807/JEvkM4IoGVnQt
1fYn1C5uLQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCU2Hy98Po0QAxZHO65h4L+p
4GoJMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzIwMDEwNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM+0KjANBgkqhkiG9w0BAQsFAAOC
AQEAHS4FfOyWiPFqVwTgK39NZ9Yyokwy7vlcUfWD0xC/GLO4Z1xupvXxWowctTVj
y7GdQgZtYry0FuNFx8eItsiKV3kL4s80wr0vhwaI55ge+Qi5QKUbPuUcdRZMSn4F
u+XPU/tAiNHj4AbC0SEnPFtOeNQY6SxOdKeRi3eg3uiLZ7yyQqM8kOX68NQSW8LX
MTVQ60HeYGvETxu+TNAI0l6KL41LUzIbzh3kcAVLCUn/zNFDGs/RmdWNnqhD/n/b
EEtqvLiSHENyn0h6WrtZPI9nNyX9xzaSEQivid7PXWslR3rYoBOHXcxM03QRjwd+
Ukix26hRKBb4yo2QwBPveWNdmQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:44:12 2026 by rpki-client