Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS215607.roa
File:                     AS215607.roa (raw, json)
Hash identifier:          UMX083lNsJWpKpcHfgSjvQ8hA9DOr9YmOGg/LHvV1bg=
Subject key identifier:   63:67:DD:34:5C:FB:D9:72:26:4C:81:55:90:FC:7F:7C:83:11:A6:6C
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       6ADB8F60B4F4B3E6D5E07A514AB8135C2A5FA2C0
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS215607.roa
Signing time:             Thu 08 Oct 2026 00:07:23 +0000
ROA not before:           Thu 08 Oct 2026 00:02:23 +0000
ROA not after:            Thu 07 Oct 2027 00:07:23 +0000
asID:                     215607
IP address blocks:        207.180.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 11:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:db:8f:60:b4:f4:b3:e6:d5:e0:7a:51:4a:b8:13:5c:2a:5f:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Oct  8 00:02:23 2026 GMT
            Not After : Oct  7 00:07:23 2027 GMT
        Subject: CN=6367DD345CFBD972264C815590FC7F7C8311A66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:e3:f6:fa:dd:86:8f:15:a7:30:95:de:8e:
                    28:44:78:02:30:c5:bf:a7:84:a9:9e:60:8a:e4:a6:
                    3b:42:f3:e9:09:cd:11:84:6c:e7:17:2a:c2:ee:88:
                    d1:12:1c:4f:20:cc:84:71:25:67:7e:99:1d:f6:12:
                    90:25:ef:3c:49:22:d9:8a:ab:8d:09:86:47:46:48:
                    f0:b7:37:30:ca:6b:ee:51:d5:0e:c2:da:2b:09:6a:
                    da:00:54:70:69:d7:ae:b2:f2:a8:e3:dd:34:05:86:
                    04:f3:62:de:53:52:a0:cd:8c:43:9b:c1:d2:1b:1b:
                    cc:58:7e:84:8f:20:71:b4:d0:d4:65:64:25:85:1c:
                    7d:3f:df:da:26:65:c3:97:2d:e6:5e:32:ff:45:02:
                    1e:99:a0:04:7c:07:0e:7e:a5:0b:2f:1c:9d:13:fa:
                    30:51:1d:ad:76:d9:9b:90:67:78:8d:02:88:a8:fa:
                    8d:86:91:48:89:b6:a6:52:82:9f:a6:0c:e9:cf:c5:
                    1b:c8:49:8e:70:03:0d:30:0f:a8:1c:21:10:d0:c8:
                    35:07:4f:ce:02:61:b3:78:41:b1:68:6e:d4:bb:1a:
                    26:ee:a3:81:c8:97:f3:49:d6:31:7c:47:7a:76:af:
                    96:92:18:f0:47:4a:aa:2e:72:ae:f1:5b:d5:3a:2e:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:67:DD:34:5C:FB:D9:72:26:4C:81:55:90:FC:7F:7C:83:11:A6:6C
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS215607.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:5a:7f:a3:2b:26:0e:a4:8d:f6:b4:60:b0:1e:c6:e6:ec:6b:
         f9:ca:78:83:e4:4d:6b:fa:38:61:e0:5c:53:e0:d7:7a:42:49:
         0d:76:a1:38:38:de:04:cd:30:36:69:c6:61:0b:f3:6a:1e:c9:
         e0:80:d9:a5:ce:21:31:5d:0a:04:b1:6f:0e:9e:5e:02:38:22:
         3b:7f:df:17:12:70:6c:d3:45:f7:fb:67:f2:79:7e:94:ac:7f:
         70:69:11:e4:a7:f8:95:ca:de:3b:58:e4:10:49:a4:02:5c:6d:
         89:43:86:3b:b9:83:6e:0d:f5:e6:8a:a8:8c:87:df:fa:e7:aa:
         3e:23:f5:48:cb:74:c5:fe:ea:ea:77:51:b2:b1:d0:d2:92:9a:
         5a:84:c5:a7:ff:26:a8:84:17:b9:4a:a0:70:25:87:b3:99:22:
         47:64:6b:ac:59:76:df:bb:ba:67:c6:de:17:36:69:c7:a7:f5:
         c6:b2:c1:70:e3:77:fe:bd:59:b5:e9:5d:e4:9c:19:69:c3:9f:
         fe:76:b5:f1:2d:e1:95:f3:a2:1d:b5:c0:1b:50:00:61:44:ea:
         9c:48:1b:19:22:c3:fd:5a:83:bb:0f:56:02:62:6d:6c:c2:35:
         93:53:ec:b8:22:60:2d:a6:44:1e:1c:5d:0e:86:cb:94:4e:69:
         36:ab:b8:f6
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUatuPYLT0s+bV4HpRSrgTXCpfosAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYxMDA4MDAwMjIzWhcNMjcxMDA3MDAwNzIz
WjAzMTEwLwYDVQQDEyg2MzY3REQzNDVDRkJEOTcyMjY0QzgxNTU5MEZDN0Y3Qzgz
MTFBNjZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqvj9vrdho8V
pzCV3o4oRHgCMMW/p4SpnmCK5KY7QvPpCc0RhGznFyrC7ojREhxPIMyEcSVnfpkd
9hKQJe88SSLZiquNCYZHRkjwtzcwymvuUdUOwtorCWraAFRwadeusvKo4900BYYE
82LeU1KgzYxDm8HSGxvMWH6EjyBxtNDUZWQlhRx9P9/aJmXDly3mXjL/RQIemaAE
fAcOfqULLxydE/owUR2tdtmbkGd4jQKIqPqNhpFIibamUoKfpgzpz8UbyEmOcAMN
MA+oHCEQ0Mg1B0/OAmGzeEGxaG7Uuxom7qOByJfzSdYxfEd6dq+WkhjwR0qqLnKu
8VvVOi6HzwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGNn3TRc+9lyJkyBVZD8f3yD
EaZsMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzIxNTYwNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM+0MDANBgkqhkiG9w0BAQsFAAOC
AQEAV1p/oysmDqSN9rRgsB7G5uxr+cp4g+RNa/o4YeBcU+DXekJJDXahODjeBM0w
NmnGYQvzah7J4IDZpc4hMV0KBLFvDp5eAjgiO3/fFxJwbNNF9/tn8nl+lKx/cGkR
5Kf4lcreO1jkEEmkAlxtiUOGO7mDbg315oqojIff+ueqPiP1SMt0xf7q6ndRsrHQ
0pKaWoTFp/8mqIQXuUqgcCWHs5kiR2RrrFl237u6Z8beFzZpx6f1xrLBcON3/r1Z
teld5JwZacOf/na18S3hlfOiHbXAG1AAYUTqnEgbGSLD/VqDuw9WAmJtbMI1k1Ps
uCJgLaZEHhxdDobLlE5pNqu49g==
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:15:17 2026 by rpki-client