Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS215607.roa
File:                     AS215607.roa (raw, json)
Hash identifier:          rtiRmfTlxfi/J7QJql8s4m7Tg1x2ciqV+NaPjgv7a28=
Subject key identifier:   25:51:11:C5:5B:FB:B0:89:85:28:A0:55:B2:0C:D9:F8:73:77:D5:90
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       1731872C6C7C7F2A859C1B5129D6D18A5F28CBE5
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS215607.roa
Signing time:             Tue 09 Jun 2026 11:27:47 +0000
ROA not before:           Tue 09 Jun 2026 11:22:47 +0000
ROA not after:            Tue 08 Jun 2027 11:27:47 +0000
asID:                     215607
IP address blocks:        207.180.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:31:87:2c:6c:7c:7f:2a:85:9c:1b:51:29:d6:d1:8a:5f:28:cb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jun  9 11:22:47 2026 GMT
            Not After : Jun  8 11:27:47 2027 GMT
        Subject: CN=255111C55BFBB0898528A055B20CD9F87377D590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:94:e3:1e:f7:3b:e6:2b:e9:11:80:06:41:
                    5e:a0:32:e7:22:7d:f7:bc:35:45:d1:f0:27:89:b4:
                    b3:54:70:bc:62:8b:f9:03:9d:28:30:2b:1f:3d:98:
                    34:1f:d0:86:20:1d:54:b8:08:03:a6:0b:aa:f8:3e:
                    03:01:de:4c:bf:37:6f:64:ed:7d:3f:61:b5:0d:50:
                    b0:0d:b6:13:9d:f9:e0:28:1c:8b:a0:1f:8e:af:50:
                    12:95:48:5b:0b:4f:78:77:b0:78:27:53:08:1d:dd:
                    da:58:d9:50:0c:a2:b7:20:60:3b:e3:c3:a7:03:c7:
                    3e:67:79:a2:04:af:58:47:ac:5b:58:f1:42:85:02:
                    90:7c:0d:33:5c:e8:84:97:64:55:1e:18:b7:25:0a:
                    66:7a:b3:bb:14:b7:8c:a0:27:23:f6:5b:5d:93:05:
                    30:2c:88:70:bd:84:4d:ef:fd:6b:f8:dd:19:33:4a:
                    5c:8b:02:98:35:0d:5c:44:85:46:d4:41:dc:41:0d:
                    9c:da:02:4e:33:ee:fe:a4:94:8c:51:5c:66:36:b3:
                    c3:89:58:f8:7d:e4:95:ca:90:e8:8b:a0:fe:d7:e3:
                    b4:a0:bb:a2:84:50:2d:0c:45:54:a4:4d:75:e6:a9:
                    92:6c:16:27:b7:4c:75:68:d8:ac:aa:c9:1a:a8:7c:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:11:C5:5B:FB:B0:89:85:28:A0:55:B2:0C:D9:F8:73:77:D5:90
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS215607.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:16:8d:01:69:8f:08:77:42:ea:2c:b2:5a:23:e7:60:0b:17:
         69:f4:3b:25:b8:47:df:db:45:8b:6e:c5:f3:9c:56:2d:6a:d3:
         92:05:57:cb:30:c5:22:ef:33:af:97:8d:d0:e0:97:10:cc:12:
         01:ba:d0:df:09:da:7d:11:3c:b9:87:21:ac:59:90:d0:c6:76:
         6d:ad:b2:b3:33:4e:8f:d1:dd:47:3f:f8:b9:d8:27:96:56:17:
         48:cc:bd:57:8b:c2:dc:1f:60:d9:6e:42:42:60:a8:d2:38:c6:
         75:2e:63:4e:a5:70:9d:b0:a5:e1:7e:3d:d0:f2:07:0d:ee:17:
         a1:31:58:cf:28:16:0d:f4:7c:6b:0e:1d:f2:9a:e8:e2:f6:08:
         ab:69:68:72:23:09:20:f9:a3:68:2f:5a:ca:66:95:41:81:56:
         7d:b5:78:ca:9b:d5:cc:43:f8:54:02:38:6d:06:90:65:2c:d2:
         b0:b5:bf:5f:b5:e6:d4:dc:25:74:bb:f7:35:48:62:9a:54:b4:
         58:ac:e2:f8:b3:48:e9:b1:e8:3f:65:e2:56:ed:3b:88:43:26:
         c0:62:56:2f:c9:97:5a:da:b2:0a:45:30:52:94:d3:60:4e:c0:
         55:f8:df:67:42:96:72:b2:ef:c9:69:8a:80:6e:89:b5:22:0f:
         de:ce:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:43 2026 by rpki-client