Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219427.roa
File:                     AS219427.roa (raw, json)
Hash identifier:          SaN/JvBgyegydKwtOLH5KNbR4hh/EHIFDbOQKKIqmto=
Subject key identifier:   B9:C2:C2:7F:25:B4:A0:0A:40:1A:26:29:B8:0D:C3:71:16:8F:9C:04
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0705BECD6555D1099613A0E7923EF78BBDAD6210
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219427.roa
Signing time:             Sun 30 Aug 2026 22:49:55 +0000
ROA not before:           Sun 30 Aug 2026 22:44:55 +0000
ROA not after:            Sun 29 Aug 2027 22:49:55 +0000
asID:                     219427
IP address blocks:        207.180.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 21:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:05:be:cd:65:55:d1:09:96:13:a0:e7:92:3e:f7:8b:bd:ad:62:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Aug 30 22:44:55 2026 GMT
            Not After : Aug 29 22:49:55 2027 GMT
        Subject: CN=B9C2C27F25B4A00A401A2629B80DC371168F9C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:e8:b6:ea:f0:05:3b:fa:92:48:87:e8:2e:
                    22:08:5a:52:8d:e6:51:de:0f:4c:3c:01:59:25:ee:
                    58:57:75:d1:bc:29:1b:18:d6:05:b1:5a:fb:b9:4c:
                    04:53:59:c8:67:9d:5e:28:d0:38:71:fa:84:f8:c1:
                    6f:c1:a1:6d:d7:86:4b:7e:ee:7b:31:f2:a7:a0:03:
                    92:71:18:f5:f6:74:f0:0a:e4:4f:93:79:45:a8:3f:
                    9e:51:4e:38:b4:4c:3e:68:2e:8f:55:38:bd:6b:44:
                    0d:cb:98:02:23:13:3c:0b:e6:46:a6:48:38:21:9b:
                    20:5d:c8:6f:46:e6:04:f5:fa:b9:b7:d7:ac:79:89:
                    38:cd:42:ff:43:e9:c8:16:65:81:bc:96:76:33:e8:
                    eb:e7:80:e4:89:35:8a:e1:a0:65:71:e2:fc:92:cc:
                    eb:16:cc:6a:ff:23:c2:37:59:f5:40:e0:58:3c:4f:
                    38:56:88:3f:99:f9:44:c8:91:0b:55:9a:64:80:73:
                    f9:3e:bb:31:35:96:2d:75:b4:17:02:68:72:fd:d6:
                    e6:5b:78:20:58:26:4a:1f:54:08:48:5e:97:79:1b:
                    25:87:8c:cc:f8:ec:1f:03:0e:0d:c5:fa:ab:28:f1:
                    e4:c0:41:c7:98:b3:f3:6d:8d:de:4f:c3:08:98:21:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:C2:7F:25:B4:A0:0A:40:1A:26:29:B8:0D:C3:71:16:8F:9C:04
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:7d:ac:46:60:13:b5:7b:79:d1:dd:88:46:6d:51:8e:32:ef:
         e4:ba:36:37:2a:2b:cd:8e:ea:85:f8:0d:db:83:3c:f0:42:2d:
         e7:61:8a:6a:b8:cc:59:c9:4a:4a:51:ec:49:9e:89:5c:8a:d4:
         6f:39:fe:d1:17:0c:a0:f7:2f:44:c5:b9:9c:7f:f3:76:63:25:
         26:1b:a3:bb:d3:37:13:b6:d5:1d:f0:38:42:bf:2e:c7:54:b4:
         ba:98:15:b9:11:32:9f:55:be:9a:42:8f:20:af:c8:4b:bc:e0:
         fe:1f:38:58:f4:9d:1a:63:de:7c:4f:61:69:9c:75:d5:66:3b:
         db:a1:b8:19:25:ac:d7:6a:60:01:f3:de:00:c7:90:a5:40:ca:
         9b:cb:5f:65:83:46:ae:03:8e:82:bc:c6:82:ba:f5:40:27:f8:
         57:4d:b9:ba:7a:69:93:ed:69:d8:72:f8:c5:79:34:5b:66:d5:
         4d:72:7c:d4:30:d7:93:2d:c7:60:62:23:19:d6:a8:77:1f:47:
         63:50:5e:79:b6:a7:b3:6b:9d:87:a1:10:cb:ba:14:0f:fb:28:
         a7:f6:60:2f:3b:e0:13:f5:74:e7:e7:1d:52:6c:f9:f5:79:37:
         e5:43:e6:3d:c5:53:b3:c8:b5:ac:32:fb:04:ad:f0:10:f0:e4:
         68:df:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:43:51 2026 by rpki-client