Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS274983.roa
File:                     AS274983.roa (raw, json)
Hash identifier:          892EMbx6k/OdIkXsNbUqHlq3y76ANOyIy0vK0Ke5aBQ=
Subject key identifier:   53:CB:60:23:DB:D3:AA:44:05:25:FC:B6:34:12:0F:CC:F7:1F:9C:06
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       3CF997B1A10BB148F68AAEC07874C2FEF0F434DF
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS274983.roa
Signing time:             Sun 26 Jul 2026 19:46:08 +0000
ROA not before:           Sun 26 Jul 2026 19:41:08 +0000
ROA not after:            Sun 25 Jul 2027 19:46:08 +0000
asID:                     274983
IP address blocks:        207.180.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f9:97:b1:a1:0b:b1:48:f6:8a:ae:c0:78:74:c2:fe:f0:f4:34:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jul 26 19:41:08 2026 GMT
            Not After : Jul 25 19:46:08 2027 GMT
        Subject: CN=53CB6023DBD3AA440525FCB634120FCCF71F9C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:23:df:b1:ec:63:92:21:09:3f:17:db:82:
                    4a:c3:09:cf:78:43:9c:76:82:ea:74:36:fe:d6:a8:
                    1c:7e:de:aa:53:c8:6f:a2:fe:2f:4e:39:15:07:d4:
                    fd:3a:ce:f0:4c:92:a4:a1:38:4b:09:de:4a:b1:00:
                    a2:66:f2:d0:48:2b:51:12:0c:8a:5b:20:fc:c6:d1:
                    df:d9:a1:12:aa:13:0c:dd:e0:5a:c6:71:20:76:47:
                    42:d6:78:b2:90:b9:34:61:72:9d:a5:c7:9c:b0:14:
                    dc:8c:70:78:5d:ae:06:92:e3:4d:41:42:27:ab:f1:
                    9e:7c:de:cc:81:e9:b0:31:52:8f:1a:34:79:7f:31:
                    09:6c:d6:6c:e8:36:9c:2e:b3:3a:a5:18:ae:86:cb:
                    d4:e1:f7:d5:96:a1:d2:ab:13:b9:69:7d:4d:bb:d4:
                    af:e4:17:b3:96:17:e4:5c:44:f2:78:46:c1:ca:94:
                    81:19:68:ef:fb:a1:8d:a5:3c:76:f1:51:21:b9:0e:
                    04:b5:da:83:40:68:d7:93:70:1f:1a:d3:51:50:fe:
                    d7:39:b9:77:33:9e:b3:34:bc:48:72:b6:0d:cb:4e:
                    6e:87:3b:1d:f8:1b:b1:3f:95:1b:a8:a9:4f:65:7f:
                    32:c5:eb:be:64:c2:d7:ce:3d:8b:1d:d5:f9:a4:65:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CB:60:23:DB:D3:AA:44:05:25:FC:B6:34:12:0F:CC:F7:1F:9C:06
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS274983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:93:d5:d1:57:98:db:8d:34:2d:4a:13:ac:30:c2:7a:4e:d5:
         ef:fc:16:6d:47:4d:6a:af:ae:65:c9:e3:69:ea:96:7c:6a:46:
         e6:ef:59:0e:14:fa:04:6d:a5:40:2e:c6:98:7e:e1:58:9f:c8:
         79:d2:d3:b4:3c:7f:3c:99:e5:0e:a3:de:fc:63:6e:86:c5:2d:
         7b:c7:a8:03:c4:98:51:94:e8:e2:8d:1b:8a:e5:67:10:80:c3:
         aa:e3:0b:ba:cb:39:f5:4e:59:0f:27:9e:d2:10:63:87:a2:0c:
         92:d8:b0:d2:12:d9:ea:cc:48:5b:16:a1:bd:0e:cc:83:6e:0a:
         ed:85:ff:e1:e0:af:4f:c4:e1:14:9f:e4:4a:e2:32:37:19:8f:
         6a:59:56:9e:80:e7:36:4f:49:5d:08:5f:43:8d:7d:3b:76:01:
         c5:f3:27:ce:55:b7:c8:5c:5a:85:51:b5:cd:ea:a0:b7:77:48:
         c3:3e:17:e6:25:8b:00:f6:60:7e:45:d7:b8:9f:8e:da:bd:66:
         6a:34:19:2f:27:4f:11:ce:09:72:e1:8d:a5:55:22:9c:e8:47:
         fb:49:59:7b:b1:c9:67:91:87:d6:d3:c8:e5:9f:c8:d4:6d:70:
         ca:d7:35:23:1c:70:c1:42:82:30:db:4e:b8:a3:1a:28:d2:4a:
         9b:ba:e0:f6
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUPPmXsaELsUj2iq7AeHTC/vD0NN8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNzI2MTk0MTA4WhcNMjcwNzI1MTk0NjA4
WjAzMTEwLwYDVQQDEyg1M0NCNjAyM0RCRDNBQTQ0MDUyNUZDQjYzNDEyMEZDQ0Y3
MUY5QzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmcj37HsY5Ih
CT8X24JKwwnPeEOcdoLqdDb+1qgcft6qU8hvov4vTjkVB9T9Os7wTJKkoThLCd5K
sQCiZvLQSCtREgyKWyD8xtHf2aESqhMM3eBaxnEgdkdC1niykLk0YXKdpcecsBTc
jHB4Xa4GkuNNQUInq/GefN7MgemwMVKPGjR5fzEJbNZs6DacLrM6pRiuhsvU4ffV
lqHSqxO5aX1Nu9Sv5BezlhfkXETyeEbBypSBGWjv+6GNpTx28VEhuQ4EtdqDQGjX
k3AfGtNRUP7XObl3M56zNLxIcrYNy05uhzsd+BuxP5UbqKlPZX8yxeu+ZMLXzj2L
HdX5pGXjkQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFPLYCPb06pEBSX8tjQSD8z3
H5wGMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzI3NDk4My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM+0BDANBgkqhkiG9w0BAQsFAAOC
AQEAY5PV0VeY2400LUoTrDDCek7V7/wWbUdNaq+uZcnjaeqWfGpG5u9ZDhT6BG2l
QC7GmH7hWJ/IedLTtDx/PJnlDqPe/GNuhsUte8eoA8SYUZTo4o0biuVnEIDDquML
uss59U5ZDyee0hBjh6IMktiw0hLZ6sxIWxahvQ7Mg24K7YX/4eCvT8ThFJ/kSuIy
NxmPallWnoDnNk9JXQhfQ419O3YBxfMnzlW3yFxahVG1zeqgt3dIwz4X5iWLAPZg
fkXXuJ+O2r1majQZLydPEc4JcuGNpVUinOhH+0lZe7HJZ5GH1tPI5Z/I1G1wytc1
IxxwwUKCMNtOuKMaKNJKm7rg9g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:54:13 2026 by rpki-client