Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS397630.roa
File:                     AS397630.roa (raw, json)
Hash identifier:          cOZfW6ExSLy41CTlv1LxHsk/TkomAuOLx1zbrAvVaLc=
Subject key identifier:   6D:05:F6:99:41:9B:AB:F7:EA:E4:DE:05:1A:06:A9:C7:3E:6A:F2:CC
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       114173876AD37C3A3BCA2D9E9E192783F8C33215
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS397630.roa
Signing time:             Fri 15 May 2026 05:06:17 +0000
ROA not before:           Fri 15 May 2026 05:01:17 +0000
ROA not after:            Fri 14 May 2027 05:06:17 +0000
asID:                     397630
IP address blocks:        207.180.23.0/24 maxlen: 24
                          216.75.129.0/24 maxlen: 24
                          216.75.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:41:73:87:6a:d3:7c:3a:3b:ca:2d:9e:9e:19:27:83:f8:c3:32:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May 15 05:01:17 2026 GMT
            Not After : May 14 05:06:17 2027 GMT
        Subject: CN=6D05F699419BABF7EAE4DE051A06A9C73E6AF2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:8e:bf:83:38:a2:ff:59:a2:e1:05:af:93:
                    9e:cf:05:8d:34:bb:d1:a3:1b:45:d1:c2:c1:4c:5f:
                    54:ec:14:57:bf:83:28:6e:64:f9:40:7a:c1:41:fe:
                    c5:c4:0b:d5:6a:c5:4a:02:51:eb:4a:72:27:01:20:
                    d7:06:93:6d:0a:98:0b:b0:89:d8:13:34:d2:00:3c:
                    56:0c:de:bb:2a:53:b8:e0:63:b7:d6:ca:6c:65:1b:
                    e3:34:e6:30:21:e7:ff:b6:e1:1d:6d:5a:e6:5a:07:
                    69:7a:03:ee:b3:f5:5c:38:47:e4:24:9b:f8:16:bd:
                    3a:2b:10:ed:c9:ae:66:bc:6d:3c:a0:ba:80:59:b7:
                    53:36:9a:ef:56:52:4b:b5:b3:5c:ac:ef:69:0b:45:
                    c8:be:08:b9:df:1f:36:04:1a:f3:99:2a:21:4c:da:
                    7f:5e:9f:b7:77:3b:ec:28:b1:76:0f:f8:bb:a9:cf:
                    56:82:08:0b:b4:a3:1e:ba:82:bd:c8:65:54:fd:4a:
                    76:b2:af:eb:6f:4e:16:b8:91:91:dc:b9:5f:28:1e:
                    1f:e5:ae:73:5d:98:f3:f1:1d:b2:78:ef:c9:1a:91:
                    c7:3b:dc:9f:43:e2:65:97:19:6a:8c:de:79:74:7d:
                    83:2e:fb:0d:6c:4d:de:5e:95:0b:a5:d1:a4:dd:db:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:05:F6:99:41:9B:AB:F7:EA:E4:DE:05:1A:06:A9:C7:3E:6A:F2:CC
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS397630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.23.0/24
                  216.75.129.0/24
                  216.75.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:8d:e5:c2:63:83:05:d4:da:09:ab:ca:0e:51:10:9e:f4:
         f0:a4:33:61:93:ed:89:de:63:58:96:34:65:3b:1f:43:7b:53:
         3c:e8:43:96:85:0c:99:98:43:93:44:3e:54:11:39:8d:1d:f9:
         29:69:32:d0:13:9f:90:a7:a1:a6:e9:f9:54:c6:2b:d6:fe:78:
         67:dd:5a:ca:d2:76:f0:33:ba:72:09:73:2c:30:0e:a3:dd:a4:
         a7:67:f4:87:c8:04:56:a4:cd:8c:5d:43:16:bd:86:9e:fd:ba:
         dd:af:a9:e0:1f:d7:dc:97:0c:be:72:c6:74:05:c9:78:ae:f7:
         a0:b6:9d:02:3b:6c:3e:0c:da:bb:e0:37:31:3a:70:81:57:c8:
         2d:6c:61:ea:e3:8f:9d:a8:c2:89:c4:70:7c:c2:85:6c:77:3e:
         19:5d:a3:9c:df:a1:48:2b:ba:8d:20:ca:e4:96:b2:b0:c4:6d:
         2a:d3:cc:b7:3f:c8:37:69:3b:45:bb:1b:52:b5:3e:c1:9e:0c:
         00:66:51:35:7c:4f:e0:94:67:8a:6f:c7:ef:bc:67:da:a5:1a:
         92:98:4c:c4:f5:98:c7:16:d7:4d:65:c8:82:2b:f7:74:04:2c:
         98:d6:af:eb:9f:cb:cc:90:24:6a:5b:e2:b7:a9:a6:5c:ea:d2:
         8e:e0:2d:e5
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUEUFzh2rTfDo7yi2enhkng/jDMhUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTE1MDUwMTE3WhcNMjcwNTE0MDUwNjE3
WjAzMTEwLwYDVQQDEyg2RDA1RjY5OTQxOUJBQkY3RUFFNERFMDUxQTA2QTlDNzNF
NkFGMkNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvOOv4M4ov9Z
ouEFr5OezwWNNLvRoxtF0cLBTF9U7BRXv4MobmT5QHrBQf7FxAvVasVKAlHrSnIn
ASDXBpNtCpgLsInYEzTSADxWDN67KlO44GO31spsZRvjNOYwIef/tuEdbVrmWgdp
egPus/VcOEfkJJv4Fr06KxDtya5mvG08oLqAWbdTNprvVlJLtbNcrO9pC0XIvgi5
3x82BBrzmSohTNp/Xp+3dzvsKLF2D/i7qc9WgggLtKMeuoK9yGVU/Up2sq/rb04W
uJGR3LlfKB4f5a5zXZjz8R2yeO/JGpHHO9yfQ+JllxlqjN55dH2DLvsNbE3eXpUL
pdGk3duxLwIDAQABo4ICizCCAocwHQYDVR0OBBYEFG0F9plBm6v36uTeBRoGqcc+
avLMMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzM5NzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAM+0FwMEANhLgQMEANhLnDANBgkq
hkiG9w0BAQsFAAOCAQEAQF+N5cJjgwXU2gmryg5REJ708KQzYZPtid5jWJY0ZTsf
Q3tTPOhDloUMmZhDk0Q+VBE5jR35KWky0BOfkKehpun5VMYr1v54Z91aytJ28DO6
cglzLDAOo92kp2f0h8gEVqTNjF1DFr2Gnv263a+p4B/X3JcMvnLGdAXJeK73oLad
AjtsPgzau+A3MTpwgVfILWxh6uOPnajCicRwfMKFbHc+GV2jnN+hSCu6jSDK5Jay
sMRtKtPMtz/IN2k7RbsbUrU+wZ4MAGZRNXxP4JRnim/H77xn2qUakphMxPWYxxbX
TWXIgiv3dAQsmNav65/LzJAkalvit6mmXOrSjuAt5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:04 2026 by rpki-client