Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS399359.roa
File:                     AS399359.roa (raw, json)
Hash identifier:          uI3dmoFoxo05zDjgPmIwmpW7ufAeg73CZlmgMJP3+mI=
Subject key identifier:   8F:C3:81:40:68:B8:CF:D1:A2:F4:F0:A5:A1:11:29:C3:92:41:6B:3B
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       30310FD376C217952331A79B13EAC0D934C36CA1
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS399359.roa
Signing time:             Thu 03 Sep 2026 01:53:54 +0000
ROA not before:           Thu 03 Sep 2026 01:48:54 +0000
ROA not after:            Thu 02 Sep 2027 01:53:54 +0000
asID:                     399359
IP address blocks:        207.180.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:31:0f:d3:76:c2:17:95:23:31:a7:9b:13:ea:c0:d9:34:c3:6c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Sep  3 01:48:54 2026 GMT
            Not After : Sep  2 01:53:54 2027 GMT
        Subject: CN=8FC3814068B8CFD1A2F4F0A5A11129C392416B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:89:86:1e:9a:91:c2:43:ec:b8:6a:19:30:
                    cb:bb:9d:57:58:16:d9:54:e6:7c:62:a2:57:61:14:
                    92:b0:22:c9:82:12:0a:fe:94:b9:cd:35:73:1c:66:
                    37:0a:44:40:2a:13:38:a6:d1:2c:db:e9:0b:36:8e:
                    65:e5:94:19:51:03:a8:d8:e9:c9:2d:f9:6e:0b:98:
                    06:aa:d3:a3:a3:8d:93:4d:79:2b:84:24:18:5a:31:
                    d3:50:98:b6:4d:be:3d:89:30:f6:73:9d:22:f9:32:
                    5f:d5:cb:b7:cf:38:f8:d0:08:ff:8f:b1:04:c6:16:
                    99:e7:c3:85:e2:d6:83:24:ba:da:84:56:ea:a0:5c:
                    39:64:f4:66:45:81:f3:ba:2c:d9:e2:d1:e0:02:89:
                    4c:e3:d7:6a:7f:ae:6c:e5:15:0e:52:26:42:18:ec:
                    a8:d8:15:b9:8b:1f:78:a8:64:15:b1:1f:f1:ef:87:
                    13:b6:84:0e:82:a6:40:18:a2:ad:41:4a:c7:a3:7b:
                    a4:db:0e:71:c6:02:fe:9a:ba:57:38:3a:45:ad:e0:
                    74:b6:11:0a:a9:77:97:a2:8f:ab:4b:3d:10:41:d1:
                    83:d2:02:f9:4a:f7:a4:47:e0:0d:2c:a8:eb:74:24:
                    7e:28:0d:09:61:28:1a:90:12:46:1d:45:9c:4a:b6:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C3:81:40:68:B8:CF:D1:A2:F4:F0:A5:A1:11:29:C3:92:41:6B:3B
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS399359.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:84:1e:73:aa:51:66:98:c3:a1:0a:17:90:6c:b8:fc:28:94:
         fa:69:7e:e3:08:7b:29:d1:1c:31:8f:b5:a9:e8:02:b4:f3:3c:
         9a:18:4e:e0:d6:55:3a:4b:2c:12:2b:40:c1:6b:fb:55:6d:b2:
         a0:1e:2e:6b:b7:61:52:22:58:06:f7:48:e4:93:05:d1:8b:23:
         3a:b5:42:2e:29:57:22:13:a2:f2:23:74:f8:ae:6e:be:b5:7d:
         c2:da:80:b8:fd:f6:d3:90:49:4f:22:7c:7c:33:a1:52:d9:c4:
         7f:34:80:9a:bc:31:41:6d:b9:f9:07:41:0c:f7:8b:ab:7c:45:
         36:b7:ef:2a:07:14:d8:eb:db:a9:7f:b5:5a:7a:65:98:05:11:
         e0:1d:07:d4:39:ff:98:fe:f1:94:07:c3:a5:b7:4e:04:82:dc:
         f8:7a:38:36:64:22:ed:4e:64:73:ef:27:58:11:4d:d4:73:c3:
         4e:89:1f:7c:b5:4f:d6:69:23:23:07:b6:34:5b:e6:01:d4:dc:
         1e:ca:b5:c2:61:2c:77:6a:fa:b5:59:a1:b7:52:ed:22:f4:4e:
         a2:c9:e0:86:6f:01:ec:b7:db:f5:1a:92:31:a4:62:39:40:69:
         d2:41:6e:e9:f5:f1:92:24:7c:93:16:cb:9a:98:57:23:34:8d:
         fa:8e:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:21:49 2026 by rpki-client