Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS136809.roa
File:                     AS136809.roa (raw, json)
Hash identifier:          xvoseP8pyYP9E8m55sxZqYun6JKaj4idwtWVcQ+qxtU=
Subject key identifier:   A2:11:BD:A4:DD:2A:A4:F2:99:22:95:D0:6D:49:F5:31:87:52:BE:98
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       6E87B8C5D1F8C9DE727C043C80B74022304243CD
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS136809.roa
Signing time:             Tue 20 Oct 2026 11:07:17 +0000
ROA not before:           Tue 20 Oct 2026 11:02:17 +0000
ROA not after:            Tue 19 Oct 2027 11:07:17 +0000
asID:                     136809
IP address blocks:        207.180.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 22:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:87:b8:c5:d1:f8:c9:de:72:7c:04:3c:80:b7:40:22:30:42:43:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Oct 20 11:02:17 2026 GMT
            Not After : Oct 19 11:07:17 2027 GMT
        Subject: CN=A211BDA4DD2AA4F2992295D06D49F5318752BE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:ff:5b:cc:34:60:41:85:42:3c:43:8f:26:
                    dd:b4:a5:25:b2:ae:05:a0:85:03:71:3a:4d:77:b9:
                    de:81:a4:27:f8:bb:26:f5:c3:37:90:98:01:73:01:
                    6a:2b:e7:b9:2d:ad:ac:ae:7a:bd:4a:3a:f6:36:42:
                    ab:3a:f7:bc:c7:7a:b9:76:8f:06:43:e6:eb:53:cb:
                    6f:2e:20:37:16:ff:b8:e2:d1:ad:d8:d1:7c:6c:99:
                    0a:2e:ac:ec:93:92:07:78:f2:37:6c:14:c7:cf:c2:
                    f4:98:14:95:d2:b8:4e:fe:d7:72:f7:5d:a7:11:26:
                    3a:ce:d7:c2:9e:62:77:92:29:d5:a8:c4:de:95:6e:
                    be:86:a9:1a:01:e4:0c:fd:81:ce:7a:02:2a:78:3d:
                    32:36:08:1f:d2:a5:95:e4:40:0a:af:0e:38:4d:a1:
                    d2:25:90:21:3d:43:e1:71:70:92:9b:70:87:66:c5:
                    3d:5f:4f:64:a5:b1:d4:e8:fa:0c:3e:d9:4c:73:ba:
                    cf:3e:7a:72:fb:5a:b1:12:cf:1b:81:c5:b0:17:1d:
                    e7:28:30:6d:46:f1:ab:8b:d0:0b:66:76:00:5d:ce:
                    54:4a:99:1c:f8:1b:28:5e:0d:a3:61:cf:25:8e:7d:
                    e1:11:58:a8:dc:af:12:f2:32:20:f6:ee:46:bd:df:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:11:BD:A4:DD:2A:A4:F2:99:22:95:D0:6D:49:F5:31:87:52:BE:98
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS136809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:0d:2c:7f:b2:99:67:04:6a:69:bb:1e:34:a0:fd:cc:22:
         0b:c9:43:3e:a1:29:3f:a7:09:e2:bb:1e:9a:81:77:1f:e3:d9:
         82:99:3e:56:39:90:98:6d:00:e8:67:59:2a:91:25:09:77:d4:
         2e:07:3b:84:16:be:b8:22:a6:96:58:a6:45:04:c3:05:62:02:
         da:3e:63:d9:6e:f1:57:b3:50:1d:de:91:58:03:18:c0:f8:a4:
         0f:7a:ed:e8:91:11:cd:7a:c0:34:be:5b:e7:f7:37:a7:b0:7f:
         0d:a9:a3:ff:5f:fc:14:8f:64:bd:c8:09:18:d2:ee:1e:58:1f:
         93:36:fc:96:26:7b:1a:66:26:2c:1c:cc:ce:2c:ec:e8:5c:f9:
         aa:cf:c1:64:b8:ca:0a:c4:ec:7e:6c:46:45:7e:e6:2a:27:33:
         6d:80:46:4c:a7:86:62:8a:1f:61:d5:f5:4c:c2:b8:00:f6:7b:
         e1:5e:ef:fc:3a:16:d3:57:ce:d6:08:6d:42:8c:8a:34:88:eb:
         bc:e6:91:64:4e:64:9b:49:54:34:71:55:74:72:2c:93:df:41:
         66:1b:78:2e:dc:6d:e2:b9:40:0b:83:0b:23:95:1e:ba:a1:32:
         de:47:9a:3e:3f:12:e4:14:65:2b:cd:da:13:9c:ee:da:6e:5f:
         9e:58:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:37:10 2026 by rpki-client