Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS137897.roa
File:                     AS137897.roa (raw, json)
Hash identifier:          5sW38w8CQO0nO+tkKUeFeRBFIqR9NXIcHhhWhgxg9rk=
Subject key identifier:   D1:F8:5A:77:25:70:8D:B3:B8:37:C0:CC:4C:BD:5E:1E:64:07:AB:E0
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0DD0E3C5DFFB4F0677D38BD20D0D029AE33BF8F5
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS137897.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     137897
IP address blocks:        207.180.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d0:e3:c5:df:fb:4f:06:77:d3:8b:d2:0d:0d:02:9a:e3:3b:f8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=D1F85A7725708DB3B837C0CC4CBD5E1E6407ABE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:5a:72:42:84:e8:c5:eb:0b:94:c2:6e:7f:
                    38:ab:05:5c:ae:b4:d1:2b:25:fb:78:e7:51:b9:c0:
                    0c:2b:95:4d:e9:fe:f7:7c:6b:ea:de:fd:56:6c:98:
                    7b:ef:6d:66:b2:64:8b:19:0a:52:e5:bd:d1:1e:9a:
                    53:e0:f3:59:2f:1b:9d:5a:56:4a:35:cc:ae:3d:0e:
                    07:aa:2e:83:5e:2f:22:d4:ca:b4:d5:2a:33:88:74:
                    9e:61:61:f0:5a:f0:b8:d2:46:e3:cd:cf:a2:b3:77:
                    fd:ce:eb:fb:58:ad:7b:c3:e7:b3:f5:9c:2b:bc:20:
                    9a:3f:78:18:02:84:b5:57:ed:af:e3:aa:68:0d:56:
                    5c:63:d2:12:71:dc:b0:00:14:db:6b:3f:a2:1d:46:
                    87:90:66:63:db:0b:9d:a4:9c:2d:2a:dd:0e:91:e4:
                    81:51:0c:f6:9b:3e:90:e2:25:da:93:c5:c1:9f:55:
                    25:65:af:43:4a:d3:22:00:64:4e:96:14:be:a3:46:
                    cd:37:67:c5:f6:eb:ae:5e:05:8d:cc:69:fc:f8:15:
                    a3:6a:ad:b5:fb:67:53:fc:55:a6:c1:cc:c4:1f:25:
                    43:05:84:22:b2:d6:c8:eb:31:ca:d0:23:10:e7:2f:
                    17:0e:26:d8:74:42:03:5f:6b:bd:94:8f:8b:24:25:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F8:5A:77:25:70:8D:B3:B8:37:C0:CC:4C:BD:5E:1E:64:07:AB:E0
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS137897.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:06:73:8c:54:9c:81:7c:7b:36:c5:0b:cd:e5:f8:4c:55:e0:
         08:2b:65:f6:7d:70:1f:0a:8e:eb:be:4d:fa:13:6c:36:35:f4:
         f6:0d:ed:c9:fb:d5:00:cb:6e:b6:a5:06:3f:73:c0:04:70:24:
         0a:37:f6:42:0f:78:2d:2b:fb:71:f3:32:65:a5:46:31:8e:4d:
         32:ee:81:bf:f0:90:6e:e4:0e:5a:ea:f1:f5:2b:b4:a9:0c:ba:
         75:c4:f9:26:80:e5:8a:c3:40:93:47:8e:49:cc:49:91:f6:93:
         6b:13:b3:4e:9f:f0:f2:fc:98:62:96:c1:1b:75:2d:d6:75:61:
         d5:b6:42:21:75:1c:01:96:da:4a:00:88:74:9b:c4:a9:9f:a0:
         98:59:d2:41:9b:6e:ab:fb:59:77:55:b7:76:f1:1e:05:0e:9d:
         51:1e:19:3d:47:5b:ea:0e:16:ad:ee:72:1f:3e:0c:3a:e9:f4:
         d9:49:3e:89:b9:3b:dd:e0:bd:7e:29:20:dd:01:d1:0f:d2:44:
         a4:6c:d8:6f:62:65:94:b4:f2:5b:fa:61:6d:45:3d:7f:4f:f6:
         5f:c6:55:41:3b:16:0e:05:e1:13:d7:96:3a:df:ab:3b:47:cd:
         2d:70:65:18:fb:96:c6:8e:54:9d:16:2d:96:6e:a7:d5:0c:f9:
         a9:b0:01:d7
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUDdDjxd/7TwZ304vSDQ0CmuM7+PUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE4WhcNMjcwNTA1MDcxNzE4
WjAzMTEwLwYDVQQDEyhEMUY4NUE3NzI1NzA4REIzQjgzN0MwQ0M0Q0JENUUxRTY0
MDdBQkUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhlackKE6MXr
C5TCbn84qwVcrrTRKyX7eOdRucAMK5VN6f73fGvq3v1WbJh7721msmSLGQpS5b3R
HppT4PNZLxudWlZKNcyuPQ4Hqi6DXi8i1Mq01SoziHSeYWHwWvC40kbjzc+is3f9
zuv7WK17w+ez9ZwrvCCaP3gYAoS1V+2v46poDVZcY9IScdywABTbaz+iHUaHkGZj
2wudpJwtKt0OkeSBUQz2mz6Q4iXak8XBn1UlZa9DStMiAGROlhS+o0bNN2fF9uuu
XgWNzGn8+BWjaq21+2dT/FWmwczEHyVDBYQistbI6zHK0CMQ5y8XDibYdEIDX2u9
lI+LJCVAbQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNH4WnclcI2zuDfAzEy9Xh5k
B6vgMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzEzNzg5Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM+0BTANBgkqhkiG9w0BAQsFAAOC
AQEAIAZzjFScgXx7NsULzeX4TFXgCCtl9n1wHwqO675N+hNsNjX09g3tyfvVAMtu
tqUGP3PABHAkCjf2Qg94LSv7cfMyZaVGMY5NMu6Bv/CQbuQOWurx9Su0qQy6dcT5
JoDlisNAk0eOScxJkfaTaxOzTp/w8vyYYpbBG3Ut1nVh1bZCIXUcAZbaSgCIdJvE
qZ+gmFnSQZtuq/tZd1W3dvEeBQ6dUR4ZPUdb6g4Wre5yHz4MOun02Uk+ibk73eC9
fikg3QHRD9JEpGzYb2JllLTyW/phbUU9f0/2X8ZVQTsWDgXhE9eWOt+rO0fNLXBl
GPuWxo5UnRYtlm6n1Qz5qbAB1w==
-----END CERTIFICATE-----
Generated at Thu May 7 04:13:01 2026 by rpki-client