Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS142532.roa
File:                     AS142532.roa (raw, json)
Hash identifier:          KQaVsos/DMkqSkhAm2MRBLOw2hNXjgYDlx37kX1rYkA=
Subject key identifier:   71:0F:8E:5B:8A:49:57:82:F4:B0:22:34:C7:53:A8:6A:BE:4D:78:73
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       3003696A82381355A0F75069DF77B232BC0EAB42
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS142532.roa
Signing time:             Fri 03 Jul 2026 09:15:42 +0000
ROA not before:           Fri 03 Jul 2026 09:10:42 +0000
ROA not after:            Fri 02 Jul 2027 09:15:42 +0000
asID:                     142532
IP address blocks:        207.180.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 13:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:03:69:6a:82:38:13:55:a0:f7:50:69:df:77:b2:32:bc:0e:ab:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jul  3 09:10:42 2026 GMT
            Not After : Jul  2 09:15:42 2027 GMT
        Subject: CN=710F8E5B8A495782F4B02234C753A86ABE4D7873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:4c:78:d0:63:96:87:6f:77:4e:c1:66:a1:
                    b0:da:42:ef:fb:b1:75:51:d2:52:82:7a:e3:f0:83:
                    fc:5c:35:69:bd:6e:1c:84:69:24:48:95:bc:21:3c:
                    b4:b3:31:1a:ae:42:f5:35:ac:d8:72:86:80:b4:a9:
                    f9:90:de:93:05:20:b8:75:00:9c:d1:9e:8d:07:70:
                    d5:a5:e3:f0:6e:be:e4:e5:53:63:90:ae:03:9a:6a:
                    ff:cb:b0:fe:6f:ba:7c:c9:ed:ae:2f:4e:08:0b:09:
                    28:8f:d9:bb:61:fa:58:92:94:2b:2e:b1:a6:3a:1a:
                    b2:d3:0e:0e:47:85:57:93:48:6f:74:db:1b:62:f8:
                    63:d3:85:17:43:cc:c9:27:63:b3:bd:07:d0:b2:82:
                    52:0d:69:69:bc:4a:9a:2a:90:81:0a:63:2f:dc:28:
                    be:43:f9:11:76:9f:45:3b:79:cf:4f:41:60:46:aa:
                    bb:0b:2b:78:6b:50:28:f1:a7:dc:04:94:24:77:55:
                    3c:f8:41:c0:f8:41:37:8d:68:45:b3:dc:fc:c2:60:
                    8b:61:db:1e:17:77:b1:de:a2:05:0f:3d:17:eb:67:
                    f4:bb:a1:cd:51:c2:d6:a1:1f:c1:1e:e1:17:e3:0b:
                    6d:ce:45:04:df:73:d4:09:fa:70:e5:b2:f6:96:2b:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:8E:5B:8A:49:57:82:F4:B0:22:34:C7:53:A8:6A:BE:4D:78:73
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS142532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:59:6b:fc:62:f0:c2:19:d8:a3:32:87:ed:08:71:a4:8c:
         19:76:a0:a5:42:ee:b0:b8:b2:f4:dc:c3:f5:af:67:f9:c4:34:
         6f:ee:f1:a7:57:8a:14:34:a9:53:6b:ac:a9:ac:e6:90:0f:e7:
         50:02:fc:06:bc:00:46:45:9b:57:5a:f7:aa:51:8d:03:af:cb:
         e8:91:77:2b:4b:18:89:d0:0a:b8:e4:e2:94:33:a4:82:d5:d4:
         30:5f:2f:f8:d6:6c:4e:5a:d6:42:57:76:4f:c9:72:a2:72:f5:
         7c:63:6a:46:b6:37:ef:9e:f4:9d:82:8c:d7:3f:ee:6a:0a:b6:
         21:c6:78:b3:fd:56:d2:40:90:e2:14:c4:67:23:6b:26:9c:ad:
         42:ff:2b:4b:df:2f:9c:5a:d8:bb:b3:23:c6:0a:5f:f0:ce:7e:
         b3:57:7e:f2:33:de:97:c2:3d:00:7e:12:b7:2b:07:9f:83:e2:
         2e:87:e4:d9:39:c1:18:86:90:3f:b2:ef:69:6e:03:d6:9b:dd:
         2f:5e:65:ab:dc:68:43:ff:2b:49:71:2e:65:a3:87:43:69:e5:
         31:3a:05:23:12:61:a1:19:34:cd:63:8a:4f:26:4c:e5:47:ae:
         3d:2c:42:f3:80:04:db:e8:b1:dd:be:2f:82:2b:7e:fc:da:28:
         d5:1c:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:19:09 2026 by rpki-client