Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS147191.roa
File:                     AS147191.roa (raw, json)
Hash identifier:          xqMap8fOL8UT6G6ocYJ0pykanCtGeJdpdtU5eEy6U/o=
Subject key identifier:   67:61:8A:8F:0D:1D:7A:53:BD:BF:C2:00:B5:78:76:04:FA:90:77:CB
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       4D135F649435F0323AFAC6D910767A2C7D66D10C
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS147191.roa
Signing time:             Sun 05 Jul 2026 07:07:07 +0000
ROA not before:           Sun 05 Jul 2026 07:02:07 +0000
ROA not after:            Sun 04 Jul 2027 07:07:07 +0000
asID:                     147191
IP address blocks:        216.75.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jul 2026 10:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:13:5f:64:94:35:f0:32:3a:fa:c6:d9:10:76:7a:2c:7d:66:d1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jul  5 07:02:07 2026 GMT
            Not After : Jul  4 07:07:07 2027 GMT
        Subject: CN=67618A8F0D1D7A53BDBFC200B5787604FA9077CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:57:bc:3e:be:84:bb:9b:c8:51:39:09:bf:
                    5b:07:24:0e:96:18:39:97:6a:8f:4d:ff:2a:b5:bc:
                    81:07:ee:ca:84:41:68:2d:33:53:8d:99:f2:16:72:
                    28:5a:88:94:20:96:59:fe:fb:15:ab:a2:0f:be:e9:
                    2b:fc:4d:c1:90:7f:be:7d:2d:75:23:3d:62:d4:ca:
                    43:3c:26:33:17:de:40:ce:75:46:c1:7a:75:72:44:
                    19:f3:71:39:7e:6a:4b:f4:aa:25:37:a1:3b:f0:34:
                    cd:a5:f2:0d:12:45:92:98:ad:23:37:c7:11:93:c7:
                    87:62:9b:2a:59:c8:d3:37:14:c4:b7:33:35:eb:63:
                    cf:98:87:1b:f6:27:ed:36:69:3f:b8:cb:f1:81:90:
                    b3:b3:6e:b6:45:9a:0c:ee:85:c7:db:e9:c3:af:6d:
                    00:9e:27:53:17:8f:ec:04:55:6e:81:f7:aa:eb:ac:
                    b8:ee:4d:ab:56:d5:f2:3b:8a:d6:73:e9:f0:4f:1a:
                    8c:f4:09:2d:b3:f7:dc:fd:6a:2c:86:6b:58:01:b5:
                    a2:6a:20:cf:8d:6d:e2:17:8f:46:50:7a:85:4f:50:
                    0f:dd:2e:d2:bd:15:ff:dc:14:b5:f5:04:2c:c8:35:
                    52:6e:1c:d1:b8:1d:db:85:93:f0:3f:8b:30:1e:8d:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:61:8A:8F:0D:1D:7A:53:BD:BF:C2:00:B5:78:76:04:FA:90:77:CB
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS147191.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:df:83:53:af:fc:1d:84:98:02:17:9a:52:74:01:cb:bc:ad:
         9c:b6:3f:2b:da:0d:1a:8f:db:e4:f7:81:2e:c6:f0:9a:37:04:
         f1:59:4a:d1:d7:b9:03:f2:62:4d:af:32:44:3a:ec:58:b3:9e:
         5f:f5:1f:52:12:80:24:ec:f5:14:cb:4f:b7:ec:e2:05:ff:ac:
         25:d0:6f:94:58:78:21:b7:3b:b4:52:53:c7:82:b8:84:90:6b:
         b3:aa:56:17:53:10:fc:05:a0:a8:08:24:71:ed:c1:3b:3a:c8:
         ce:cd:5d:53:9f:9b:13:5b:51:64:d2:c0:63:8b:c9:41:ad:65:
         db:ce:8a:b8:78:78:60:78:81:83:54:d8:91:02:15:21:f0:83:
         c0:96:ab:53:47:bc:4e:06:a8:92:5c:0b:18:bb:e0:e5:ea:93:
         15:2f:43:ad:f6:25:ee:ac:67:8b:07:96:ff:fa:ec:1b:d7:f2:
         98:a4:32:c0:4e:bb:ce:58:ad:a3:eb:91:45:bc:2d:3c:42:48:
         14:f3:12:9a:2b:da:c0:e8:3c:20:df:db:ae:11:cc:e8:69:79:
         b7:bf:2e:f1:f5:46:31:81:2f:cf:7b:7c:7d:36:ad:8e:67:3f:
         cb:94:1c:26:2f:88:a5:94:86:8e:1d:8f:1a:a3:ca:6a:c7:6e:
         38:e8:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 13:36:16 2026 by rpki-client