Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS17014.roa
File:                     AS17014.roa (raw, json)
Hash identifier:          VnawZ/OO+hDhRq9jTM03Vc+RKXt56IrH02zC/oU24QU=
Subject key identifier:   C5:6E:05:F5:61:DC:A5:D5:88:CC:08:08:F0:7D:FC:67:15:FF:D1:3C
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0FCD235A0D5C0D0D9386413D1FB0DE84C1D6AAF8
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS17014.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     17014
IP address blocks:        207.180.0.0/24 maxlen: 24
                          207.180.1.0/24 maxlen: 24
                          207.180.2.0/24 maxlen: 24
                          207.180.20.0/24 maxlen: 24
                          207.180.31.0/24 maxlen: 24
                          207.180.32.0/24 maxlen: 24
                          207.180.39.0/24 maxlen: 24
                          207.180.60.0/24 maxlen: 24
                          207.180.62.0/24 maxlen: 24
                          216.75.131.0/24 maxlen: 24
                          216.75.144.0/24 maxlen: 24
                          216.75.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cd:23:5a:0d:5c:0d:0d:93:86:41:3d:1f:b0:de:84:c1:d6:aa:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=C56E05F561DCA5D588CC0808F07DFC6715FFD13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:ce:30:a7:a4:d9:af:36:23:d2:8b:e7:fa:
                    21:d3:7f:45:83:94:cd:29:6e:0b:da:1d:32:af:68:
                    1b:9b:05:ef:83:3d:6c:fb:c5:a7:9f:ee:b1:d5:b0:
                    b1:e2:98:22:65:5d:a7:9e:b8:a6:21:ec:bb:a3:5d:
                    a4:c7:f6:67:c4:8d:8d:43:f4:53:8d:f3:43:da:2a:
                    45:be:fe:12:55:1e:af:97:75:9d:a2:c9:16:89:dd:
                    d4:06:72:da:d2:35:d8:ef:09:9e:c8:93:79:50:a2:
                    5a:59:5b:fb:d7:87:eb:32:11:64:cf:89:c7:a4:91:
                    5f:21:78:06:7d:41:0d:af:57:d5:06:58:57:f0:66:
                    85:27:cc:d4:50:91:ad:9f:29:09:e2:f9:81:1b:f0:
                    71:50:3d:aa:21:28:69:5d:58:75:6f:3b:58:12:61:
                    2a:6c:92:09:42:ee:43:4e:21:a7:e0:c8:a3:7a:12:
                    e8:27:73:52:86:bc:fd:6c:61:c4:fe:82:8e:ea:be:
                    32:1f:56:5f:fb:b4:27:1b:8b:c0:1c:b6:02:70:8f:
                    74:f1:80:7c:3d:ba:47:51:53:62:48:35:2b:f0:5f:
                    1e:fd:76:5d:e1:d4:5e:97:6e:64:e7:d3:c8:b4:66:
                    8c:c4:72:9b:a0:8e:0f:92:6b:08:15:b5:a1:4c:ce:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:05:F5:61:DC:A5:D5:88:CC:08:08:F0:7D:FC:67:15:FF:D1:3C
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS17014.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.0.0-207.180.2.255
                  207.180.20.0/24
                  207.180.31.0-207.180.32.255
                  207.180.39.0/24
                  207.180.60.0/24
                  207.180.62.0/24
                  216.75.131.0/24
                  216.75.144.0/24
                  216.75.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:3d:6a:00:0b:e1:47:94:bd:78:0c:27:a9:a8:30:cd:97:39:
         5d:f6:ef:e3:78:1c:7a:e0:be:86:8b:c3:ac:c5:dd:09:8c:e6:
         53:86:ac:12:d5:53:d5:6c:50:e1:27:cb:79:f3:69:49:8c:a3:
         ab:bc:23:a6:09:bd:86:48:71:3f:1e:25:65:06:e7:78:65:3b:
         58:fd:14:78:8e:49:02:8f:09:1b:d4:2b:d4:ff:1f:e8:e0:1c:
         09:86:a2:95:83:53:31:d5:8c:bd:ff:d4:c7:39:b2:43:7c:e4:
         23:84:eb:b4:ba:1b:3a:21:08:cb:41:7d:d9:a4:92:0e:a3:29:
         be:67:1a:37:e0:ec:a1:8a:0e:33:e3:79:c3:2c:ef:c8:44:fd:
         e1:32:f7:f4:a8:df:85:30:c9:f1:0b:81:e1:65:ad:a8:f2:a6:
         5a:6c:ca:73:ae:6a:23:7e:1e:f8:07:2b:16:e3:e2:10:a9:8c:
         5e:3d:ed:d7:d7:dd:9a:14:b8:74:02:f1:df:ca:05:9c:46:3a:
         37:0e:c3:c6:1f:dd:05:d7:7f:7e:63:67:90:ee:2a:16:fc:01:
         10:71:1f:0a:75:3c:f2:8c:56:c9:c1:90:40:4f:01:3b:82:bb:
         4d:1b:61:8e:b3:a6:c7:f5:78:23:56:44:78:9e:6b:f4:ce:e8:
         d1:07:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:22 2026 by rpki-client