Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          NZGnnkQc5+xPTJMJ/f6D4e9duqSDsCzyQheP+ZuyuME=
Subject key identifier:   99:5D:5C:7C:28:EE:40:C5:7D:98:EC:DB:1B:E0:7B:DA:38:23:04:79
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       60011ED8E060E51B72DBF40EA081FA8E20269ECA
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS174.roa
Signing time:             Wed 06 May 2026 07:17:17 +0000
ROA not before:           Wed 06 May 2026 07:12:17 +0000
ROA not after:            Wed 05 May 2027 07:17:17 +0000
asID:                     174
IP address blocks:        207.180.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:01:1e:d8:e0:60:e5:1b:72:db:f4:0e:a0:81:fa:8e:20:26:9e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:17 2026 GMT
            Not After : May  5 07:17:17 2027 GMT
        Subject: CN=995D5C7C28EE40C57D98ECDB1BE07BDA38230479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:d1:7e:1d:1d:31:c2:7d:b3:b0:44:29:e5:
                    ea:b4:e0:65:d1:1b:9b:06:2c:52:dc:d3:ba:c2:26:
                    e0:a6:3b:a4:40:a0:f9:ef:39:0c:ec:fd:d5:b2:c9:
                    d9:8b:3d:89:6e:3c:5b:19:49:2d:49:70:5a:a5:db:
                    97:18:e7:d7:4f:e4:b2:b2:12:53:52:d6:4c:43:02:
                    fc:b7:b9:47:ff:5a:30:7c:0b:0a:48:de:67:52:ff:
                    84:2e:d7:41:fc:08:9d:f9:ad:37:90:07:59:87:72:
                    b0:29:8a:b1:36:bd:9f:97:40:0f:a3:b7:1f:35:ad:
                    ab:76:66:b0:14:2c:a0:f1:e3:0f:45:0d:79:06:03:
                    63:66:4f:22:24:92:92:69:56:69:83:07:84:99:d1:
                    6a:a7:f0:ba:25:02:09:50:49:8d:ac:45:66:52:d2:
                    94:da:dd:9b:49:b1:e5:60:ff:64:d2:e6:a8:36:8a:
                    89:9c:42:13:1b:e6:e9:c4:2e:59:72:39:10:18:54:
                    fa:1a:1e:4e:6b:44:bb:9c:3b:64:45:d3:82:c3:b0:
                    1b:b7:bf:fd:5b:0f:63:b9:2a:47:f3:54:fb:3f:79:
                    cd:aa:75:2f:e1:c6:9e:d1:3a:cf:68:cb:ca:c2:6d:
                    6c:f8:61:af:1b:6c:7b:f3:e4:42:c9:aa:1c:12:76:
                    94:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5D:5C:7C:28:EE:40:C5:7D:98:EC:DB:1B:E0:7B:DA:38:23:04:79
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:84:8e:13:2b:43:60:92:29:0e:ec:51:e1:93:96:d9:54:
         91:66:0b:d4:01:c7:52:9b:8d:77:dc:8d:95:79:26:37:a2:73:
         62:f1:e1:e4:d0:df:b0:f3:84:8f:69:12:ef:4f:4e:51:d3:49:
         04:f7:23:90:66:fd:59:2f:ac:09:60:8c:7d:a5:3c:3e:39:60:
         f9:a0:a0:41:49:3a:b1:43:61:8c:b1:f9:25:42:14:5a:e8:7d:
         da:89:fa:86:5f:b1:61:e7:b5:05:0f:d4:fd:9b:7f:5c:2c:09:
         c3:81:74:1d:54:c7:e0:92:19:3d:5f:48:c2:75:5f:63:bb:6d:
         2a:f3:3f:41:05:ec:ef:e6:f0:80:18:e5:07:5d:71:7b:f2:ba:
         43:ef:27:65:c2:88:df:0e:28:7d:fa:ce:c1:54:1e:72:e8:ae:
         7c:4b:e4:89:32:b3:d1:d0:5c:e1:bb:db:8d:10:f0:79:e1:f2:
         85:37:72:08:c2:93:f7:71:18:68:12:46:e1:b1:27:54:13:05:
         cb:96:8f:cc:c0:08:17:ea:8f:49:a8:7a:17:1f:c2:3f:aa:9b:
         2c:f4:eb:6c:ee:76:31:55:12:1c:5e:4e:b0:78:13:26:dd:10:
         83:45:77:59:2e:b0:73:63:5b:4a:7f:c8:f6:b7:6b:12:2b:d3:
         98:68:98:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:03 2026 by rpki-client