Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS207299.roa
File:                     AS207299.roa (raw, json)
Hash identifier:          usTr+Uwwm2uvzCuYkvR1BCj90t0gg5zwL6/SGWZiDTI=
Subject key identifier:   15:91:05:D9:B6:2D:7E:9A:63:CC:B9:6B:FF:59:86:A5:B2:64:10:73
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       23B38FBB9CC459F4FDDC701BFF05ACFA7A84D686
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS207299.roa
Signing time:             Fri 15 May 2026 12:06:48 +0000
ROA not before:           Fri 15 May 2026 12:01:48 +0000
ROA not after:            Fri 14 May 2027 12:06:48 +0000
asID:                     207299
IP address blocks:        207.180.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 04:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b3:8f:bb:9c:c4:59:f4:fd:dc:70:1b:ff:05:ac:fa:7a:84:d6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May 15 12:01:48 2026 GMT
            Not After : May 14 12:06:48 2027 GMT
        Subject: CN=159105D9B62D7E9A63CCB96BFF5986A5B2641073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:a7:9c:5b:ba:e6:4a:6a:23:ed:b2:81:c2:
                    43:f4:1b:cf:9c:d9:4c:12:f2:79:f8:f8:45:10:7a:
                    06:c1:ff:78:ca:48:ad:2f:66:cb:b7:8a:28:a2:16:
                    bc:2e:e7:07:3a:c1:fe:2a:9b:1f:48:e4:be:ca:c6:
                    43:40:20:3c:15:8f:16:07:f4:45:af:91:33:ee:99:
                    57:f7:f5:20:12:7d:03:58:8a:2b:32:8d:68:3e:e5:
                    ef:79:de:03:7e:72:23:e7:bc:96:c0:ed:12:b4:0a:
                    5a:a0:a8:9d:d0:4a:be:86:14:b4:93:ac:ed:b2:dd:
                    59:73:ad:d8:b9:e0:85:9f:be:e1:e0:b2:b8:3f:67:
                    1e:66:0d:9f:7e:fb:c7:27:3a:02:69:71:e0:2f:59:
                    cb:16:1b:be:08:36:32:d2:28:b3:4f:c3:bd:b8:aa:
                    fa:f1:0e:fe:3d:23:41:ac:e5:35:34:66:64:71:bd:
                    60:00:fc:d4:1a:3b:e3:0c:85:ab:3d:e4:df:ae:2b:
                    b0:04:17:56:45:99:cc:d7:ee:b6:31:27:45:b6:a7:
                    a6:0e:3b:db:e2:da:01:2a:bb:f9:0f:18:66:5d:95:
                    39:3e:05:5c:78:4a:bc:1d:da:46:76:77:c4:b1:19:
                    0d:97:25:75:1e:7e:f8:fb:d9:e9:79:9e:8f:19:76:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:91:05:D9:B6:2D:7E:9A:63:CC:B9:6B:FF:59:86:A5:B2:64:10:73
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS207299.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:7c:15:39:b2:3a:f0:1a:ce:1f:f5:61:a5:89:cf:f7:5d:
         12:60:01:14:60:5f:96:e5:28:3b:86:31:42:93:4e:72:ec:38:
         22:6e:c1:da:da:3f:4d:c7:ff:49:74:ae:5d:82:53:5f:7d:02:
         a9:a0:97:0c:2a:7e:44:49:03:8d:78:d4:24:b0:a9:b7:72:ab:
         b6:db:c2:bb:a9:3d:f7:ba:34:91:14:ca:86:0f:f5:22:ee:f9:
         ea:b7:c5:9e:75:ce:33:1b:d9:90:42:63:47:cd:a2:11:d4:48:
         21:96:7f:c9:be:29:37:09:60:58:de:60:86:76:46:45:ac:70:
         e6:6a:e1:43:0a:26:51:95:88:bd:71:56:22:5c:19:a7:03:b7:
         e1:8f:28:4d:de:d4:4e:61:2c:35:e6:53:fb:69:20:93:7d:b5:
         6a:51:68:2c:ec:94:59:77:69:e8:93:bf:7c:35:0b:a7:f4:aa:
         64:6f:15:7f:14:a4:3e:53:4d:82:87:f9:f2:c6:0b:22:55:06:
         63:14:c3:ee:ff:9f:32:34:32:db:f5:72:f7:6f:d3:46:91:3f:
         8d:bb:4d:46:db:e8:81:cc:a3:b3:16:7e:0b:9b:91:8c:ca:9e:
         26:64:d9:a0:cc:58:ed:75:2c:6f:dc:d8:ef:34:38:78:fc:22:
         11:28:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:07 2026 by rpki-client