Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS208690.roa
File:                     AS208690.roa (raw, json)
Hash identifier:          /2db0tIGzjUMQd3Ki9UzS6e/7JaFMMfcYzdMdn62jUI=
Subject key identifier:   F1:A9:C4:EA:88:5A:23:31:C9:BC:F6:B4:F1:AC:8A:B6:90:FD:D6:0D
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       5707A4B768A8F1B6AC7CC47F3F1E4F7EFB1FD5AD
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS208690.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     208690
IP address blocks:        207.180.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:07:a4:b7:68:a8:f1:b6:ac:7c:c4:7f:3f:1e:4f:7e:fb:1f:d5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=F1A9C4EA885A2331C9BCF6B4F1AC8AB690FDD60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:92:70:94:00:8e:78:b1:43:30:e8:1c:64:
                    35:17:7e:29:4f:b0:74:fc:b9:6d:e7:a6:2f:dc:b6:
                    88:e9:0d:0d:13:be:1d:47:47:0d:c3:00:d4:62:7b:
                    12:d4:e1:cd:3b:2c:56:e6:80:0f:9f:ea:ae:9d:63:
                    b9:ce:85:ca:df:0b:27:b5:83:5c:f7:d4:ef:46:11:
                    a0:3e:8d:32:ef:9f:19:0b:19:3c:9a:c6:bb:12:a1:
                    3f:27:90:9b:b5:91:50:85:d0:49:92:53:b1:e7:b2:
                    af:e8:ae:76:4d:89:e5:37:6f:e1:c4:74:ce:4d:5a:
                    e8:57:14:b3:b7:47:39:60:af:07:f6:b1:7a:1a:36:
                    11:d4:01:11:79:4f:1d:32:9b:bc:b1:7b:ee:52:1c:
                    ed:fb:1d:4d:8c:45:6c:50:52:8d:24:b2:6b:70:e3:
                    9b:65:41:16:c8:3e:9a:4b:c4:7a:91:c8:5d:6b:3f:
                    02:6b:9a:81:9a:5e:66:e7:3e:44:c1:0f:36:59:61:
                    31:51:9a:01:ff:01:1b:45:c0:c1:58:e6:51:83:3c:
                    2c:ba:80:09:48:7a:90:93:00:80:dd:b8:ed:9f:5d:
                    13:51:a7:4d:94:bc:d5:45:3b:00:51:eb:d9:c8:de:
                    25:94:38:b9:6e:b5:ab:6c:9b:db:da:be:51:e6:3f:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A9:C4:EA:88:5A:23:31:C9:BC:F6:B4:F1:AC:8A:B6:90:FD:D6:0D
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS208690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:24:a3:99:ca:a2:9f:bc:25:f6:c1:c6:38:50:c9:ec:46:86:
         dc:b2:b5:c8:b0:08:a3:ee:e2:50:14:4b:12:bd:c8:a5:1f:0b:
         15:48:89:9e:90:96:45:03:88:25:ba:df:f2:31:91:50:de:8d:
         ee:db:84:5e:78:ef:bf:03:16:cf:fe:ef:9b:ef:3c:3c:2e:08:
         76:39:78:97:f2:cc:af:07:1b:28:e6:9e:ec:cd:02:73:0c:7a:
         45:7b:a5:6d:20:0d:a2:6d:53:ff:32:39:cb:6d:86:36:c2:63:
         b8:9d:24:ee:b2:88:f0:a5:ba:97:ac:c9:05:13:10:b3:62:fd:
         9e:fc:b9:63:7c:5c:32:12:b7:71:b9:89:67:df:0f:ee:f7:e2:
         10:29:ba:2c:69:14:f2:2b:a5:0d:31:35:97:65:aa:54:10:12:
         f8:80:d2:b0:80:d0:91:a9:ff:1f:92:53:c6:ac:2e:58:6b:1e:
         b8:c0:e5:c4:cb:43:f1:04:66:c8:0c:76:d2:80:bb:87:10:46:
         48:43:bb:1f:eb:f4:9c:bb:e5:51:43:82:43:e8:b4:0e:be:7f:
         ab:ac:98:03:85:9f:50:7d:4e:d7:e6:a6:27:1a:b5:e7:f0:4e:
         c7:35:01:43:58:17:8b:78:fb:8c:02:26:b8:b4:e9:45:fd:dd:
         3c:7b:2c:a0
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUVwekt2io8basfMR/Px5Pfvsf1a0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE4WhcNMjcwNTA1MDcxNzE4
WjAzMTEwLwYDVQQDEyhGMUE5QzRFQTg4NUEyMzMxQzlCQ0Y2QjRGMUFDOEFCNjkw
RkRENjBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFOScJQAjnix
QzDoHGQ1F34pT7B0/Llt56Yv3LaI6Q0NE74dR0cNwwDUYnsS1OHNOyxW5oAPn+qu
nWO5zoXK3wsntYNc99TvRhGgPo0y758ZCxk8msa7EqE/J5CbtZFQhdBJklOx57Kv
6K52TYnlN2/hxHTOTVroVxSzt0c5YK8H9rF6GjYR1AEReU8dMpu8sXvuUhzt+x1N
jEVsUFKNJLJrcOObZUEWyD6aS8R6kchdaz8Ca5qBml5m5z5EwQ82WWExUZoB/wEb
RcDBWOZRgzwsuoAJSHqQkwCA3bjtn10TUadNlLzVRTsAUevZyN4llDi5brWrbJvb
2r5R5j9DAQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPGpxOqIWiMxybz2tPGsiraQ
/dYNMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzIwODY5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM+0AzANBgkqhkiG9w0BAQsFAAOC
AQEAZCSjmcqin7wl9sHGOFDJ7EaG3LK1yLAIo+7iUBRLEr3IpR8LFUiJnpCWRQOI
Jbrf8jGRUN6N7tuEXnjvvwMWz/7vm+88PC4Idjl4l/LMrwcbKOae7M0Ccwx6RXul
bSANom1T/zI5y22GNsJjuJ0k7rKI8KW6l6zJBRMQs2L9nvy5Y3xcMhK3cbmJZ98P
7vfiECm6LGkU8iulDTE1l2WqVBAS+IDSsIDQkan/H5JTxqwuWGseuMDlxMtD8QRm
yAx20oC7hxBGSEO7H+v0nLvlUUOCQ+i0Dr5/q6yYA4WfUH1O1+amJxq15/BOxzUB
Q1gXi3j7jAImuLTpRf3dPHssoA==
-----END CERTIFICATE-----
Generated at Thu May 7 04:13:01 2026 by rpki-client