Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS216138.roa
File:                     AS216138.roa (raw, json)
Hash identifier:          PE3ytHXHu/L0w2NpBHNGR6OFm9gC5FjPv15lBi2LTMc=
Subject key identifier:   0B:03:B0:7A:C1:3F:0A:90:F5:B0:FE:B3:2E:C5:A6:B0:DA:2E:46:74
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       29AB91399CEA0FE0A0E5608785D1EE1A757373EE
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS216138.roa
Signing time:             Wed 06 May 2026 07:17:17 +0000
ROA not before:           Wed 06 May 2026 07:12:17 +0000
ROA not after:            Wed 05 May 2027 07:17:17 +0000
asID:                     216138
IP address blocks:        207.180.30.0/24 maxlen: 24
                          207.180.56.0/24 maxlen: 24
                          207.180.59.0/24 maxlen: 24
                          207.180.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ab:91:39:9c:ea:0f:e0:a0:e5:60:87:85:d1:ee:1a:75:73:73:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:17 2026 GMT
            Not After : May  5 07:17:17 2027 GMT
        Subject: CN=0B03B07AC13F0A90F5B0FEB32EC5A6B0DA2E4674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:3d:88:cb:83:82:c9:24:59:29:95:b6:0a:
                    bd:e9:84:aa:0e:37:30:9c:92:98:38:cd:95:6e:e7:
                    30:c3:ea:c1:d9:62:8a:69:83:78:05:7a:42:48:f6:
                    3d:b2:7b:86:c4:27:69:4e:9a:d1:15:c8:54:fa:d6:
                    0e:4c:b6:1d:4b:16:a4:aa:25:8e:e6:93:c5:33:af:
                    bf:9f:43:65:75:0c:60:26:be:dd:47:77:c1:d7:58:
                    fc:15:2e:7f:c2:ae:8b:e9:c2:0a:30:6e:91:aa:4e:
                    04:7d:21:ec:10:93:c3:87:c9:8b:db:16:e5:df:5f:
                    5e:88:03:b9:1d:e2:3d:bf:e8:44:e4:d9:c1:8d:e8:
                    f7:0b:14:8c:c9:a1:f8:88:3b:2a:39:a8:f8:6c:eb:
                    78:f7:31:82:c5:e4:f7:7d:73:1b:7d:7c:78:69:40:
                    ba:4f:b5:57:ef:41:cd:84:d3:7a:b6:f5:8c:99:9f:
                    cc:cb:d6:91:d5:66:b6:f6:f3:30:19:c6:8a:9a:e4:
                    fc:f5:bd:73:9b:c4:ea:a3:09:71:f4:db:99:ff:d7:
                    b7:31:9b:a6:3b:96:68:7a:ef:75:8d:19:80:d5:38:
                    49:54:b9:ed:83:b6:06:59:13:75:e5:cd:c6:53:b0:
                    1e:40:92:d1:8a:b6:6c:cb:ea:3e:85:23:e3:70:7b:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:03:B0:7A:C1:3F:0A:90:F5:B0:FE:B3:2E:C5:A6:B0:DA:2E:46:74
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS216138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.30.0/24
                  207.180.56.0/24
                  207.180.59.0/24
                  207.180.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:8e:7d:31:b7:b1:4d:29:6b:a0:b8:b9:86:5e:d1:3c:82:c9:
         3a:c4:06:05:92:07:d8:a4:82:69:4a:9c:94:2b:75:3e:c7:c9:
         ef:fb:36:91:3b:45:d2:fe:98:c6:6c:e7:03:cd:46:f0:81:e6:
         8c:b2:f6:38:01:14:f3:33:01:6e:36:eb:11:dc:7a:ba:45:fd:
         aa:fa:fc:67:a1:7f:0c:99:9b:d2:ed:68:09:b2:97:0e:4f:5d:
         57:a9:0a:37:dc:8a:41:46:be:a7:c7:4c:29:e2:a4:3b:c6:f0:
         be:12:61:c2:2d:b7:00:dc:97:e5:8b:f2:74:19:95:92:e4:ea:
         b4:eb:44:3d:49:12:51:c4:22:b9:c8:82:94:c2:aa:14:7f:8e:
         66:e5:ce:81:ae:d3:c5:30:b4:34:2f:2c:26:5b:d7:9d:b6:a9:
         d6:70:9f:e6:8b:8d:3f:da:6c:ac:18:f4:e5:84:34:4e:12:bb:
         f4:cb:68:94:11:d9:84:15:c6:01:34:40:54:b7:df:18:47:13:
         69:35:85:73:e5:18:17:19:db:7f:3f:f0:ae:3d:15:50:2a:e3:
         54:a3:6b:fa:47:33:41:cc:9f:32:5e:e8:ba:d5:86:70:ba:18:
         0f:5b:66:6d:02:15:4e:ed:7d:91:d0:3f:b1:d8:b7:d8:5a:64:
         52:98:22:9e
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUKauROZzqD+Cg5WCHhdHuGnVzc+4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE3WhcNMjcwNTA1MDcxNzE3
WjAzMTEwLwYDVQQDEygwQjAzQjA3QUMxM0YwQTkwRjVCMEZFQjMyRUM1QTZCMERB
MkU0Njc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3649iMuDgskk
WSmVtgq96YSqDjcwnJKYOM2Vbucww+rB2WKKaYN4BXpCSPY9snuGxCdpTprRFchU
+tYOTLYdSxakqiWO5pPFM6+/n0NldQxgJr7dR3fB11j8FS5/wq6L6cIKMG6Rqk4E
fSHsEJPDh8mL2xbl319eiAO5HeI9v+hE5NnBjej3CxSMyaH4iDsqOaj4bOt49zGC
xeT3fXMbfXx4aUC6T7VX70HNhNN6tvWMmZ/My9aR1Wa29vMwGcaKmuT89b1zm8Tq
owlx9NuZ/9e3MZumO5Zoeu91jRmA1ThJVLntg7YGWRN15c3GU7AeQJLRirZsy+o+
hSPjcHs6mQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFAsDsHrBPwqQ9bD+sy7FprDa
LkZ0MB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzIxNjEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAM+0HgMEAM+0OAMEAM+0OwMEAM+0
PzANBgkqhkiG9w0BAQsFAAOCAQEAC459MbexTSlroLi5hl7RPILJOsQGBZIH2KSC
aUqclCt1PsfJ7/s2kTtF0v6YxmznA81G8IHmjLL2OAEU8zMBbjbrEdx6ukX9qvr8
Z6F/DJmb0u1oCbKXDk9dV6kKN9yKQUa+p8dMKeKkO8bwvhJhwi23ANyX5YvydBmV
kuTqtOtEPUkSUcQiuciClMKqFH+OZuXOga7TxTC0NC8sJlvXnbap1nCf5ouNP9ps
rBj05YQ0ThK79MtolBHZhBXGATRAVLffGEcTaTWFc+UYFxnbfz/wrj0VUCrjVKNr
+kczQcyfMl7outWGcLoYD1tmbQIVTu19kdA/sdi32FpkUpging==
-----END CERTIFICATE-----
Generated at Thu May 7 04:13:30 2026 by rpki-client