Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS21859.roa
File:                     AS21859.roa (raw, json)
Hash identifier:          8uAPVO3FtdEkLqyBiltgfeLByMIawKneR5jDGZjBtT8=
Subject key identifier:   08:7A:B8:5C:9C:5B:3B:9E:AB:D6:FB:22:85:5D:56:55:85:6B:F0:C8
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       65984F9A8B6E00D0F2697D521A41D2162F7C0937
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS21859.roa
Signing time:             Wed 06 May 2026 07:17:17 +0000
ROA not before:           Wed 06 May 2026 07:12:17 +0000
ROA not after:            Wed 05 May 2027 07:17:17 +0000
asID:                     21859
IP address blocks:        207.180.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:98:4f:9a:8b:6e:00:d0:f2:69:7d:52:1a:41:d2:16:2f:7c:09:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:17 2026 GMT
            Not After : May  5 07:17:17 2027 GMT
        Subject: CN=087AB85C9C5B3B9EABD6FB22855D5655856BF0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:b4:50:38:0c:e5:ac:6c:91:68:25:cd:fd:
                    36:dc:ec:55:b4:b6:3f:c1:54:89:2d:15:cc:1b:cd:
                    61:d1:82:97:d9:85:a4:57:de:42:14:86:ba:87:80:
                    3c:ca:c0:5b:0b:1e:28:63:24:a5:04:f0:90:d5:ac:
                    00:7f:9d:2b:b4:a7:1b:91:ef:d5:4b:1b:43:b2:b5:
                    21:c2:dc:f3:31:71:8b:85:76:15:60:56:44:d7:ad:
                    5a:c7:03:d3:5f:d1:a5:e3:e7:79:d7:39:f8:3c:a3:
                    97:fa:2c:91:4f:4a:52:07:b5:fa:f0:ab:37:0f:af:
                    34:af:d9:41:41:8e:f5:6d:5d:34:82:5f:d7:47:6f:
                    9c:32:58:9f:8b:26:27:46:66:ec:c7:7b:14:89:77:
                    6f:b8:5e:1e:41:eb:8f:ed:7f:ca:07:86:f7:5b:fc:
                    9f:7b:4c:2e:0c:71:22:17:65:11:b5:c6:5b:df:4f:
                    21:16:27:e5:9c:94:35:93:05:12:58:c1:40:f2:6b:
                    e2:6a:24:0c:bd:f4:c8:07:6c:99:08:5e:fa:db:9f:
                    40:34:10:58:96:26:6c:70:e9:fe:e9:bb:b7:7a:51:
                    55:76:a1:c1:49:00:e3:47:01:96:66:9e:cb:2b:31:
                    94:d1:19:c4:87:5d:a1:5a:d9:50:89:6d:1e:cb:d5:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7A:B8:5C:9C:5B:3B:9E:AB:D6:FB:22:85:5D:56:55:85:6B:F0:C8
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS21859.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:7b:f0:d2:9a:20:f4:91:7a:55:61:b5:ad:cb:f9:b0:c3:
         f0:c8:e9:34:08:ac:44:a5:be:07:39:40:ad:59:1a:e9:37:b1:
         06:8f:9d:0c:16:d0:de:5d:e8:11:b2:e1:be:00:bd:9f:85:1b:
         f1:01:e7:82:0f:f1:26:bc:94:6b:f5:2e:47:06:73:b7:1e:2b:
         e4:91:0a:70:e6:50:8e:98:43:dd:57:ec:85:5f:37:6d:2b:ff:
         e4:46:18:4f:7d:de:e8:74:85:0d:22:87:1c:6d:e7:2d:d0:fe:
         27:3e:f4:e0:d1:1b:d5:d0:da:44:3f:bc:65:08:22:fb:51:d8:
         d8:fa:96:22:fd:24:8f:d3:68:d3:cc:c8:c8:0e:f7:78:fb:5f:
         16:33:4b:c8:ac:93:36:03:b5:5a:c2:82:b0:49:e8:dd:f3:99:
         a4:a2:90:16:16:3f:88:09:24:93:cc:88:6c:57:39:53:8a:52:
         ae:91:c9:a6:71:96:03:fd:30:dd:dc:eb:3e:d8:31:53:57:11:
         c4:f0:75:90:b7:5e:8b:de:32:1d:95:aa:c2:4b:be:51:81:9c:
         21:32:47:4d:b9:cd:34:3a:4e:69:7e:a7:de:88:19:02:8b:ce:
         c0:7e:de:69:6a:5b:d6:ef:56:b4:7e:02:d3:8a:42:d3:b9:dc:
         16:97:12:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:27 2026 by rpki-client