Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS272409.roa
File:                     AS272409.roa (raw, json)
Hash identifier:          D7hObgJI7eqdCq/q6ADaxdW64EHl5Q9KksIjO2m50XU=
Subject key identifier:   F8:21:16:80:B9:25:D4:6B:EF:2D:27:49:52:5B:50:B0:3D:0D:88:EE
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       63457C9B7F54A47354C07C20AB7D0C38542C1437
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS272409.roa
Signing time:             Wed 06 May 2026 07:17:19 +0000
ROA not before:           Wed 06 May 2026 07:12:19 +0000
ROA not after:            Wed 05 May 2027 07:17:19 +0000
asID:                     272409
IP address blocks:        207.180.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:45:7c:9b:7f:54:a4:73:54:c0:7c:20:ab:7d:0c:38:54:2c:14:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:19 2026 GMT
            Not After : May  5 07:17:19 2027 GMT
        Subject: CN=F8211680B925D46BEF2D2749525B50B03D0D88EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:4d:90:2b:64:23:dd:55:ab:7e:96:63:20:
                    63:80:a8:92:c5:91:a5:c5:2d:31:d6:5b:0d:56:c2:
                    b1:8f:c4:6e:d0:f5:98:a3:05:42:39:33:ae:aa:c5:
                    c0:b9:5e:94:e0:f4:64:b7:15:c0:1d:79:b3:fc:9f:
                    de:ef:d3:57:95:ac:68:d2:58:aa:9e:88:b7:3a:b1:
                    9f:d0:3f:05:99:66:32:b3:e9:bf:29:0f:66:d3:c5:
                    aa:1f:77:a7:41:9a:a0:55:1b:2b:e9:4e:cf:f1:17:
                    29:54:36:34:60:10:6c:3f:3d:e2:16:54:97:86:03:
                    09:73:98:79:0e:73:c3:aa:06:72:14:4f:6a:70:9c:
                    e1:4d:1f:e1:00:ae:7a:89:42:90:8b:2a:8d:c6:f6:
                    50:80:c5:78:dd:dd:7a:03:bb:79:a6:af:54:48:1b:
                    e9:fd:b6:31:bd:9b:24:77:ef:53:30:cf:ff:82:86:
                    65:9e:85:ee:d2:5f:7f:0a:e3:25:72:a1:2c:18:d6:
                    35:c3:b0:fa:4a:49:0e:d2:21:28:00:ad:65:22:50:
                    07:79:70:3b:65:a8:ef:8e:9f:4e:62:e1:bf:4d:9d:
                    89:c4:18:f4:8b:25:ba:62:fc:55:72:cc:d7:21:4d:
                    c6:95:29:70:ba:8d:ec:d6:bb:1b:53:8d:b4:ff:bc:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:21:16:80:B9:25:D4:6B:EF:2D:27:49:52:5B:50:B0:3D:0D:88:EE
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS272409.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:76:77:22:fe:bc:bb:fe:e6:01:33:7b:c1:51:92:f8:6b:22:
         48:73:c2:1e:d5:da:2b:f1:7e:71:28:63:7b:4b:6d:c2:c6:c7:
         55:aa:13:dd:e4:0f:87:a4:15:a1:bc:00:5c:f9:f9:72:57:4f:
         45:b9:f5:c3:0d:4a:ba:83:16:7f:e8:94:6f:00:82:d4:e6:c0:
         1e:90:ba:1d:7a:03:ee:a7:61:58:84:0c:90:57:dd:fd:af:e0:
         73:e8:b5:eb:c7:d7:70:71:e0:29:e2:cb:90:23:b1:06:72:10:
         8b:45:da:89:01:e8:c5:05:da:73:b5:b9:ce:a4:f5:87:9c:72:
         15:7f:df:bd:95:67:39:92:fb:0d:e3:27:a7:7a:9c:bc:f9:dd:
         be:a0:5f:e5:ba:36:d1:39:cf:24:d0:53:16:5f:63:8b:54:0a:
         bf:9e:7f:b9:0f:a9:57:d7:07:af:a0:fe:ca:60:f4:fd:40:0d:
         0b:0d:b4:10:2a:36:59:17:cb:a7:ef:d2:d2:48:87:39:8a:24:
         95:75:23:9f:5f:98:d4:58:4e:94:ca:2e:dd:8b:e8:0d:87:71:
         07:84:c7:d0:a4:dd:4d:95:a4:1a:4e:4a:31:9e:d0:6f:f4:67:
         b7:9e:0b:43:30:02:bc:94:3a:d4:1d:32:32:8e:3b:c1:25:f3:
         cf:27:c2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:02 2026 by rpki-client