Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS274720.roa
File:                     AS274720.roa (raw, json)
Hash identifier:          CtEn9nBs+tt11Mr4iDubccobvCVPbv24DCXJwlnfQus=
Subject key identifier:   07:78:B6:BB:3B:B0:3F:A6:AB:9D:1A:92:C6:0E:90:1E:77:AD:F5:01
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       4CB01E8F50DA523549F28438B8467436532851BD
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS274720.roa
Signing time:             Wed 06 May 2026 07:17:19 +0000
ROA not before:           Wed 06 May 2026 07:12:19 +0000
ROA not after:            Wed 05 May 2027 07:17:19 +0000
asID:                     274720
IP address blocks:        207.180.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b0:1e:8f:50:da:52:35:49:f2:84:38:b8:46:74:36:53:28:51:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:19 2026 GMT
            Not After : May  5 07:17:19 2027 GMT
        Subject: CN=0778B6BB3BB03FA6AB9D1A92C60E901E77ADF501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:07:88:05:46:fe:19:68:34:ba:22:36:31:
                    00:7e:de:40:76:3c:9a:fd:04:38:28:31:14:8a:4f:
                    8e:26:79:84:80:9c:1d:b7:18:24:f2:c3:c4:af:16:
                    ac:22:44:4c:15:1b:ae:70:41:c0:e9:30:3f:b0:31:
                    3c:8b:e5:ec:4c:4d:fd:67:8d:b7:1c:04:18:ab:07:
                    2d:ee:b4:26:27:d3:63:e4:cd:a2:df:5e:6a:04:45:
                    95:60:ff:2d:fe:e8:5a:29:7c:19:21:a4:6b:b9:bc:
                    23:2b:10:2a:e4:d0:d1:36:0d:79:d5:90:72:cb:7a:
                    49:c3:f8:59:2b:e0:9f:99:9e:84:fb:5e:b9:60:92:
                    24:3f:e3:42:48:c0:94:5f:2d:ce:34:ff:dc:19:94:
                    04:9c:9a:ec:60:dd:5d:80:4d:73:8b:54:95:6f:70:
                    a7:5b:cd:d3:14:21:ba:f2:93:dc:d9:bc:03:df:bf:
                    5f:46:be:3f:b8:5e:0d:36:16:ec:bd:2b:f4:12:cc:
                    56:f0:aa:39:6a:7e:28:95:1f:83:66:38:f6:6e:f1:
                    90:0d:7b:12:4e:ce:53:26:15:fe:d6:fd:ba:e7:7b:
                    e5:80:88:8d:d6:6c:92:c7:5d:09:1e:2a:99:06:3d:
                    ad:bf:4d:b3:0b:00:c0:63:d5:69:af:f6:45:20:6c:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:78:B6:BB:3B:B0:3F:A6:AB:9D:1A:92:C6:0E:90:1E:77:AD:F5:01
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS274720.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:a3:7c:94:47:f2:e1:ee:72:a8:a0:85:eb:a7:fc:97:1a:06:
         d1:1c:23:dc:91:41:ce:8f:37:4e:65:97:0a:d8:49:ca:7c:30:
         4e:40:ff:67:c0:09:4b:15:8f:f5:d9:65:78:c0:f6:cc:d6:cf:
         cf:15:de:c3:e8:d0:81:df:70:bc:36:03:1d:b3:58:df:71:7d:
         25:14:5e:54:3a:c5:ff:eb:38:57:38:d5:2a:95:49:eb:84:dc:
         ff:f6:ad:70:ab:39:af:11:83:ca:fa:f2:7c:43:02:7c:bf:b3:
         13:b1:2a:9f:5d:38:ed:62:0b:c4:4b:f5:b0:77:76:be:07:93:
         af:81:68:c7:43:94:3a:87:58:13:e7:7e:7f:5e:6c:78:91:37:
         4c:ec:69:40:8e:e9:18:fc:40:47:6b:c2:88:d8:50:d2:3c:d7:
         97:be:99:c8:53:27:e9:56:27:66:f9:62:1d:de:60:1f:cf:93:
         4e:f3:6e:81:0d:12:10:68:f2:76:e1:ca:5d:49:14:c0:d9:5a:
         1d:4a:7c:d2:76:4c:44:0d:12:dd:fa:02:32:fe:06:ee:3b:91:
         64:69:38:ee:a6:1f:9e:39:a8:68:cb:bd:d0:2d:5c:45:83:af:
         2b:59:6d:57:93:2a:61:df:c4:bf:4b:9e:f8:8e:74:6d:ab:ea:
         05:08:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:16 2026 by rpki-client