Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS2856.roa
File:                     AS2856.roa (raw, json)
Hash identifier:          EMKuBZ9ZizbwgFBVcu1f+YkQVUvaBylOJH6JOxs7A8E=
Subject key identifier:   84:28:D2:B0:37:1B:F5:82:E3:C6:07:D6:6D:85:01:2C:ED:84:0C:92
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       638D76E02E845D07D4915B4A29C96285A8673ED6
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS2856.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     2856
IP address blocks:        207.180.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8d:76:e0:2e:84:5d:07:d4:91:5b:4a:29:c9:62:85:a8:67:3e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=8428D2B0371BF582E3C607D66D85012CED840C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:2e:b9:26:83:92:2c:a9:f9:1e:17:67:17:
                    96:02:fc:d0:52:e8:2d:93:37:77:fe:d0:40:4c:e1:
                    c3:b3:15:12:f4:96:46:69:56:14:12:ea:81:f3:6f:
                    24:5d:c4:42:37:e9:75:a5:be:42:95:97:e5:fe:e0:
                    24:b1:39:39:38:06:d8:57:6a:23:43:47:57:d7:80:
                    0b:59:70:c5:66:2e:b6:12:f1:27:e0:5c:f7:c3:80:
                    4e:60:b3:99:7b:5d:cb:7c:55:14:39:d4:d7:8d:98:
                    81:b1:fb:12:64:25:a3:e9:7b:58:52:0b:14:ae:73:
                    1d:82:62:47:3b:81:df:a4:68:75:86:43:fa:23:30:
                    ba:e5:c0:9d:f9:1a:3e:33:88:fd:ed:cc:b3:0b:c3:
                    91:29:1d:9d:25:99:1a:1d:a4:8e:12:93:9e:3c:61:
                    43:77:38:e8:4d:07:43:56:2d:4f:29:51:f2:0f:a0:
                    d3:18:9e:8a:69:7a:76:7a:7f:4e:7a:5f:e6:44:ee:
                    27:0f:33:50:19:c3:0b:f0:01:40:6b:08:c5:97:c2:
                    3a:f0:18:6d:ba:57:5b:bb:63:3a:15:42:7e:d9:e7:
                    25:5d:f4:c1:a2:a6:72:6b:62:17:2a:96:78:a1:b5:
                    56:fa:54:4b:1b:21:da:16:e1:02:b0:c4:c0:df:32:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:28:D2:B0:37:1B:F5:82:E3:C6:07:D6:6D:85:01:2C:ED:84:0C:92
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS2856.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:5c:ba:32:41:72:8b:ad:7e:94:97:3f:f8:77:cf:ee:91:
         6b:77:e7:52:01:c3:43:77:e8:22:3c:ff:4a:fe:89:80:e0:fe:
         90:e5:f0:78:f7:33:6c:4e:4e:cf:c2:e6:2c:14:09:36:6a:7c:
         32:de:a2:6c:b4:9d:ec:b3:0a:15:44:3f:f8:fd:28:d3:d9:ce:
         c5:27:f6:9b:80:d5:ba:26:b4:25:2d:0b:71:4d:a8:76:e3:97:
         68:c6:8f:fe:f1:bf:68:8e:70:dc:cf:e5:97:85:d8:04:8b:27:
         84:76:e2:a2:49:5f:1d:64:e7:ea:9e:a4:91:cf:87:a2:73:84:
         7f:9b:ef:ec:9e:87:22:42:bb:e8:86:d0:50:8e:0f:ca:c6:63:
         ea:a7:e4:06:34:c8:6d:a0:68:2d:23:f5:e9:a7:49:94:34:27:
         43:c0:f8:17:7a:94:a1:61:1b:fe:71:97:66:61:e4:c2:d9:a6:
         80:93:5d:ac:a6:07:3f:55:5d:14:76:93:d7:4b:17:8b:5e:e1:
         1c:40:61:bb:70:38:13:d8:01:47:92:ec:1f:06:46:d7:cd:0d:
         fc:6d:b4:b1:87:3a:73:70:95:46:ca:ae:17:19:b1:1d:ee:b7:
         e6:cc:4c:bc:16:48:23:86:17:b5:20:fc:37:54:83:66:aa:71:
         d9:18:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:18 2026 by rpki-client