Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS393827.roa
File:                     AS393827.roa (raw, json)
Hash identifier:          YtaqW1dMvDA4zADMZze7jQ1rT87tTl7iHWOxMrzZcK4=
Subject key identifier:   E7:30:49:88:B8:39:8F:84:58:44:90:75:26:62:21:38:05:B6:94:F5
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       35CAA52025BD9621280473C81B9FA3423A8F56BA
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS393827.roa
Signing time:             Wed 06 May 2026 07:17:20 +0000
ROA not before:           Wed 06 May 2026 07:12:20 +0000
ROA not after:            Wed 05 May 2027 07:17:20 +0000
asID:                     393827
IP address blocks:        207.180.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ca:a5:20:25:bd:96:21:28:04:73:c8:1b:9f:a3:42:3a:8f:56:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:20 2026 GMT
            Not After : May  5 07:17:20 2027 GMT
        Subject: CN=E7304988B8398F84584490752662213805B694F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:c5:a1:75:ee:c8:6c:bf:5a:ce:7d:af:d9:
                    1d:43:a5:55:d5:a7:f0:00:cd:ec:e8:bf:83:38:43:
                    68:9c:58:6f:fc:fb:bc:38:93:4c:ed:74:97:bc:16:
                    ed:9f:38:b7:b2:c7:0e:10:dc:8e:86:15:e1:45:7b:
                    67:d5:a5:d1:9c:7c:f8:4b:89:85:56:27:7d:e0:0f:
                    3f:80:01:eb:6c:e8:8e:28:26:04:98:52:8b:0e:ff:
                    85:57:9a:3c:00:5d:88:f0:b7:70:e3:fd:7a:d2:95:
                    ea:dc:a5:d8:40:f1:38:39:1f:b5:a6:29:e1:d8:b3:
                    14:12:4e:08:2c:72:d5:a0:fc:c3:01:a9:9f:d8:50:
                    c4:6f:84:e8:f8:61:51:b8:2f:3f:2e:e7:da:f9:21:
                    35:6a:4e:a6:a7:fc:38:39:22:48:3c:1b:41:54:99:
                    60:1e:39:6d:4d:9b:38:52:8b:92:c9:b1:fa:eb:19:
                    a2:29:99:b2:3e:2b:1f:9e:f7:93:75:03:42:2b:4c:
                    10:b7:92:d4:2c:ed:5c:2d:69:76:ff:8c:49:fb:fa:
                    bd:ff:90:d2:20:b1:45:15:fb:14:f8:6d:d8:6c:18:
                    0a:f9:78:dd:96:5a:e8:0b:44:cf:46:fb:f1:02:3f:
                    e1:13:ff:3c:68:69:b8:c2:6f:b0:90:fd:67:94:f0:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:30:49:88:B8:39:8F:84:58:44:90:75:26:62:21:38:05:B6:94:F5
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS393827.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:88:92:80:57:05:58:68:a0:ac:4c:fa:14:ce:74:42:3a:
         9c:c6:d0:05:47:a3:7b:2a:a9:de:a1:d8:c7:25:84:e2:11:9d:
         80:44:b1:2e:75:ee:f2:8c:7d:14:16:4f:82:63:ea:ae:55:65:
         a7:26:fe:76:b8:aa:ea:94:2c:67:e7:02:e7:87:a9:8d:3a:c7:
         5d:ea:e8:da:41:05:f7:a5:69:c5:a1:1a:95:d8:47:8b:39:3c:
         a3:a6:2b:0e:1b:96:8c:3a:3a:e5:11:16:76:83:ae:95:91:b4:
         b7:dc:bc:2a:9f:99:c0:47:b9:3e:cd:ce:77:b6:ae:87:60:74:
         2a:36:59:91:f3:ac:cb:7d:8b:84:52:59:03:25:ad:91:3c:e7:
         28:5b:50:f3:bf:67:6b:7c:c2:29:70:e8:64:f3:98:db:51:39:
         ee:d6:21:da:1f:25:d7:1e:1e:15:75:50:c3:0c:f5:b9:e7:c2:
         c8:4f:bc:10:e2:f6:e5:cf:d9:a4:bf:e0:a5:77:e5:6e:16:94:
         71:09:74:d2:ab:7f:89:6b:35:ac:e3:d8:7d:42:1a:7e:ef:d7:
         b3:2b:d2:bc:14:cf:5d:22:1d:ae:94:fe:72:9d:43:8e:ed:d0:
         cf:ef:74:66:05:a9:de:ab:f1:63:84:fb:02:37:a9:6f:fe:52:
         29:5d:7a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:31 2026 by rpki-client