Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS397630.roa
File:                     AS397630.roa (raw, json)
Hash identifier:          L1dIefr+z1Q+w9Obcj5/3oJTz1fSQdMkQ9CKym/672c=
Subject key identifier:   11:16:63:43:FA:B2:13:BC:8A:F8:02:E1:F1:7B:61:4A:EC:44:74:68
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0539F7E765D70413552A3265B34E2BD007EADFAF
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS397630.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     397630
IP address blocks:        207.180.23.0/24 maxlen: 24
                          216.75.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:39:f7:e7:65:d7:04:13:55:2a:32:65:b3:4e:2b:d0:07:ea:df:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=11166343FAB213BC8AF802E1F17B614AEC447468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:f7:fb:f7:bc:97:41:33:e5:c2:ba:8e:65:
                    4b:5f:76:5d:09:c7:12:9d:ba:b1:c0:53:a4:57:de:
                    19:8e:1e:1d:03:aa:f4:cb:a6:bc:57:b0:a7:78:c7:
                    67:87:d9:a5:fc:d7:4d:c7:82:45:8a:f8:09:59:99:
                    d3:64:27:c5:5d:9e:3c:1d:05:0b:e7:37:91:c0:bf:
                    b5:e8:ea:ea:50:32:f2:f0:07:4c:55:2c:97:ff:27:
                    b8:a6:40:d8:01:c2:0c:42:4d:fd:de:9d:8d:13:74:
                    02:94:ee:3c:43:14:22:5f:8d:f3:0c:6f:90:8e:97:
                    e7:2a:ca:c0:fc:7b:ae:cc:f0:dc:3c:ee:32:e6:e7:
                    30:f0:0d:7a:db:78:f4:4a:f4:0c:74:68:82:c8:3c:
                    65:00:2c:b8:ec:7d:57:15:8d:2d:d1:96:96:71:b9:
                    c0:76:92:0f:c3:44:17:5e:e9:d8:96:c3:85:01:d1:
                    c0:03:7e:40:b6:6b:fd:0c:71:01:7a:80:21:66:da:
                    2f:4f:75:c1:d3:ca:bf:50:f9:73:12:64:a1:0e:54:
                    cd:52:c2:ab:82:b6:13:58:7b:18:17:a1:e8:ee:8c:
                    ba:03:52:6a:5f:ae:25:4c:01:bf:a9:a6:e3:d1:86:
                    d9:59:f8:8b:9a:79:b8:eb:1c:9a:66:3b:d4:ee:4d:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:16:63:43:FA:B2:13:BC:8A:F8:02:E1:F1:7B:61:4A:EC:44:74:68
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS397630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.23.0/24
                  216.75.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:55:85:f1:aa:89:6b:6e:fe:8c:db:5f:38:8e:41:97:99:90:
         fb:87:6b:0d:41:10:af:e3:b0:f1:66:38:11:cd:c7:76:30:3f:
         19:db:ad:da:a9:2a:aa:2b:50:ba:e8:58:78:df:f5:cb:1a:87:
         e2:e7:cf:43:6d:7c:14:11:75:0e:dc:16:38:84:32:9b:38:b5:
         67:1d:3a:4c:91:9b:e2:8b:1b:c8:c5:5c:4c:42:d7:98:cc:f7:
         c2:41:a0:6c:cb:4f:b4:51:e5:70:34:1b:f2:94:1c:06:4f:59:
         58:7f:b6:29:71:1d:cd:92:b1:7f:8a:fb:be:db:cc:7f:fd:fc:
         f7:a9:c7:44:fd:40:07:39:3c:40:7c:2c:7c:c2:20:de:26:c8:
         95:e3:69:55:e0:c1:97:8d:ad:30:2f:03:2d:bd:41:8b:57:d8:
         24:4a:39:83:11:02:ee:10:bc:53:2a:df:11:7c:69:0d:c9:91:
         3d:0f:ce:3c:9e:b5:6e:67:d5:b6:83:ec:ea:22:a2:a6:66:c3:
         54:18:25:95:71:2f:97:a7:b9:79:ad:fb:4d:43:a4:76:50:33:
         5a:0e:85:05:11:39:e8:11:d9:46:1b:c3:e1:92:58:21:75:61:
         98:23:be:35:4f:d6:70:c7:e8:0e:a9:ea:43:2b:03:b8:f8:c9:
         c9:47:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:33 2026 by rpki-client