Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS401560.roa
File:                     AS401560.roa (raw, json)
Hash identifier:          x0/AsasNDWTZC8ro4BYS5ViKJtX4BSEuMRhn/cx1vEY=
Subject key identifier:   45:BC:70:23:74:25:7B:B9:62:62:67:F3:97:54:D5:10:1B:DE:F5:00
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       5A953E759AF60D381D4FAA799B88AAB127A64F5A
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS401560.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     401560
IP address blocks:        207.180.11.0/24 maxlen: 24
                          216.75.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:95:3e:75:9a:f6:0d:38:1d:4f:aa:79:9b:88:aa:b1:27:a6:4f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=45BC702374257BB9626267F39754D5101BDEF500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:45:0f:ea:e3:60:97:35:d7:2d:1c:3a:73:
                    c3:06:0c:0a:a9:b5:6a:7c:58:5b:9f:e8:2a:dc:d8:
                    7d:db:e0:3a:4f:13:33:54:aa:15:0f:5f:c9:33:82:
                    39:af:55:fe:37:16:08:23:92:9d:d9:1e:3a:9b:23:
                    d4:a8:9a:4a:a3:97:3e:00:52:6f:d6:1e:cc:e7:b3:
                    8e:64:3e:29:5c:b7:e0:01:d3:ba:7c:a5:98:c1:21:
                    78:17:d2:78:84:3b:7b:aa:b2:32:95:9b:e4:8f:f6:
                    60:1f:71:76:d5:97:72:11:ab:60:94:6a:15:33:b2:
                    b3:24:8b:53:b4:ed:18:28:9f:41:3e:a4:5b:0f:3b:
                    ef:bc:1d:09:8d:a7:d6:6d:7d:e5:02:07:5c:f8:be:
                    f7:ed:bb:5b:40:39:00:e4:08:e3:bb:76:c4:da:07:
                    83:99:bc:4e:26:eb:ad:52:e8:39:f6:f2:4a:99:fd:
                    37:94:69:19:3e:c1:e7:e7:1b:b3:cb:fa:6a:95:f8:
                    28:28:8b:f6:e6:03:b2:34:f7:2d:30:93:3d:81:27:
                    2b:3f:d8:4d:2a:a6:58:9b:c7:79:f1:94:59:f7:db:
                    0a:35:1d:8a:b8:7d:6a:f5:82:a2:17:d8:38:4e:2c:
                    6d:99:ce:f6:3e:71:5e:e2:42:5e:37:3d:b9:9e:e1:
                    72:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BC:70:23:74:25:7B:B9:62:62:67:F3:97:54:D5:10:1B:DE:F5:00
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS401560.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.11.0/24
                  216.75.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:93:ca:f2:32:2e:e9:03:eb:b3:b1:38:b4:49:b7:4a:d5:2a:
         b9:91:8e:c6:46:65:3c:c9:f3:ba:c9:f2:45:04:56:45:c3:78:
         7c:04:e2:67:23:06:f5:80:1a:da:b1:5a:e8:ea:d6:60:93:1d:
         e6:00:e4:2d:4b:05:7c:0e:2f:ff:cf:95:f1:3d:0b:97:3d:c5:
         9f:43:bf:6d:a1:85:38:d9:be:4a:ba:d4:51:51:55:0b:8c:72:
         c6:3b:3f:ad:ac:72:fd:ec:c8:de:12:08:c3:05:ad:5c:b4:1f:
         e6:b1:60:bc:73:fc:08:c7:aa:d0:d7:4b:ad:65:64:2f:66:e5:
         28:c7:b4:89:07:72:7a:8d:1a:70:15:b8:c8:3a:70:1c:d0:58:
         f6:52:74:d9:85:e9:75:e3:99:9b:a8:0c:71:13:cf:00:7f:40:
         f6:bc:39:9a:27:91:76:2d:b6:38:c6:59:97:1d:0c:41:25:7d:
         55:18:ff:31:bb:60:18:73:35:29:5d:e8:95:34:b2:d5:3f:5f:
         a9:f5:4c:13:d7:d6:10:b7:25:26:af:f8:0c:3e:59:25:74:e8:
         71:c2:aa:bc:ba:51:9e:b3:39:e0:03:ac:f6:74:cd:11:ab:32:
         d1:c4:b5:98:f2:69:7d:42:10:a9:b3:3e:da:17:73:3c:b5:fc:
         8d:4e:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:17 2026 by rpki-client