Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS401856.roa
File:                     AS401856.roa (raw, json)
Hash identifier:          dpWg3/fGqlE6JDLB2f9NwZDj/hBlnuBIP/p5mE46GaA=
Subject key identifier:   B2:E1:CB:31:11:2D:2D:81:27:1E:20:CB:C0:33:25:E3:A9:39:AD:80
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       081093CAFAD0E89507A76926CE8EA5FE2DD5409A
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS401856.roa
Signing time:             Wed 06 May 2026 07:17:19 +0000
ROA not before:           Wed 06 May 2026 07:12:19 +0000
ROA not after:            Wed 05 May 2027 07:17:19 +0000
asID:                     401856
IP address blocks:        207.180.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:10:93:ca:fa:d0:e8:95:07:a7:69:26:ce:8e:a5:fe:2d:d5:40:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:19 2026 GMT
            Not After : May  5 07:17:19 2027 GMT
        Subject: CN=B2E1CB31112D2D81271E20CBC03325E3A939AD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:80:28:fd:02:b7:5e:0a:56:b5:fc:9c:27:3a:
                    3a:70:28:77:12:d7:fc:4b:f2:99:92:62:64:01:69:
                    0d:ff:03:a4:ca:3b:e3:b3:b0:c5:ff:f2:1f:0e:1f:
                    27:df:fd:d0:ae:4a:79:e4:c7:65:91:d6:68:3f:e5:
                    15:4a:81:d8:7d:0a:6d:b0:94:04:e8:a6:8a:14:55:
                    b3:96:82:24:fd:6a:a9:77:20:01:7b:bb:79:ca:40:
                    83:d7:48:77:e3:8c:c2:02:73:7c:1c:15:97:bc:52:
                    1e:7c:32:5d:5d:d5:5a:b1:ba:dc:74:fc:28:57:3c:
                    91:2f:46:9d:85:0e:8c:3b:a6:3c:bc:02:6d:70:10:
                    be:8f:f9:d4:e7:21:8c:61:01:a8:4f:b8:70:39:0b:
                    49:99:b1:d6:5e:41:cb:53:c0:65:70:b6:9f:8e:99:
                    a2:2a:ba:8e:31:58:c7:6b:c0:6a:4d:02:dc:c0:68:
                    1f:43:45:5d:20:f0:46:f7:6f:0f:56:ac:5a:6d:67:
                    6d:ba:d5:68:cc:e3:5e:be:33:13:30:5c:f6:a1:f2:
                    ff:6d:ca:e3:58:22:ab:ae:8d:f9:98:92:d0:0e:e6:
                    64:a1:42:f2:69:81:ca:30:7b:f4:06:40:d8:21:78:
                    66:11:8f:0a:e0:94:a9:2e:db:c0:22:18:0b:25:98:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E1:CB:31:11:2D:2D:81:27:1E:20:CB:C0:33:25:E3:A9:39:AD:80
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS401856.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b2:94:69:9f:7e:e7:fc:ca:f1:1b:57:18:7f:65:76:19:f4:
         8d:85:11:d3:7e:ae:e0:30:c4:e8:06:19:26:4d:1c:2a:69:e4:
         31:ae:0f:f3:bc:99:77:9e:ad:0f:20:19:f7:95:93:4e:24:b8:
         83:ea:30:3e:7e:c5:35:ed:58:8c:78:df:73:c5:e6:d8:f0:ce:
         9e:82:ca:b4:54:63:0a:c2:0c:c4:cf:b2:69:4f:16:87:93:5a:
         7c:56:6c:98:33:d2:32:ee:f7:98:b3:e6:1f:d8:ea:fb:46:85:
         ce:a0:e7:1e:ce:21:40:49:1d:d6:eb:5c:7b:58:53:46:ee:e9:
         55:35:88:09:78:0a:cc:ea:2a:e7:2b:13:bd:0d:ed:70:76:8e:
         bb:f8:a4:87:d8:a5:fd:39:d9:85:8f:8a:61:c2:00:98:3a:3c:
         62:c3:45:b7:a6:8c:86:0b:86:23:b1:ee:30:98:f0:81:c5:dd:
         0a:3c:ec:42:3a:2d:63:24:fe:4f:00:ef:f5:75:87:8c:a5:f8:
         b8:fa:68:88:74:7b:20:67:3f:8a:9f:66:3c:2d:1a:b8:3b:2a:
         96:1c:68:e4:61:ec:9f:42:c0:7d:8d:40:0f:1c:9d:a3:cc:36:
         ce:97:37:16:d9:19:5e:cb:98:3e:e2:36:fe:da:2f:f9:63:2f:
         17:13:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:04 2026 by rpki-client