Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402044.roa
File:                     AS402044.roa (raw, json)
Hash identifier:          zCWOuIpF9TBu+0WEDlE5BKwtzskE19vn/2kJr7/dSRM=
Subject key identifier:   DA:6B:F1:BD:96:A3:F7:99:F2:AA:23:45:27:A4:E3:F7:D7:A0:72:39
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       61364CC50F7B68A16667826CF9A311638063E1B9
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402044.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     402044
IP address blocks:        207.180.21.0/24 maxlen: 24
                          216.75.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:36:4c:c5:0f:7b:68:a1:66:67:82:6c:f9:a3:11:63:80:63:e1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=DA6BF1BD96A3F799F2AA234527A4E3F7D7A07239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:60:ca:ea:fa:41:3a:94:8a:b3:6e:73:0e:
                    4d:14:d7:ff:f7:c1:09:e3:0a:c6:02:20:c2:12:60:
                    63:71:bc:a5:0f:67:70:cd:16:f2:50:41:8c:de:ba:
                    b8:b0:dd:9e:28:f6:4d:f0:1e:bc:a7:2b:05:28:79:
                    c4:30:28:8c:ab:2f:86:67:e4:70:44:6a:c9:6f:1a:
                    3e:2d:f1:d2:18:34:88:c4:59:0d:6a:38:ff:a9:a9:
                    2c:10:8a:89:a3:a9:e5:76:70:08:c2:51:1f:b2:f9:
                    f4:aa:ec:27:45:2c:3c:d6:be:80:7d:2a:ab:3a:68:
                    01:6b:a1:9e:e4:8b:f7:85:97:23:ed:7d:67:d9:9e:
                    df:c6:2d:35:e4:7c:62:a1:dc:f7:b1:29:69:b4:c6:
                    b4:a3:c2:17:29:e3:8f:84:9d:c9:ac:53:e9:62:f9:
                    12:34:9b:04:00:09:e4:c8:3a:f6:1f:aa:95:4d:1e:
                    ce:f9:2e:b4:70:81:3e:3b:3b:ee:56:35:e2:1a:50:
                    20:5e:93:72:ae:fe:65:11:67:08:df:a2:8f:88:eb:
                    fe:d2:6f:4b:c7:74:1a:2d:c8:4c:d8:04:fd:03:66:
                    27:12:d2:b5:28:5c:f0:56:41:6c:93:97:88:ef:ec:
                    22:86:bb:ba:fa:cf:61:8d:9c:bf:f1:6e:23:06:76:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6B:F1:BD:96:A3:F7:99:F2:AA:23:45:27:A4:E3:F7:D7:A0:72:39
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402044.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.21.0/24
                  216.75.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e3:ff:7e:e9:07:ae:b8:54:8c:54:1e:7e:58:97:0a:af:11:
         a4:1a:80:d1:f2:03:a2:a9:c2:66:03:39:9f:aa:aa:f0:60:b6:
         55:f9:b0:72:ee:c0:b5:f3:fe:7e:cb:5c:db:9d:ba:78:72:f4:
         1d:cb:d4:cd:88:cc:a1:c1:16:c1:10:c0:e9:fe:be:4e:85:0e:
         c9:87:84:1e:50:da:8a:88:81:50:38:fd:10:a4:e2:4d:da:0d:
         fa:a6:24:a2:a2:24:d8:69:cd:4b:c0:db:65:d8:c1:92:79:e8:
         f5:c3:aa:e5:6e:8c:a2:81:36:e7:a1:03:c1:9e:90:34:77:15:
         cd:6d:1d:fb:7e:8d:da:cd:07:e1:a7:6e:43:94:4e:cf:f5:b7:
         da:f9:18:09:c2:a1:20:8f:96:3c:e4:53:0c:b5:6c:37:79:33:
         d9:ee:f8:de:9e:85:4c:59:b0:bc:99:dc:7f:c0:0c:0e:d9:30:
         dd:74:3b:f2:4e:4f:26:95:89:97:c1:0b:c5:d8:a2:cd:2f:66:
         d7:2d:a1:f4:ab:ce:85:73:01:9d:88:dc:96:23:bd:f9:32:2c:
         20:0b:0a:39:4b:4f:0e:03:b5:1e:a9:46:eb:67:69:cf:4b:ff:
         8a:cd:65:9f:c4:1e:b2:4f:25:e9:58:05:24:3c:50:d0:3d:ea:
         f3:58:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:01 2026 by rpki-client