Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402186.roa
File:                     AS402186.roa (raw, json)
Hash identifier:          quFh/mNLU3iFrTrMF+QuBcvT0TDPiHkaOY56ybrg21w=
Subject key identifier:   A9:FA:AC:32:7E:C0:2D:D8:37:4E:99:DF:69:79:E9:DA:6C:3E:CF:42
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       1F0C4B699985B221E936B9C965A9498B33D1291C
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402186.roa
Signing time:             Wed 06 May 2026 07:17:20 +0000
ROA not before:           Wed 06 May 2026 07:12:20 +0000
ROA not after:            Wed 05 May 2027 07:17:20 +0000
asID:                     402186
IP address blocks:        207.180.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0c:4b:69:99:85:b2:21:e9:36:b9:c9:65:a9:49:8b:33:d1:29:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:20 2026 GMT
            Not After : May  5 07:17:20 2027 GMT
        Subject: CN=A9FAAC327EC02DD8374E99DF6979E9DA6C3ECF42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:1d:db:3f:8c:71:f6:c2:7b:b7:47:10:09:
                    68:a7:90:72:0b:db:c7:21:2f:ed:83:5d:a2:9e:74:
                    85:17:93:6c:cc:bb:36:62:d1:64:67:fb:d4:2f:6e:
                    06:ed:2c:66:22:2f:36:2f:23:fc:b0:ed:7c:6e:40:
                    af:69:4d:9b:c8:7a:c7:3a:6b:28:80:7f:9d:e6:84:
                    d2:ab:d8:0f:87:9a:23:1c:a0:b1:57:02:40:ce:8d:
                    2f:0b:4b:29:ef:94:46:8e:db:8b:6c:9c:47:c1:5a:
                    e6:ef:20:dd:32:e2:13:17:70:63:b0:e9:fd:65:34:
                    c7:b0:f0:38:52:f1:b6:22:d7:41:9e:fc:48:ea:ca:
                    f2:25:ab:40:b5:28:b5:ea:af:c6:b7:b1:68:50:24:
                    53:77:80:ba:b4:6f:c9:83:9d:21:b9:1c:f5:43:39:
                    88:fc:b7:bd:ef:15:99:6d:6c:98:13:cc:e0:df:56:
                    ee:16:91:d4:ce:ca:a9:37:03:28:66:3d:3e:62:46:
                    f6:ee:7e:80:5e:cc:24:d1:45:bb:b5:36:6b:d0:2c:
                    62:3e:89:6d:93:ee:f3:80:9b:b8:b8:ad:32:ea:59:
                    0a:90:f0:44:f1:22:98:37:25:33:f4:34:ac:b6:98:
                    d5:6f:01:fe:f7:56:6d:a1:c1:0a:69:b0:17:a0:e4:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FA:AC:32:7E:C0:2D:D8:37:4E:99:DF:69:79:E9:DA:6C:3E:CF:42
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f2:da:85:7b:ae:25:88:f8:06:65:00:91:4b:44:e5:7a:c1:
         5e:e7:12:b4:30:1a:7c:d3:cd:17:63:1a:6f:61:77:db:dd:71:
         78:5d:f4:3a:71:12:59:5d:9a:40:d8:d4:be:02:6e:17:5a:3a:
         10:d8:54:03:0a:a3:f4:ab:cf:dd:14:e2:80:fd:2a:bd:5d:ad:
         d8:46:e7:e9:c8:7f:6b:b3:96:62:32:68:8a:b7:48:73:da:b4:
         cd:a4:80:ce:2e:24:ff:24:e6:23:7a:2b:e1:d2:25:b7:27:cd:
         e8:de:5c:e5:84:09:34:c3:f1:72:83:46:9b:5e:e6:8d:8b:31:
         b5:0d:26:22:fa:99:26:d5:24:86:35:65:b3:92:14:c2:92:ae:
         75:be:10:71:05:05:9d:23:2e:75:31:45:95:88:ba:03:91:7f:
         8c:1e:ea:80:88:60:a6:11:db:b1:e7:3e:94:2d:12:ca:6f:dd:
         b8:69:25:3c:33:d1:69:c4:14:54:20:72:e6:fb:bf:ae:a2:7c:
         f7:ef:b9:3a:28:26:c8:29:65:06:3b:da:21:fb:39:cb:36:bf:
         b1:f8:a8:7f:fb:dc:3d:a0:c6:da:48:d8:0e:75:1e:e9:d9:b9:
         4a:dc:39:78:03:26:71:ea:ff:8c:ce:3d:2e:55:2a:18:a2:29:
         91:41:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:17 2026 by rpki-client