Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402817.roa
File:                     AS402817.roa (raw, json)
Hash identifier:          eUvavRa/uCLEr4hP8N3IK2GTq0ZoEmPFu90YyvF3qf0=
Subject key identifier:   7E:13:DF:35:60:A0:61:47:51:5F:57:AE:31:E9:25:6D:DB:7B:54:61
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       30A1B1E519DC3C33A810846DDBBBD77CAD5A0776
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402817.roa
Signing time:             Mon 02 Nov 2026 19:25:34 +0000
ROA not before:           Mon 02 Nov 2026 19:20:34 +0000
ROA not after:            Mon 01 Nov 2027 19:25:34 +0000
asID:                     402817
IP address blocks:        207.180.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Nov 2026 21:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a1:b1:e5:19:dc:3c:33:a8:10:84:6d:db:bb:d7:7c:ad:5a:07:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Nov  2 19:20:34 2026 GMT
            Not After : Nov  1 19:25:34 2027 GMT
        Subject: CN=7E13DF3560A06147515F57AE31E9256DDB7B5461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:56:35:03:65:19:b7:12:5e:6e:32:58:7c:ec:
                    1d:50:38:6f:0d:75:de:8c:8e:9f:77:a5:91:c3:ce:
                    43:7b:09:17:20:81:07:68:3f:42:f5:ae:d9:a4:8e:
                    09:a4:a2:99:c7:b5:21:b1:13:20:e5:b1:51:a0:80:
                    10:cc:8a:6e:b6:95:ce:30:e6:5a:7c:fb:a7:13:32:
                    f8:5b:09:0d:66:98:3c:9e:50:79:7d:5f:9c:ee:bd:
                    4f:12:6d:c3:06:57:46:34:23:f1:f8:8d:be:03:c9:
                    f3:52:5e:18:5e:17:a1:3f:00:6a:e0:05:13:9f:a5:
                    51:73:e7:64:2a:47:5e:d6:66:49:6e:b9:c5:8f:99:
                    1b:33:c1:ae:47:94:3a:c5:46:9c:a0:81:b2:b5:90:
                    fc:db:be:47:32:30:e6:00:05:9e:f5:bd:92:af:64:
                    41:4d:7e:e6:28:3e:9d:ae:5d:8c:7e:9b:86:9b:b8:
                    85:21:71:4b:13:49:60:9e:91:10:2c:e1:55:3e:8c:
                    b8:bc:11:34:77:db:32:cc:d9:30:4f:96:42:e2:be:
                    cf:42:e9:e1:36:f4:64:3c:f0:18:8a:3e:8f:bd:23:
                    25:37:d1:bf:70:46:7d:db:bc:b6:12:95:0b:5a:99:
                    70:c8:15:ce:9c:49:3f:20:51:91:78:81:20:24:82:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:13:DF:35:60:A0:61:47:51:5F:57:AE:31:E9:25:6D:DB:7B:54:61
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402817.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:b7:10:50:80:94:9c:55:1a:4c:37:82:fb:fa:46:66:b7:
         06:cd:33:08:50:0e:6e:63:26:d1:f0:83:dd:95:30:a0:88:6a:
         6c:ee:c6:72:61:6c:a5:df:d5:ac:44:4c:81:9e:a7:5e:0b:a2:
         39:36:3a:3f:48:0d:c6:06:2a:bc:9b:d2:6b:a7:d2:1a:a4:4c:
         ee:7a:89:d7:78:04:6b:22:3e:61:5d:f2:c2:e5:29:b8:b8:44:
         a2:71:c4:40:96:84:56:46:cc:45:75:5d:ec:03:10:e3:50:99:
         45:a7:46:61:01:56:da:cc:9d:bc:39:49:9b:2f:0b:10:8d:8e:
         a6:e9:ca:cd:cd:8e:41:aa:c8:a3:2a:04:03:d5:0e:fc:14:52:
         1f:76:75:96:41:b8:2e:57:ed:6e:b9:46:cd:16:e2:51:d4:64:
         f4:3f:d6:ef:1a:89:9d:41:43:0a:e1:cf:12:a9:3f:ac:f3:af:
         af:28:46:8a:b3:d7:eb:08:da:bf:50:e0:ea:77:b9:38:87:8b:
         1c:37:4e:a2:31:45:0b:7d:05:76:03:d5:7d:64:c8:90:cf:10:
         e0:63:2c:27:8a:9b:66:cf:f9:c7:6d:fc:28:88:6b:0f:29:23:
         9a:9e:f5:95:27:ee:f6:fd:f7:87:af:8a:31:f0:c4:6c:0c:8c:
         d1:6c:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:50:38 2026 by rpki-client