Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS46887.roa
File:                     AS46887.roa (raw, json)
Hash identifier:          dUVg11R/hXmnF4TIrFQnYcx40OmazanXALFI9fEG6wY=
Subject key identifier:   3D:B0:79:B5:E5:52:DC:7E:DE:AB:68:7A:06:FB:BD:D7:BF:8A:E6:F2
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       5BABC5014F7F1241F1A86EF35E1B16EA2F763DA9
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS46887.roa
Signing time:             Wed 06 May 2026 07:17:17 +0000
ROA not before:           Wed 06 May 2026 07:12:17 +0000
ROA not after:            Wed 05 May 2027 07:17:17 +0000
asID:                     46887
IP address blocks:        207.180.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ab:c5:01:4f:7f:12:41:f1:a8:6e:f3:5e:1b:16:ea:2f:76:3d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:17 2026 GMT
            Not After : May  5 07:17:17 2027 GMT
        Subject: CN=3DB079B5E552DC7EDEAB687A06FBBDD7BF8AE6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:76:6b:c8:c7:db:56:ef:b2:cd:50:29:2b:
                    75:22:b0:63:8d:a4:38:b3:25:88:6d:c1:47:3e:05:
                    b6:ca:18:50:83:cc:35:21:59:0c:ca:9b:0f:92:80:
                    8b:18:df:e7:31:34:48:c3:c9:66:5c:87:7d:11:1d:
                    ca:f6:1c:ff:2f:c1:81:39:81:34:82:77:6f:3e:fc:
                    47:82:b9:44:e0:5a:4e:2c:47:df:16:16:d2:78:f2:
                    6e:13:cd:a8:5b:7e:a2:2b:9c:82:d9:83:e0:7d:7e:
                    57:53:24:9a:3c:51:30:48:3c:84:26:77:2e:23:32:
                    bf:97:30:f9:39:67:6e:c4:3f:b4:01:e0:95:c8:e7:
                    38:5d:02:57:33:80:85:1e:36:3f:f2:45:25:ec:34:
                    f8:59:2b:c6:61:8c:f8:c5:91:a3:e5:12:d7:1c:d9:
                    78:12:ed:b6:1d:59:c6:9b:31:78:da:93:a7:9e:74:
                    43:27:e7:de:23:70:0f:a5:c2:29:f7:87:3b:ad:83:
                    54:39:d9:0d:b9:40:ad:8f:f9:af:cc:11:71:1f:66:
                    33:94:97:91:1d:53:87:18:a8:45:ac:36:42:9d:7b:
                    bc:39:2b:c4:33:b2:45:dc:fb:12:0c:ad:1d:ba:37:
                    49:df:77:8a:4e:0b:0f:bf:0b:b6:a2:de:fb:76:9c:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B0:79:B5:E5:52:DC:7E:DE:AB:68:7A:06:FB:BD:D7:BF:8A:E6:F2
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS46887.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:19:0e:85:5e:57:f8:06:f6:bc:7c:4a:ac:b1:cf:b4:de:
         5c:73:37:84:4b:00:30:ac:99:77:39:14:ac:40:53:f4:8a:6b:
         ef:99:6f:67:61:f1:9d:ef:d9:78:d4:98:68:2a:de:76:f3:22:
         c4:d0:39:bd:40:0a:20:0b:b7:e5:8b:34:6e:51:27:b3:2b:d9:
         05:52:ee:79:6c:99:28:4e:a1:27:0e:bd:fb:03:58:72:61:bc:
         e3:eb:f1:36:98:94:9c:15:0c:df:59:57:33:55:6c:1c:73:c1:
         f2:4a:48:8f:0b:d0:63:16:b5:c9:dd:cf:c9:c2:c7:9d:2e:d1:
         d5:88:bd:84:77:90:37:e5:91:aa:2f:92:12:eb:ad:3c:9d:d7:
         87:1f:fc:0a:be:19:17:1a:9d:4a:1c:7c:d4:43:57:dd:b5:17:
         81:61:79:e9:61:f1:4c:57:a4:96:6a:2f:b4:cf:c1:fd:80:bc:
         b0:3e:ed:de:bb:bc:df:21:75:77:7c:09:2d:66:fc:20:3e:c7:
         d1:d8:33:eb:f1:cb:6c:4b:50:88:ae:e6:6a:7e:cb:26:75:dd:
         be:d1:b3:10:e9:3b:bc:d1:d3:b8:9a:77:07:08:80:f4:94:8c:
         17:a9:c8:cc:41:92:d8:e0:47:fb:5e:7e:2e:13:b6:7d:9c:b7:
         c8:bf:e9:13
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUW6vFAU9/EkHxqG7zXhsW6i92PakwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE3WhcNMjcwNTA1MDcxNzE3
WjAzMTEwLwYDVQQDEygzREIwNzlCNUU1NTJEQzdFREVBQjY4N0EwNkZCQkREN0JG
OEFFNkYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6l2a8jH21bv
ss1QKSt1IrBjjaQ4syWIbcFHPgW2yhhQg8w1IVkMypsPkoCLGN/nMTRIw8lmXId9
ER3K9hz/L8GBOYE0gndvPvxHgrlE4FpOLEffFhbSePJuE82oW36iK5yC2YPgfX5X
UySaPFEwSDyEJncuIzK/lzD5OWduxD+0AeCVyOc4XQJXM4CFHjY/8kUl7DT4WSvG
YYz4xZGj5RLXHNl4Eu22HVnGmzF42pOnnnRDJ+feI3APpcIp94c7rYNUOdkNuUCt
j/mvzBFxH2YzlJeRHVOHGKhFrDZCnXu8OSvEM7JF3PsSDK0dujdJ33eKTgsPvwu2
ot77dpwSTQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFD2webXlUtx+3qtoegb7vde/
iubyMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzQ2ODg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7Q9MA0GCSqGSIb3DQEBCwUAA4IB
AQALPhkOhV5X+Ab2vHxKrLHPtN5cczeESwAwrJl3ORSsQFP0imvvmW9nYfGd79l4
1JhoKt528yLE0Dm9QAogC7flizRuUSezK9kFUu55bJkoTqEnDr37A1hyYbzj6/E2
mJScFQzfWVczVWwcc8HySkiPC9BjFrXJ3c/JwsedLtHViL2Ed5A35ZGqL5IS6608
ndeHH/wKvhkXGp1KHHzUQ1fdtReBYXnpYfFMV6SWai+0z8H9gLywPu3eu7zfIXV3
fAktZvwgPsfR2DPr8ctsS1CIruZqfssmdd2+0bMQ6Tu80dO4mncHCID0lIwXqcjM
QZLY4Ef7Xn4uE7Z9nLfIv+kT
-----END CERTIFICATE-----
Generated at Thu May 7 04:13:04 2026 by rpki-client