Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS49608.roa
File:                     AS49608.roa (raw, json)
Hash identifier:          4PZ9qtOFcLCXHXi8p6ws7VxDWNVYpSs/fmj1jB0vCqs=
Subject key identifier:   1B:DA:CA:D5:9A:94:71:0A:17:54:AB:33:80:7E:A1:3A:BB:A4:E4:90
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       233B140FBC68A622D5978D95E47B721A708E921C
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS49608.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     49608
IP address blocks:        207.180.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3b:14:0f:bc:68:a6:22:d5:97:8d:95:e4:7b:72:1a:70:8e:92:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=1BDACAD59A94710A1754AB33807EA13ABBA4E490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:37:35:2f:9e:70:c6:f3:e8:bc:0a:ae:21:
                    87:29:4c:cc:f6:b2:45:c6:ce:2e:9c:ba:4f:c5:13:
                    fd:76:9f:d2:61:07:56:41:fb:d5:e3:d7:33:9a:b9:
                    06:ba:c8:2c:67:39:54:ee:1e:13:66:5e:35:0a:4a:
                    5d:4d:75:ae:11:bc:ec:92:ee:a7:1a:89:a7:b2:dc:
                    a3:aa:57:ad:7c:96:b1:e6:74:a2:07:ff:b7:14:42:
                    4d:fa:c2:af:1d:44:6b:44:18:4b:30:df:d8:58:52:
                    bf:1a:09:48:85:e5:3e:5c:45:bc:b7:ed:01:2e:ec:
                    27:96:23:49:ec:5e:dc:55:8c:a0:3c:9a:63:bf:60:
                    58:f1:fa:35:12:01:fc:04:db:7a:a3:2a:55:bd:63:
                    10:41:7b:e5:8a:69:13:1f:d3:47:72:d3:60:0e:09:
                    c9:04:73:ba:12:bb:d9:07:81:61:66:43:2f:da:39:
                    77:df:51:61:f8:ca:1d:2e:5c:b4:84:54:51:5c:db:
                    de:18:be:e7:ad:d0:d5:70:5d:8b:26:86:b0:49:3a:
                    7c:84:ae:34:2e:17:e8:d6:d6:97:d8:72:a0:c3:a5:
                    b5:51:f7:4d:f5:0b:90:41:29:10:7d:c4:44:04:ea:
                    f4:53:ff:cc:5e:4e:f7:fb:da:48:e8:64:84:f1:37:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DA:CA:D5:9A:94:71:0A:17:54:AB:33:80:7E:A1:3A:BB:A4:E4:90
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS49608.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f7:b1:c4:2d:51:f3:87:b7:45:36:b4:34:f3:51:74:eb:a8:
         cf:fe:17:ff:d9:e7:71:a9:94:8c:6d:8b:5e:ad:d8:fc:44:cc:
         47:5f:dd:90:53:25:22:69:f9:97:32:85:95:80:9e:47:d9:18:
         59:1e:62:37:22:4b:ea:b3:5e:b6:c6:12:36:9c:53:d2:73:56:
         7d:3f:d6:d1:02:f6:4f:46:87:d4:67:f5:d9:c9:04:cb:2c:8a:
         6a:8c:1d:a0:95:50:0e:8b:de:b5:8b:18:44:10:25:85:4a:8d:
         10:78:dd:cd:ce:25:e8:a9:b7:c0:a4:0e:1b:c8:ee:c6:f5:32:
         d3:d6:cb:ac:90:37:20:2e:02:90:dc:fb:b7:d8:4c:46:7f:6e:
         5b:23:f2:18:b9:ea:8a:71:ea:19:8a:fd:41:df:49:8d:f2:fb:
         1c:a9:2e:cd:2e:ad:13:6d:63:27:2f:a4:d7:9f:46:aa:82:3a:
         00:9b:4e:ce:22:aa:79:78:04:ad:2f:2b:5b:0d:80:0a:0e:46:
         dd:99:0d:a1:c8:62:81:55:c7:86:f1:60:23:0d:28:27:56:a5:
         69:f4:57:e7:61:a8:1c:7c:ec:13:62:f7:46:38:1a:9a:ea:bb:
         fc:c2:e0:ef:99:97:27:6a:6c:05:b6:b3:a3:2f:6d:cf:9e:ad:
         11:35:3c:7e
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUIzsUD7xopiLVl42V5HtyGnCOkhwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE4WhcNMjcwNTA1MDcxNzE4
WjAzMTEwLwYDVQQDEygxQkRBQ0FENTlBOTQ3MTBBMTc1NEFCMzM4MDdFQTEzQUJC
QTRFNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG43NS+ecMbz
6LwKriGHKUzM9rJFxs4unLpPxRP9dp/SYQdWQfvV49czmrkGusgsZzlU7h4TZl41
CkpdTXWuEbzsku6nGomnstyjqletfJax5nSiB/+3FEJN+sKvHURrRBhLMN/YWFK/
GglIheU+XEW8t+0BLuwnliNJ7F7cVYygPJpjv2BY8fo1EgH8BNt6oypVvWMQQXvl
imkTH9NHctNgDgnJBHO6ErvZB4FhZkMv2jl331Fh+ModLly0hFRRXNveGL7nrdDV
cF2LJoawSTp8hK40Lhfo1taX2HKgw6W1UfdN9QuQQSkQfcREBOr0U//MXk73+9pI
6GSE8TfKkQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBvaytWalHEKF1SrM4B+oTq7
pOSQMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzQ5NjA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QGMA0GCSqGSIb3DQEBCwUAA4IB
AQAe97HELVHzh7dFNrQ081F066jP/hf/2edxqZSMbYterdj8RMxHX92QUyUiafmX
MoWVgJ5H2RhZHmI3Ikvqs162xhI2nFPSc1Z9P9bRAvZPRofUZ/XZyQTLLIpqjB2g
lVAOi961ixhEECWFSo0QeN3NziXoqbfApA4byO7G9TLT1suskDcgLgKQ3Pu32ExG
f25bI/IYueqKceoZiv1B30mN8vscqS7NLq0TbWMnL6TXn0aqgjoAm07OIqp5eASt
LytbDYAKDkbdmQ2hyGKBVceG8WAjDSgnVqVp9FfnYagcfOwTYvdGOBqa6rv8wuDv
mZcnamwFtrOjL23Pnq0RNTx+
-----END CERTIFICATE-----
Generated at Thu May 7 04:12:35 2026 by rpki-client