Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS7922.roa
File:                     AS7922.roa (raw, json)
Hash identifier:          bBS2iv4lYVCjpdOAg+48EbvRbDTlGmlRXOhnTWKhE68=
Subject key identifier:   34:B5:E1:5E:E8:2B:03:E7:8E:E1:89:BA:9D:95:85:33:2C:3B:49:30
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       4511B32139B46ECD8599B17F1D3AB1F4295632CD
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS7922.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     7922
IP address blocks:        207.180.8.0/24 maxlen: 24
                          207.180.9.0/24 maxlen: 24
                          207.180.15.0/24 maxlen: 24
                          207.180.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:11:b3:21:39:b4:6e:cd:85:99:b1:7f:1d:3a:b1:f4:29:56:32:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=34B5E15EE82B03E78EE189BA9D9585332C3B4930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:3c:5e:55:ae:6a:33:ad:0a:15:fd:76:07:
                    42:e1:f2:c6:fe:db:b8:2d:ce:69:a9:c0:d3:ba:0f:
                    cb:dc:ab:c6:8f:8d:af:37:48:75:22:22:fc:1e:63:
                    d6:61:aa:0e:90:57:13:18:e9:8b:60:09:4d:0e:65:
                    f6:f8:a3:f2:aa:22:ea:bb:bb:fa:48:94:4a:c7:6e:
                    01:ed:33:cc:b8:eb:72:7e:8c:42:0f:c9:3b:f5:02:
                    30:73:71:fa:09:22:09:77:58:46:d7:8e:f3:d0:98:
                    38:56:a2:51:c5:2d:32:0b:9c:cb:25:57:85:17:e5:
                    72:93:f8:32:96:b4:dd:75:31:cb:56:cc:11:42:ec:
                    ff:03:9f:66:84:d5:af:e7:1d:17:aa:e4:33:9c:ef:
                    b5:86:c6:7c:2b:34:c3:21:69:94:e7:f5:ea:95:e5:
                    ab:d5:cb:e0:97:5c:37:30:4e:5f:e7:6c:f0:4c:d2:
                    a8:84:f9:b5:b7:43:aa:24:02:46:65:57:66:00:d9:
                    6e:a5:1a:ce:df:44:19:e6:d4:3e:0c:bf:66:f2:f1:
                    f4:ea:aa:47:82:7a:52:14:0b:6c:85:e8:a0:6a:e2:
                    e1:3e:4c:57:fa:dd:96:01:a4:6d:a8:53:fa:e9:03:
                    dd:dc:df:c8:96:ea:5a:9f:26:0c:3c:49:0e:42:86:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:E1:5E:E8:2B:03:E7:8E:E1:89:BA:9D:95:85:33:2C:3B:49:30
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS7922.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.8.0/23
                  207.180.15.0/24
                  207.180.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:19:30:63:e2:7b:22:55:bc:50:e8:66:b3:13:c3:99:b5:a4:
         fc:19:ba:40:ae:c4:84:40:65:cd:5c:2d:9f:a0:80:8e:e8:3e:
         a9:13:ae:84:8b:5e:17:1c:d0:d7:45:16:d3:35:96:d0:a3:1d:
         28:35:9c:52:0d:61:8e:34:b2:35:be:ae:a1:25:b9:34:41:8c:
         de:ed:95:2d:20:21:73:60:70:e4:67:02:1c:d4:d5:ce:fb:5a:
         4e:b7:f0:aa:7e:e7:19:93:3b:db:ab:73:fd:3c:d9:cd:16:c6:
         6e:81:f1:75:ec:31:67:c5:22:d0:7b:6c:5e:b3:a3:ca:36:c5:
         f2:ae:4c:f4:78:77:15:06:a6:cb:c3:11:ee:96:f9:cd:23:5d:
         d0:bd:dc:3d:6e:a4:ad:b8:22:c6:f9:a8:a1:61:6e:4b:50:15:
         02:34:92:15:c9:e0:a8:bb:09:4e:0c:05:72:5d:3d:81:e2:ba:
         46:fb:4f:97:7b:9b:97:63:e1:01:a1:82:9d:19:93:e8:d2:23:
         dd:b8:5d:7f:bc:6e:04:e2:ab:29:79:dc:f6:f4:32:30:e4:c4:
         38:92:5a:56:9b:dd:6b:3b:88:55:8c:dc:f8:b3:f8:ba:14:8c:
         96:5f:94:81:f4:93:df:ae:6a:21:d6:b2:81:c5:58:12:57:1f:
         71:7c:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:21 2026 by rpki-client