Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS400292.roa
File:                     AS400292.roa (raw, json)
Hash identifier:          /mf9Ixr835JDBtHSyE0+YwTRTGS6FHJETswWZANKoOQ=
Subject key identifier:   9C:C5:F0:B3:A9:18:52:AC:4F:CA:C7:E7:D5:50:4B:8B:FF:61:6B:37
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       4007AC8D64F076858C7BFB6D2977BFDF9CCAD8FD
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS400292.roa
Signing time:             Fri 06 Mar 2026 00:13:35 +0000
ROA not before:           Fri 06 Mar 2026 00:08:35 +0000
ROA not after:            Fri 05 Mar 2027 00:13:35 +0000
asID:                     400292
IP address blocks:        40.183.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 10:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:07:ac:8d:64:f0:76:85:8c:7b:fb:6d:29:77:bf:df:9c:ca:d8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar  6 00:08:35 2026 GMT
            Not After : Mar  5 00:13:35 2027 GMT
        Subject: CN=9CC5F0B3A91852AC4FCAC7E7D5504B8BFF616B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:9a:a0:d2:2f:b5:be:7e:9e:64:20:bf:54:
                    b0:df:3b:31:1c:b0:cb:3e:d6:e7:2b:0c:d0:fd:23:
                    dc:84:62:01:8b:58:79:2d:5f:a2:8b:41:40:b4:f0:
                    b6:10:84:97:8a:e3:37:af:51:dc:ef:37:4f:49:c1:
                    a6:68:26:c6:cc:44:a5:63:66:a5:29:40:9a:7f:44:
                    fe:48:ca:7b:c6:92:90:1f:e7:25:78:de:c2:ca:04:
                    70:73:4f:49:61:d1:df:30:05:2a:68:2b:97:0c:7c:
                    72:41:b6:5f:63:bd:31:50:94:9f:e7:bf:bb:f3:71:
                    b3:1d:e2:3e:02:76:d9:0a:11:b9:8c:50:fe:16:cc:
                    53:7e:28:5c:cf:86:a4:57:39:3d:0a:93:76:df:54:
                    5b:49:2b:37:5b:ea:02:9b:3d:72:45:64:7a:74:b1:
                    a0:b0:1b:90:11:ae:e0:91:c3:88:f1:94:31:43:a4:
                    a1:0d:a9:f1:e3:bf:d2:be:2c:68:57:78:81:5e:a1:
                    54:e7:06:7c:ce:fa:6d:34:78:ff:6b:ba:6e:c1:47:
                    c2:3c:b2:9f:26:8b:ae:5a:0e:97:fc:e2:31:df:4d:
                    cb:3d:d0:c1:59:ee:15:52:9b:a8:a4:cb:ea:1b:99:
                    3b:a2:05:b2:f8:9f:4e:20:22:34:27:46:2d:95:2d:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C5:F0:B3:A9:18:52:AC:4F:CA:C7:E7:D5:50:4B:8B:FF:61:6B:37
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS400292.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:34:41:65:62:aa:91:cb:34:6d:11:ed:8d:a2:02:0a:a7:13:
         7c:29:5e:a5:a3:da:d1:a1:ba:ab:7f:54:28:21:d9:c1:aa:8d:
         c8:b2:e8:03:6d:35:c3:0d:65:51:6b:ad:f6:71:1c:b0:31:9a:
         fe:35:bb:75:f6:6a:39:20:7a:96:83:06:94:c9:dd:c7:53:a0:
         93:fd:cc:4b:81:da:3b:4d:f4:da:ab:4a:f5:3f:34:8a:65:33:
         61:57:e7:25:11:77:c4:a4:39:69:f0:68:ea:83:e9:68:1f:41:
         17:c7:c8:7e:de:a8:c8:1c:64:39:59:5b:4f:29:eb:2d:fa:d1:
         74:8f:00:b4:7f:0e:a2:e3:86:40:d7:85:72:43:bc:62:fd:a8:
         c3:32:c4:cc:0e:4c:f8:e3:15:dc:2d:8c:6a:0a:db:66:41:4e:
         0d:62:3c:5a:d5:ac:b7:8b:76:d7:5e:76:a4:32:72:ad:89:c5:
         ff:fa:c1:48:67:df:2f:00:85:33:40:c6:81:d2:1b:a1:09:44:
         5f:57:62:ea:36:6a:d1:d8:0c:1d:56:d1:db:f3:14:b9:49:5c:
         57:6c:16:83:52:3a:d4:9b:53:8f:db:44:57:ca:c4:f5:12:f2:
         8a:0c:e8:3a:03:00:63:b5:8f:01:f6:40:ea:84:ba:f8:91:39:
         ab:5f:41:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:05:58 2026 by rpki-client