Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          giUhPioe90I3eGKfvrTFEPzlYe88xiM2UNdQHB63afM=
Subject key identifier:   D7:5C:85:DB:7E:F1:7D:03:63:A2:A4:EA:44:51:7D:5A:9A:FA:D3:65
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       56C8E3F475026F87CEA04516C00660AFF0F7B8E6
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa
Signing time:             Wed 18 Mar 2026 08:02:31 +0000
ROA not before:           Wed 18 Mar 2026 07:57:31 +0000
ROA not after:            Wed 17 Mar 2027 08:02:31 +0000
asID:                     40676
IP address blocks:        40.27.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c8:e3:f4:75:02:6f:87:ce:a0:45:16:c0:06:60:af:f0:f7:b8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 18 07:57:31 2026 GMT
            Not After : Mar 17 08:02:31 2027 GMT
        Subject: CN=D75C85DB7EF17D0363A2A4EA44517D5A9AFAD365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:db:b6:a2:09:15:2a:51:98:fd:52:3e:da:
                    dd:3d:39:b3:4e:e6:33:91:e4:aa:7f:27:2a:eb:62:
                    17:83:25:73:cb:21:08:5f:ec:5f:f3:c2:04:5b:37:
                    11:7a:28:ac:4f:48:0a:81:77:ef:e7:82:4f:10:63:
                    f8:77:22:e1:b0:14:a7:da:79:ec:32:1b:83:71:27:
                    d0:aa:f2:d4:a3:d3:53:14:cd:a1:71:2a:f2:a9:13:
                    ea:e9:2c:ab:50:d6:7e:7d:7c:19:7e:a2:25:ec:54:
                    6f:f0:7b:2e:9d:66:01:36:d4:4e:9d:2f:9b:6d:31:
                    2f:b0:0f:96:f4:7c:ac:46:7d:dc:f1:88:d1:76:c1:
                    77:51:e9:5d:aa:d5:f5:2f:75:7b:1a:7a:8a:ac:19:
                    5f:cd:b2:21:22:ed:88:49:db:dc:9e:b3:7f:38:61:
                    38:33:aa:a3:b3:6f:dc:c8:71:b9:a8:79:35:8f:91:
                    2a:e0:88:9b:42:75:2f:7d:bf:e9:73:91:64:7f:37:
                    2a:13:77:ed:d5:b8:44:bc:95:88:e5:65:d0:69:4d:
                    71:5d:f1:7d:57:23:98:e5:aa:c0:d8:69:05:37:44:
                    19:b9:c2:51:8f:33:e2:98:c8:fd:0b:55:6d:be:8c:
                    8e:4f:07:9b:54:72:a1:c0:9c:05:77:88:9d:8d:c1:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5C:85:DB:7E:F1:7D:03:63:A2:A4:EA:44:51:7D:5A:9A:FA:D3:65
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:45:ec:a6:a6:5b:02:b2:79:01:0b:46:c5:f6:91:04:02:5b:
         3e:7a:46:c4:bf:24:41:99:7c:6e:6e:46:fd:12:62:2e:6c:d6:
         2b:cf:4e:a5:92:11:13:2c:e3:38:d8:c2:da:16:3d:e9:1f:bb:
         04:b1:e8:eb:d1:c1:d9:f7:0f:d5:59:b8:c5:ef:95:15:43:fc:
         0c:9b:05:9d:fd:a9:61:e0:e5:46:60:99:86:d4:a3:ea:2f:60:
         d5:9a:24:6c:f4:2e:98:5e:fe:0c:ff:21:50:d3:d0:2e:8e:e9:
         d9:e9:b7:29:12:df:1f:28:33:a7:88:f0:9b:d8:dd:97:bd:08:
         c8:b9:6d:df:8d:0a:8a:07:05:78:c4:8b:f9:22:05:80:f6:80:
         8a:de:97:2f:57:02:4d:28:0e:5e:c9:86:57:46:6c:42:78:db:
         e7:74:9d:b0:14:0a:be:30:1e:2c:fe:11:01:79:56:57:d5:e5:
         1c:29:6e:21:2b:7a:79:05:46:eb:32:f4:b5:5d:e3:50:02:53:
         d7:8f:f1:a8:18:81:5f:7e:63:ce:93:8c:98:be:7f:ef:a2:68:
         a7:76:0d:9a:59:d2:1f:ff:99:f8:32:8b:49:91:8e:27:c5:7b:
         ef:42:e6:4c:79:ce:c2:bb:c9:8d:af:26:c0:e0:4c:17:6b:8f:
         36:cb:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:46:30 2026 by rpki-client