Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa
File:                     AS40092.roa (raw, json)
Hash identifier:          IybbjbIgbe+IwHoEM5LKQDzvVLj9Y6OlEjJeky7qJ64=
Subject key identifier:   A8:B9:06:62:0A:15:66:3A:BA:9A:E0:11:51:39:C2:F9:8C:89:5E:9E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       561B6C1C41705B06CB81C3A53766ACE8B61747B6
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa
Signing time:             Thu 19 Jun 2025 01:25:04 +0000
ROA not before:           Thu 19 Jun 2025 01:20:04 +0000
ROA not after:            Thu 18 Jun 2026 01:25:04 +0000
asID:                     40092
IP address blocks:        45.56.216.0/21 maxlen: 24
                          45.114.224.0/22 maxlen: 24
                          66.102.128.0/20 maxlen: 24
                          103.26.140.0/22 maxlen: 24
                          172.96.176.0/22 maxlen: 24
                          190.180.144.0/22 maxlen: 24
                          200.69.0.0/21 maxlen: 24
                          200.69.16.0/22 maxlen: 24
                          208.68.104.0/22 maxlen: 24
                          208.79.216.0/22 maxlen: 24
                          216.7.88.0/22 maxlen: 24
                          2604:9780::/32 maxlen: 48
                          2605:6f00::/32 maxlen: 48
                          2605:6f03::/32 maxlen: 48
                          2605:6f07::/32 maxlen: 48
                          2606:bd00::/32 maxlen: 48
                          2620:b:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1b:6c:1c:41:70:5b:06:cb:81:c3:a5:37:66:ac:e8:b6:17:47:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 19 01:20:04 2025 GMT
            Not After : Jun 18 01:25:04 2026 GMT
        Subject: CN=A8B906620A15663ABA9AE0115139C2F98C895E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:25:cb:5f:30:3c:04:de:f8:a0:53:d3:8f:09:
                    76:70:a1:0f:30:27:76:70:2f:39:f9:79:7d:68:a4:
                    9c:c6:23:76:18:0c:42:78:91:e9:42:81:0b:7e:d9:
                    22:87:f3:17:95:1c:b2:f5:14:ec:92:13:b5:fc:f7:
                    a9:9b:ab:56:3b:45:06:32:51:80:cb:39:04:86:35:
                    3d:99:e2:f3:b8:c3:16:e1:5a:fc:bf:4b:d7:81:6d:
                    c1:a6:ce:6f:c1:cd:99:99:4f:05:cb:95:46:bf:d6:
                    f2:b8:ed:85:37:90:82:ad:89:d0:34:be:bb:a6:3f:
                    0f:9d:b9:4e:31:42:2b:33:1b:37:06:dd:06:1c:f4:
                    e1:b1:f1:c6:fa:92:4f:03:56:8c:be:a5:14:74:2a:
                    a6:a3:36:cd:09:7e:2c:37:8e:a0:92:da:81:74:76:
                    8d:1c:c0:5f:a5:dc:1c:7b:85:f9:c6:2c:1b:82:31:
                    54:f4:fa:40:b5:fa:b5:46:b8:6b:ac:e6:61:6f:cd:
                    f9:d5:5f:4c:8b:b1:58:ad:52:30:60:c6:08:27:a4:
                    15:a3:0b:f0:1f:25:bd:30:97:6c:32:83:29:25:f0:
                    f1:71:fa:78:c5:68:57:5c:2f:46:7b:5d:79:70:f4:
                    bb:f5:35:07:48:e4:82:82:cf:6f:98:71:af:b3:8c:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B9:06:62:0A:15:66:3A:BA:9A:E0:11:51:39:C2:F9:8C:89:5E:9E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.216.0/21
                  45.114.224.0/22
                  66.102.128.0/20
                  103.26.140.0/22
                  172.96.176.0/22
                  190.180.144.0/22
                  200.69.0.0/21
                  200.69.16.0/22
                  208.68.104.0/22
                  208.79.216.0/22
                  216.7.88.0/22
                IPv6:
                  2604:9780::/32
                  2605:6f00::/32
                  2605:6f03::/32
                  2605:6f07::/32
                  2606:bd00::/32
                  2620:b:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:46:fc:1a:94:23:65:2d:6f:2f:e4:1b:36:b4:6c:22:c9:
         1f:66:ee:94:9c:75:fb:c5:1e:fc:1a:8f:a9:bd:8e:84:48:aa:
         44:e1:a2:ce:b3:cc:18:7b:00:6f:b3:73:47:1c:bf:2b:86:3a:
         83:8f:6e:74:38:0d:2d:65:92:e0:95:5b:ac:dd:88:1f:3b:a9:
         ce:70:eb:d7:19:75:4b:ed:49:f8:fe:b5:99:de:0f:f4:f8:73:
         cd:74:a5:2b:a7:39:fa:3d:c7:64:bf:33:4c:b4:cc:b0:d3:80:
         55:9f:11:57:9d:55:56:f4:b4:84:62:6c:8c:fa:86:b2:15:3c:
         fa:15:c6:81:b0:86:04:8e:99:68:7e:c1:82:53:ac:c7:ec:d2:
         7b:8e:e6:06:cb:b6:5c:2e:df:c9:65:3e:7b:46:5a:b7:b4:c8:
         35:47:bf:18:43:01:d2:62:29:63:59:e7:87:e7:5e:db:20:f7:
         80:b6:cc:23:f7:90:ab:44:f7:61:39:67:38:61:ab:22:53:e3:
         4a:8b:d5:32:35:76:c5:04:1e:93:fc:30:07:93:ba:31:c0:18:
         c5:3a:91:71:58:83:31:c3:75:8b:0c:c7:82:56:e4:fb:fe:fa:
         4b:f1:95:6f:c6:1a:33:2d:2c:91:5a:55:e7:f6:bd:fc:f1:e9:
         b7:10:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:52:19 2025 by rpki-client