Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
File:                     AS400810.roa (raw, json)
Hash identifier:          4t42gFnM2XjRuub5SUfEPuBDZysC63nR4tnHc2qRLXM=
Subject key identifier:   66:38:F6:31:15:95:00:79:5F:4D:EE:70:8F:28:C9:98:11:20:77:7B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6FE6FEDFB94ED1EE7DB986AFC597C08818E6B902
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
Signing time:             Mon 19 Oct 2026 02:36:21 +0000
ROA not before:           Mon 19 Oct 2026 02:31:21 +0000
ROA not after:            Mon 18 Oct 2027 02:36:21 +0000
asID:                     400810
IP address blocks:        98.142.246.0/24 maxlen: 24
                          104.234.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 14:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e6:fe:df:b9:4e:d1:ee:7d:b9:86:af:c5:97:c0:88:18:e6:b9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 19 02:31:21 2026 GMT
            Not After : Oct 18 02:36:21 2027 GMT
        Subject: CN=6638F631159500795F4DEE708F28C9981120777B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:56:69:9d:ec:7f:9a:7f:28:95:04:84:9b:
                    04:af:03:2c:c3:bc:6c:b8:ec:a0:9d:b4:6f:d4:92:
                    c7:61:2d:3f:97:b2:94:f6:e0:75:0b:ed:1a:26:b0:
                    a0:c8:e4:2f:6d:78:d9:e2:86:43:4c:60:2f:c2:9b:
                    49:2a:b2:95:e8:de:f6:c6:44:4a:47:02:b2:94:1e:
                    ab:a0:a5:8f:b8:e9:8e:9d:af:5d:97:43:00:c0:c1:
                    a2:70:1a:6a:8d:bb:06:2c:9e:47:10:69:70:2e:0b:
                    91:21:de:74:eb:d6:ef:b0:21:54:38:38:7f:63:17:
                    a3:a4:26:5d:2c:eb:c6:87:cd:49:77:3c:60:75:52:
                    15:de:ac:e8:07:2d:43:9e:a3:97:84:3a:59:4e:9d:
                    ea:59:ca:15:20:9d:0b:cd:a5:f9:8f:ad:65:da:fb:
                    17:59:6b:c8:86:94:15:e6:3f:57:ed:c4:35:ab:de:
                    15:6f:bb:43:3e:0e:b8:b6:16:31:c2:79:b3:39:52:
                    80:11:7c:66:4f:18:09:c0:ce:43:3a:42:fd:70:f5:
                    ac:7b:1f:c3:26:95:b5:4a:3a:ff:68:50:ff:74:3c:
                    e4:e1:2c:99:97:58:40:86:3b:09:8c:9d:1d:aa:88:
                    3c:5d:a3:bd:66:3b:68:91:5c:3a:54:80:11:90:1a:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:38:F6:31:15:95:00:79:5F:4D:EE:70:8F:28:C9:98:11:20:77:7B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.246.0/24
                  104.234.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:b8:8b:02:7d:df:00:02:90:ff:75:60:38:50:c1:3d:d9:
         2b:9e:c8:77:35:7e:e7:bd:96:c6:55:8f:f9:e8:7e:8d:77:2c:
         75:5f:7d:ab:65:47:31:06:97:8a:56:45:07:c1:10:f8:13:dc:
         2a:cc:32:34:4f:f7:ce:87:a6:dc:52:cd:db:4a:f4:2e:c8:46:
         dd:d7:4f:db:ca:eb:00:85:bc:45:e3:8c:27:b5:3b:9f:74:8b:
         69:e2:37:c3:75:70:f2:08:6e:49:f7:d1:94:4e:1b:71:94:6a:
         9d:04:3e:9b:e9:cf:8b:a4:87:43:c9:be:b5:58:87:c0:ef:34:
         68:75:28:69:5b:b1:4e:85:69:30:b1:c3:f1:5a:13:6f:c0:1e:
         fb:14:3d:28:30:6d:4e:19:1f:8a:6b:f4:52:24:bd:80:5f:16:
         74:b4:01:8d:0d:a5:df:43:6a:cc:2e:4c:48:50:27:7e:c4:b8:
         00:29:4a:e3:39:32:77:ad:70:08:ba:34:26:98:7d:db:ab:28:
         cd:4a:45:09:85:9d:43:22:2a:b4:87:da:0d:59:7a:8d:5c:7e:
         a8:83:2b:b1:ab:9c:49:a4:68:40:23:e5:dd:51:17:6a:bb:37:
         39:ff:52:55:4b:d2:87:d8:27:f3:96:7a:96:9a:ad:8d:aa:53:
         f4:00:61:45
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUb+b+37lO0e59uYavxZfAiBjmuQIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMDE5MDIzMTIxWhcNMjcxMDE4MDIzNjIx
WjAzMTEwLwYDVQQDEyg2NjM4RjYzMTE1OTUwMDc5NUY0REVFNzA4RjI4Qzk5ODEx
MjA3NzdCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ZWaZ3sf5p/
KJUEhJsErwMsw7xsuOygnbRv1JLHYS0/l7KU9uB1C+0aJrCgyOQvbXjZ4oZDTGAv
wptJKrKV6N72xkRKRwKylB6roKWPuOmOna9dl0MAwMGicBpqjbsGLJ5HEGlwLguR
Id5069bvsCFUODh/YxejpCZdLOvGh81JdzxgdVIV3qzoBy1DnqOXhDpZTp3qWcoV
IJ0LzaX5j61l2vsXWWvIhpQV5j9X7cQ1q94Vb7tDPg64thYxwnmzOVKAEXxmTxgJ
wM5DOkL9cPWsex/DJpW1Sjr/aFD/dDzk4SyZl1hAhjsJjJ0dqog8XaO9ZjtokVw6
VIARkBpWMQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFGY49jEVlQB5X03ucI8oyZgR
IHd7MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzQwMDgxMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGKO9gMEAGjqvzANBgkqhkiG9w0B
AQsFAAOCAQEAfN64iwJ93wACkP91YDhQwT3ZK57IdzV+572WxlWP+eh+jXcsdV99
q2VHMQaXilZFB8EQ+BPcKswyNE/3zoem3FLN20r0LshG3ddP28rrAIW8ReOMJ7U7
n3SLaeI3w3Vw8ghuSffRlE4bcZRqnQQ+m+nPi6SHQ8m+tViHwO80aHUoaVuxToVp
MLHD8VoTb8Ae+xQ9KDBtThkfimv0UiS9gF8WdLQBjQ2l30NqzC5MSFAnfsS4AClK
4zkyd61wCLo0Jph926sozUpFCYWdQyIqtIfaDVl6jVx+qIMrsaucSaRoQCPl3VEX
ars3Of9SVUvSh9gn85Z6lpqtjapT9ABhRQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:04:44 2026 by rpki-client