Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          i1UZedtbMKByAmppLz9O8s0Ho9j9YISvHXgODs3qbiY=
Subject key identifier:   7B:BB:72:98:B0:9C:A8:A5:25:EA:80:11:EA:06:CE:6D:03:A9:E1:FD
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       7438E9A3B23007C20584973A6F751D3552AC5D4B
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS40676.roa
Signing time:             Fri 16 Oct 2026 11:34:18 +0000
ROA not before:           Fri 16 Oct 2026 11:29:18 +0000
ROA not after:            Fri 15 Oct 2027 11:34:18 +0000
asID:                     40676
IP address blocks:        66.225.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:38:e9:a3:b2:30:07:c2:05:84:97:3a:6f:75:1d:35:52:ac:5d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 16 11:29:18 2026 GMT
            Not After : Oct 15 11:34:18 2027 GMT
        Subject: CN=7BBB7298B09CA8A525EA8011EA06CE6D03A9E1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:e0:70:58:f1:b5:ca:05:f3:6b:18:07:17:
                    ec:9e:80:38:63:f9:00:7e:d1:b4:64:5a:87:8b:3e:
                    87:4f:89:55:97:f8:a9:5b:1a:63:08:74:dc:62:d5:
                    4c:c8:04:2e:f9:55:99:e5:38:8a:5e:d6:11:22:a5:
                    b5:8b:6a:2e:b9:86:a0:8f:b4:10:fd:9f:c8:8c:10:
                    54:49:58:a3:07:b3:bc:4b:d6:6e:76:b2:d7:fd:d4:
                    f1:cb:b8:e8:b7:5a:6b:3e:de:0e:fa:1d:e8:a7:3d:
                    c1:14:d7:c7:40:82:95:08:2f:eb:c5:89:8f:66:c4:
                    d5:10:e0:0f:a6:c1:0f:63:b4:34:47:46:17:31:74:
                    d7:c1:7b:79:73:d6:be:bc:d8:83:80:7a:34:5c:6b:
                    b0:d3:a7:89:d5:50:05:6b:1e:41:c7:7e:d9:ca:8c:
                    cf:d4:f4:3d:26:e6:fb:b3:ed:4b:e3:92:38:ca:ec:
                    90:aa:04:cb:d7:4e:fc:68:a0:a0:2c:66:a6:01:70:
                    8f:63:18:f4:46:58:a2:b0:9e:d3:92:5c:12:55:8e:
                    f5:b9:d3:73:e4:cc:4d:a9:6e:2b:62:b6:74:98:61:
                    56:4b:bb:d7:de:c4:16:01:91:09:2a:2d:99:6d:1a:
                    09:9d:b9:32:ed:84:65:8d:e7:85:07:ff:fd:14:89:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BB:72:98:B0:9C:A8:A5:25:EA:80:11:EA:06:CE:6D:03:A9:E1:FD
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:0b:88:36:eb:d1:b0:da:ed:91:aa:dd:2b:00:ba:5d:3d:
         54:01:34:f4:b2:a3:8e:5e:bd:2f:58:f1:27:0c:0d:02:60:b3:
         54:ba:8e:56:40:25:54:86:d9:40:9b:45:c8:b1:6f:46:5b:56:
         85:61:10:58:00:d8:e7:32:4d:02:a2:3c:e0:ad:5c:6b:9f:12:
         e8:26:6d:7a:d5:17:94:60:6c:5d:50:04:f4:3e:48:49:2e:20:
         a0:7e:41:03:a5:73:47:e7:0a:b8:25:30:dd:ee:b4:07:e1:e6:
         1d:ec:76:57:3f:d5:19:59:38:e3:72:86:aa:65:fa:65:23:f3:
         04:38:51:37:67:d1:47:fc:12:e0:27:9b:9b:63:10:f2:9d:93:
         47:da:03:ab:70:25:87:b4:81:de:c8:45:db:40:a3:19:e8:d1:
         e2:cd:86:6a:e3:9d:7b:61:74:87:97:48:f4:fa:b0:24:60:be:
         30:66:62:34:01:f3:f9:50:2e:59:b5:d8:f3:b4:e9:50:ae:f1:
         e6:20:0f:53:c0:1f:bc:50:a6:e5:d7:b3:d6:00:ba:22:6a:3c:
         51:5f:e0:97:e3:87:9c:c1:a5:c8:34:12:88:05:41:cd:85:26:
         f7:53:1a:1b:c1:16:85:f4:10:e7:57:a3:94:cd:38:1a:1c:a6:
         45:11:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:10:17 2026 by rpki-client