Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS400298.roa
File:                     AS400298.roa (raw, json)
Hash identifier:          1e2oaTp//lKT4ImZlnlAp3qRowB2/xMGg8OFIQ+IbYs=
Subject key identifier:   F5:9F:C6:18:FE:A8:8D:E2:A3:A7:C3:64:52:6C:8C:1E:6C:9D:6E:C6
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       56ACF60FFDC7D9CA5A3BDFE1EACEE5227F4DCEEB
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS400298.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     400298
IP address blocks:        216.75.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 09:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ac:f6:0f:fd:c7:d9:ca:5a:3b:df:e1:ea:ce:e5:22:7f:4d:ce:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=F59FC618FEA88DE2A3A7C364526C8C1E6C9D6EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:f7:3d:22:00:d0:d8:e3:ec:9e:95:57:43:
                    bf:90:b2:be:7c:cc:92:e5:64:17:f4:b4:72:bd:dc:
                    44:4a:63:44:02:b9:83:f2:d2:41:cc:25:61:10:54:
                    74:5e:02:79:69:7a:ea:36:ab:9d:8f:5f:b8:93:94:
                    28:c1:b8:c9:46:24:30:52:60:0c:3c:36:f8:9f:5d:
                    07:5e:1f:62:fd:aa:ef:3c:5d:5a:ad:8d:3d:56:f0:
                    1e:4b:ad:30:ce:7c:4c:80:d7:e6:dd:0a:4d:fa:10:
                    bb:8a:98:d8:8e:af:83:31:00:22:c4:06:cd:d8:51:
                    f1:21:ca:71:cc:d3:e7:2f:54:20:db:8b:99:e0:27:
                    b3:b1:03:5d:fb:b8:b4:31:c0:6b:04:7f:b3:b3:ae:
                    e6:b5:59:05:ce:2e:1d:4b:9f:04:68:3a:e4:a7:76:
                    54:84:d9:a7:c6:af:c9:8d:85:e7:d9:41:fe:19:cd:
                    84:b2:5b:67:58:52:61:92:ac:de:d5:77:30:da:e5:
                    1a:9a:ab:d1:e7:c8:22:8a:d9:f9:41:49:b9:ae:d6:
                    4e:3e:c3:ae:8e:59:25:c2:0b:d0:fb:a4:1c:bd:85:
                    42:1e:9b:e3:bb:af:80:36:19:bf:e9:8e:5e:0d:03:
                    ea:3f:1d:70:62:a4:6b:cf:11:fa:08:86:b7:5d:84:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9F:C6:18:FE:A8:8D:E2:A3:A7:C3:64:52:6C:8C:1E:6C:9D:6E:C6
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS400298.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:0c:bc:39:7c:7c:a3:86:b2:3f:73:c4:2e:7f:3e:6f:0b:c4:
         60:0e:c3:31:0a:23:90:34:47:ea:bf:4f:d7:07:81:1e:8f:4f:
         7e:f2:c6:a5:18:f8:fb:d9:3e:a5:7a:f9:d5:17:60:36:ee:59:
         8d:a2:7f:c5:73:d4:91:61:fa:02:b2:5e:b7:b0:43:e6:c0:89:
         c0:19:07:75:33:8d:ce:f3:5c:90:43:58:d6:3d:c4:c9:b5:21:
         70:6d:e9:8f:0c:41:83:25:9f:b1:b7:fb:11:55:3f:44:32:42:
         8d:8d:43:17:f7:35:6f:dc:5d:d3:8b:63:bb:31:47:60:8c:8d:
         10:97:ea:91:08:5f:71:65:65:6a:60:37:c9:ba:2e:80:e0:f2:
         2f:59:6d:d5:c3:0d:cc:af:5f:25:fd:d4:d0:a9:fb:fe:a9:b6:
         22:0e:ed:1c:28:8b:ba:73:43:b8:0c:40:ef:98:47:85:9a:96:
         8e:8f:30:12:2c:42:bf:f2:eb:fd:4b:db:12:ef:a9:f6:1a:f4:
         6a:82:89:42:2f:01:bf:93:1d:58:82:12:ec:7c:24:a8:51:fd:
         00:da:db:ff:a8:9f:23:b3:bd:53:bd:eb:4a:9f:6b:fd:37:68:
         5a:1b:7c:02:37:c8:aa:ca:be:e8:8c:63:c0:0b:5e:67:91:f1:
         f8:27:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:49:55 2026 by rpki-client