Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS401362.roa
File:                     AS401362.roa (raw, json)
Hash identifier:          cQD+yTmA5CS+I6ERAZbLbZFd6nQUu0nNkin1Gd4dAeE=
Subject key identifier:   A1:90:52:0C:CD:9B:8A:7D:73:E0:EC:C5:26:AE:8D:84:3D:C0:C9:7F
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       5CD1A038FD91D12F101B5F7B16751CFFEB47FF13
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS401362.roa
Signing time:             Wed 26 Aug 2026 11:21:50 +0000
ROA not before:           Wed 26 Aug 2026 11:16:50 +0000
ROA not after:            Wed 25 Aug 2027 11:21:50 +0000
asID:                     401362
IP address blocks:        216.75.135.0/24 maxlen: 24
                          216.75.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 16:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d1:a0:38:fd:91:d1:2f:10:1b:5f:7b:16:75:1c:ff:eb:47:ff:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Aug 26 11:16:50 2026 GMT
            Not After : Aug 25 11:21:50 2027 GMT
        Subject: CN=A190520CCD9B8A7D73E0ECC526AE8D843DC0C97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:51:a8:09:e7:6a:54:8f:80:bd:dc:ca:69:
                    85:70:c8:de:eb:4d:78:ef:21:52:2d:f2:b4:be:9f:
                    12:a1:f9:19:48:bb:0c:85:21:bc:1f:2e:ef:37:45:
                    a3:0e:92:59:43:ba:78:fa:ce:f4:d7:92:91:f8:0a:
                    2f:68:61:9d:a7:2f:1a:d6:83:55:e9:e7:e5:53:da:
                    88:ab:b0:45:7b:69:a2:b2:6b:ba:f7:ce:dc:e9:4b:
                    d1:f9:42:6f:37:23:1f:75:77:38:c5:ec:e7:65:ae:
                    88:71:43:59:bd:7a:53:c8:02:7a:9f:af:65:5c:b4:
                    61:1f:a6:b0:34:a3:b3:f8:7e:47:ff:23:54:bb:a3:
                    07:24:8a:07:d1:8b:22:3a:82:73:bf:4c:e9:c7:78:
                    39:98:50:bc:e7:5b:46:fe:29:66:b9:06:41:2a:2e:
                    7b:c5:fc:11:a0:9e:01:e8:85:d2:06:c5:ce:bf:2e:
                    d5:ed:5c:8e:96:93:c1:73:ba:a2:7e:8f:39:5f:7e:
                    48:39:f8:5f:d0:a1:be:c7:89:93:20:d2:64:6e:6f:
                    50:32:a4:b6:ed:77:26:e4:a6:58:a2:a7:dd:3f:f5:
                    8c:6b:a2:ec:cd:fc:cf:0f:73:c1:01:b6:8b:80:86:
                    e4:7b:08:78:d9:fa:0c:92:a5:3e:39:41:35:c2:f9:
                    62:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:52:0C:CD:9B:8A:7D:73:E0:EC:C5:26:AE:8D:84:3D:C0:C9:7F
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS401362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.135.0/24
                  216.75.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:92:6c:aa:be:b9:42:81:59:63:87:ee:e5:b5:9e:9f:72:93:
         2a:41:be:d3:a6:20:87:84:57:94:2d:45:17:89:87:5e:e0:5b:
         84:66:ce:72:d5:a4:9a:8d:6d:7f:af:3e:19:be:b0:2a:cf:50:
         10:e1:fa:02:b7:f7:dc:46:62:12:76:cc:ab:b3:38:36:09:7f:
         0c:23:17:32:fd:62:51:d5:c5:7c:1f:f0:16:ae:1e:cd:4a:38:
         7f:b7:4a:83:a4:e3:65:80:4e:1d:42:de:f5:1f:e6:a2:a9:1f:
         41:af:1c:76:ad:e5:91:a4:fd:87:50:db:53:59:2d:7c:00:e8:
         3f:a2:46:e1:79:93:ec:3b:5b:24:c5:fe:c1:fd:9b:e9:61:72:
         7a:a1:c9:1a:df:bc:e5:f7:cc:fa:ed:27:34:f3:f4:61:f9:33:
         b8:8c:bf:da:a1:3a:e3:16:24:c5:06:b4:c5:7b:eb:f2:41:40:
         64:39:5b:42:b7:e5:ac:28:78:7d:ab:87:88:8a:9c:d8:f6:34:
         a6:00:27:e8:08:4d:4b:5c:a5:31:5e:86:4b:54:5a:a3:71:72:
         2c:de:52:7d:5d:96:6a:21:47:a8:de:f9:ca:3c:61:3f:50:bb:
         cd:60:5a:54:9b:b2:55:18:84:b4:27:f0:fa:9a:41:d7:2e:28:
         53:a1:51:08
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUXNGgOP2R0S8QG197FnUc/+tH/xMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwODI2MTExNjUwWhcNMjcwODI1MTEyMTUw
WjAzMTEwLwYDVQQDEyhBMTkwNTIwQ0NEOUI4QTdENzNFMEVDQzUyNkFFOEQ4NDNE
QzBDOTdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYhRqAnnalSP
gL3cymmFcMje60147yFSLfK0vp8SofkZSLsMhSG8Hy7vN0WjDpJZQ7p4+s7015KR
+AovaGGdpy8a1oNV6eflU9qIq7BFe2mismu6987c6UvR+UJvNyMfdXc4xeznZa6I
cUNZvXpTyAJ6n69lXLRhH6awNKOz+H5H/yNUu6MHJIoH0YsiOoJzv0zpx3g5mFC8
51tG/ilmuQZBKi57xfwRoJ4B6IXSBsXOvy7V7VyOlpPBc7qifo85X35IOfhf0KG+
x4mTINJkbm9QMqS27Xcm5KZYoqfdP/WMa6LszfzPD3PBAbaLgIbkewh42foMkqU+
OUE1wvliVwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFKGQUgzNm4p9c+DsxSaujYQ9
wMl/MB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzQwMTM2Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEANhLhwMEANhLlDANBgkqhkiG9w0B
AQsFAAOCAQEAQpJsqr65QoFZY4fu5bWen3KTKkG+06Ygh4RXlC1FF4mHXuBbhGbO
ctWkmo1tf68+Gb6wKs9QEOH6Arf33EZiEnbMq7M4Ngl/DCMXMv1iUdXFfB/wFq4e
zUo4f7dKg6TjZYBOHULe9R/moqkfQa8cdq3lkaT9h1DbU1ktfADoP6JG4XmT7Dtb
JMX+wf2b6WFyeqHJGt+85ffM+u0nNPP0YfkzuIy/2qE64xYkxQa0xXvr8kFAZDlb
QrflrCh4fauHiIqc2PY0pgAn6AhNS1ylMV6GS1Rao3FyLN5SfV2WaiFHqN75yjxh
P1C7zWBaVJuyVRiEtCfw+ppB1y4oU6FRCA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:14 2026 by rpki-client