Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS40352.roa
File:                     AS40352.roa (raw, json)
Hash identifier:          LPd+eDx1tDBwiUsqay6YIBfQFGX85lNQqvjTQLf69r0=
Subject key identifier:   C9:68:21:55:8D:D2:2C:0F:91:7C:C0:59:96:D4:71:8C:FC:1B:95:A5
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       29E56AB03274DDD398D54169117FE2F7FEA473D9
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS40352.roa
Signing time:             Wed 06 May 2026 07:17:19 +0000
ROA not before:           Wed 06 May 2026 07:12:19 +0000
ROA not after:            Wed 05 May 2027 07:17:19 +0000
asID:                     40352
IP address blocks:        207.180.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e5:6a:b0:32:74:dd:d3:98:d5:41:69:11:7f:e2:f7:fe:a4:73:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:19 2026 GMT
            Not After : May  5 07:17:19 2027 GMT
        Subject: CN=C96821558DD22C0F917CC05996D4718CFC1B95A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:38:7a:5a:de:73:45:48:91:15:7f:3d:05:
                    09:ea:57:61:60:da:3c:f3:7d:e3:bc:b9:a2:13:11:
                    ed:cf:bf:f9:dc:a5:ad:5d:8d:7b:1e:a1:80:be:b3:
                    3e:97:d7:44:fe:fd:d4:5e:b9:1a:a2:e0:61:ae:96:
                    1a:9b:76:65:d6:93:49:44:77:71:75:ec:c7:34:7b:
                    f4:fd:2c:92:36:62:6d:25:fa:01:e9:cf:13:d8:c0:
                    ac:b9:06:d2:cd:ac:b8:80:eb:1e:44:86:31:cc:38:
                    dd:5b:40:06:ed:20:6d:87:79:48:14:cb:3d:51:4a:
                    a2:99:76:a2:c4:7d:3b:99:d1:70:e0:40:84:34:b2:
                    54:11:f7:85:28:47:23:12:10:3d:41:9c:dd:5a:70:
                    d3:0c:8f:40:8d:ee:d3:4a:90:3b:f2:c5:47:29:9b:
                    d0:85:01:51:9a:b2:48:3e:e9:20:ae:3c:3f:62:fb:
                    67:55:ad:b1:96:3f:f4:e1:a2:f8:f9:45:a7:c6:4e:
                    92:38:71:ad:ab:90:1c:5c:43:64:3f:30:1a:26:8a:
                    69:33:99:ce:31:5b:9b:3c:2c:1f:f2:f9:29:12:2c:
                    05:43:9c:cf:6e:b1:d7:a5:ab:4b:4b:39:3e:1f:0d:
                    75:9a:21:3c:ca:e6:07:57:ad:be:f2:1d:58:ec:24:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:68:21:55:8D:D2:2C:0F:91:7C:C0:59:96:D4:71:8C:FC:1B:95:A5
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS40352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:39:5f:6b:14:67:51:c7:3e:ce:86:e5:5e:c1:0a:77:ce:83:
         99:79:e7:3a:7b:0d:5e:2d:55:11:27:95:37:9c:5f:7c:93:df:
         b2:e3:9e:d8:40:fe:fb:be:12:c2:52:d2:a7:0c:5b:db:c5:da:
         16:33:7c:a8:f3:86:2b:c1:67:11:94:bc:58:0a:2a:80:d6:04:
         66:a1:08:a6:ae:f3:62:20:8b:a6:c0:0e:69:af:ca:9b:42:57:
         3e:ce:33:7c:8a:f7:44:ed:0f:c0:16:d9:84:86:22:f8:9d:19:
         bb:d8:c2:72:fe:c0:55:ff:10:9b:90:f6:5c:a3:d8:4e:e2:70:
         e3:4f:3e:3f:df:34:d1:87:54:9f:56:e4:3d:86:c6:45:2a:9c:
         9a:a7:e5:af:c7:84:0d:f6:16:1c:c3:00:1a:d4:f3:b9:30:f7:
         32:e8:13:f1:e3:cf:0e:1e:90:f9:4c:80:16:ba:5f:46:85:95:
         a2:ec:ae:0e:6c:45:df:af:55:65:10:3a:46:75:fb:be:da:e1:
         66:13:48:a0:cc:5b:4c:4a:81:0d:0b:d2:8d:92:36:2d:5a:18:
         71:31:02:d0:ba:fe:39:b2:fc:c7:75:a7:b4:56:d2:2b:22:fd:
         00:08:c2:de:65:56:66:22:d1:e6:16:88:20:d3:77:a6:e5:9d:
         ce:1b:7f:2e
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUKeVqsDJ03dOY1UFpEX/i9/6kc9kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE5WhcNMjcwNTA1MDcxNzE5
WjAzMTEwLwYDVQQDEyhDOTY4MjE1NThERDIyQzBGOTE3Q0MwNTk5NkQ0NzE4Q0ZD
MUI5NUE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE84elrec0VI
kRV/PQUJ6ldhYNo8833jvLmiExHtz7/53KWtXY17HqGAvrM+l9dE/v3UXrkaouBh
rpYam3Zl1pNJRHdxdezHNHv0/SySNmJtJfoB6c8T2MCsuQbSzay4gOseRIYxzDjd
W0AG7SBth3lIFMs9UUqimXaixH07mdFw4ECENLJUEfeFKEcjEhA9QZzdWnDTDI9A
je7TSpA78sVHKZvQhQFRmrJIPukgrjw/YvtnVa2xlj/04aL4+UWnxk6SOHGtq5Ac
XENkPzAaJoppM5nOMVubPCwf8vkpEiwFQ5zPbrHXpatLSzk+Hw11miE8yuYHV62+
8h1Y7CSufQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFMloIVWN0iwPkXzAWZbUcYz8
G5WlMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzQwMzUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QEMA0GCSqGSIb3DQEBCwUAA4IB
AQAnOV9rFGdRxz7OhuVewQp3zoOZeec6ew1eLVURJ5U3nF98k9+y457YQP77vhLC
UtKnDFvbxdoWM3yo84YrwWcRlLxYCiqA1gRmoQimrvNiIIumwA5pr8qbQlc+zjN8
ivdE7Q/AFtmEhiL4nRm72MJy/sBV/xCbkPZco9hO4nDjTz4/3zTRh1SfVuQ9hsZF
Kpyap+Wvx4QN9hYcwwAa1PO5MPcy6BPx488OHpD5TIAWul9GhZWi7K4ObEXfr1Vl
EDpGdfu+2uFmE0igzFtMSoENC9KNkjYtWhhxMQLQuv45svzHdae0VtIrIv0ACMLe
ZVZmItHmFogg03em5Z3OG38u
-----END CERTIFICATE-----
Generated at Thu May 7 04:12:02 2026 by rpki-client