Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399156.roa
File:                     AS399156.roa (raw, json)
Hash identifier:          qEU1OWXnOoJ9Hr0NQ6i6O91+mSJ2oh68+5oFjYv6Ax8=
Subject key identifier:   EF:BD:41:49:EF:19:9E:6C:0A:0A:FF:17:5D:BE:30:48:99:2D:4A:F9
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       665B56F2B4A70CEFD79840D35C13F33C210FCB7E
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399156.roa
Signing time:             Sat 10 Oct 2026 11:29:16 +0000
ROA not before:           Sat 10 Oct 2026 11:24:16 +0000
ROA not after:            Sat 09 Oct 2027 11:29:16 +0000
asID:                     399156
IP address blocks:        2607:fc50:3000:456::/64 maxlen: 64
                          2607:fc50:3000:457::/64 maxlen: 64
                          2607:fc50:3000:458::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 01:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5b:56:f2:b4:a7:0c:ef:d7:98:40:d3:5c:13:f3:3c:21:0f:cb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 10 11:24:16 2026 GMT
            Not After : Oct  9 11:29:16 2027 GMT
        Subject: CN=EFBD4149EF199E6C0A0AFF175DBE3048992D4AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d5:bf:f2:e4:93:7d:53:4c:bc:11:10:63:a8:
                    da:08:bc:d9:6c:dd:0a:77:5a:68:d7:74:99:a0:ab:
                    70:05:99:7b:45:ec:18:a8:c0:6d:a7:02:c5:36:21:
                    d8:86:1c:37:c3:79:68:19:0a:9b:70:88:67:d0:ae:
                    c0:ff:a2:6b:af:21:18:e8:c5:41:dd:dc:f6:62:70:
                    dc:e2:1f:2d:f2:67:42:0a:6d:9a:4e:8c:19:e4:24:
                    c0:f8:3b:b2:7b:a0:cb:3f:6f:81:a8:11:31:0a:fb:
                    c7:08:15:bc:d6:93:a5:f7:1b:00:9f:13:a6:07:4e:
                    08:90:cb:5b:7f:cd:09:2d:d2:c4:d5:cf:7c:0e:54:
                    34:bc:f1:f3:05:15:02:b2:4b:3f:63:4b:57:d9:b5:
                    2f:5d:52:be:a5:a4:97:55:5e:0c:19:62:88:7f:f3:
                    73:a8:cf:22:72:cd:c5:03:1d:22:21:20:45:32:fd:
                    73:e0:cd:9e:ec:c4:44:c7:34:90:b1:38:7b:8b:ae:
                    d4:7f:45:1b:af:c5:e0:4b:11:30:ce:23:f6:bf:58:
                    fa:86:84:53:1a:c2:a1:8c:10:19:f1:8d:cb:07:df:
                    f1:af:3e:40:33:76:87:d7:6b:bf:36:a7:cb:74:34:
                    12:28:31:fd:cc:0a:40:26:6f:35:2b:af:ff:18:72:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BD:41:49:EF:19:9E:6C:0A:0A:FF:17:5D:BE:30:48:99:2D:4A:F9
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc50:3000:456::-2607:fc50:3000:458:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:18:2a:af:fb:73:00:29:bd:87:ef:29:93:ba:ed:ec:49:
         6d:1b:d3:d8:a2:cd:a3:df:a9:f8:53:9a:fd:93:d3:8a:cf:6a:
         70:85:74:9e:6e:14:58:35:59:3a:c1:3f:b4:72:ac:1a:55:06:
         cb:0b:7a:37:e7:34:77:b8:9c:8e:79:9b:e3:ca:eb:70:46:da:
         0a:d3:1b:e0:0e:e9:6e:b3:04:6e:7c:7a:e6:fc:4c:da:77:89:
         9e:1a:f3:9c:95:f6:b0:9b:2c:15:c1:ab:7a:da:ca:4e:19:13:
         41:ea:53:36:f8:31:6c:80:6f:6b:cd:2c:6b:d2:13:04:ae:a9:
         ea:e5:d9:b7:81:bd:f3:b0:49:50:54:21:99:4e:60:80:27:59:
         7c:6b:9e:04:3b:c4:e8:32:69:b2:4a:47:4b:bc:fc:3f:81:47:
         21:ca:1b:0c:3d:25:09:23:14:ad:61:12:3f:7e:b9:8c:f7:3a:
         40:24:89:74:de:c3:a6:aa:41:f3:6c:bb:ee:74:84:11:7e:3d:
         9a:d8:94:ce:4b:54:c8:4e:a6:9b:12:18:5e:93:c3:d7:4f:63:
         e6:43:59:68:12:c0:5e:b6:23:c8:96:67:39:29:4d:56:2a:50:
         8f:84:f2:b7:b1:b1:08:28:b4:46:ee:98:0b:d3:8e:8f:bc:14:
         bf:26:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:42 2026 by rpki-client