Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399162.roa
File:                     AS399162.roa (raw, json)
Hash identifier:          RpgjwM6nIOq9EUYmRVvhTuHhsuG1dFR0FnH9v3neBJM=
Subject key identifier:   E4:4A:01:5B:3A:5B:66:F6:C4:0B:7E:0D:88:7E:97:A6:46:65:F8:96
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       21DD417FEECD5CFA07D14CE073546C4912DE6930
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399162.roa
Signing time:             Sat 10 Oct 2026 12:29:18 +0000
ROA not before:           Sat 10 Oct 2026 12:24:18 +0000
ROA not after:            Sat 09 Oct 2027 12:29:18 +0000
asID:                     399162
IP address blocks:        2607:f740:10:22::/64 maxlen: 64
                          2607:f740:10:23::/64 maxlen: 64
                          2607:f740:10:24::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 01:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:dd:41:7f:ee:cd:5c:fa:07:d1:4c:e0:73:54:6c:49:12:de:69:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 10 12:24:18 2026 GMT
            Not After : Oct  9 12:29:18 2027 GMT
        Subject: CN=E44A015B3A5B66F6C40B7E0D887E97A64665F896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:01:79:96:ad:99:b0:0d:4b:8b:60:80:e4:44:
                    83:fe:15:b1:88:a9:73:f8:1c:1b:b6:2c:7a:84:4d:
                    39:bc:a3:4d:62:aa:0e:e5:60:ee:ca:e1:e2:2e:87:
                    50:53:ef:ec:a6:0e:a2:da:5f:93:bc:98:b6:3f:d9:
                    ed:4a:d2:72:98:76:97:dd:02:83:5b:5c:1c:59:6c:
                    94:ab:b9:60:87:99:b7:aa:60:28:74:40:47:87:ed:
                    89:a4:ee:aa:de:34:04:cd:3b:1f:49:16:94:32:97:
                    f8:6e:96:a4:2d:80:fb:c0:f7:1d:4f:b6:04:75:62:
                    a6:48:c6:2b:f8:b8:73:d9:73:74:07:dc:6f:fa:2e:
                    15:f4:91:cf:e7:42:ed:37:d7:7b:6f:46:ee:14:20:
                    a2:95:b1:ef:36:e0:f6:09:c2:0f:12:77:0b:fa:30:
                    45:2a:aa:ff:0b:a7:77:51:bd:b7:5b:19:49:2a:3d:
                    f6:d8:a7:05:24:c3:d6:85:4c:b3:61:1e:e6:2e:11:
                    2e:f0:9d:e4:a5:1f:a7:66:2a:c8:ab:b0:60:b8:16:
                    c4:99:cc:e0:81:be:7f:52:88:2a:20:8d:6a:7c:7a:
                    c0:26:87:ee:ed:ac:da:52:b0:21:d2:bf:0a:7d:f0:
                    52:39:54:91:9a:4d:f4:3c:3b:4a:1a:35:cf:01:02:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:01:5B:3A:5B:66:F6:C4:0B:7E:0D:88:7E:97:A6:46:65:F8:96
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399162.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:10:22::-2607:f740:10:24:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         25:7c:1f:b0:88:77:73:ff:fe:66:74:41:2e:21:ce:b0:d0:5f:
         81:f0:8f:6f:05:db:88:7b:25:d5:a4:75:80:02:43:9c:0f:00:
         8d:ad:7d:78:60:76:50:a6:f1:00:f4:cb:2c:ff:e2:99:fd:0b:
         bd:38:48:64:08:bd:49:08:41:aa:ad:02:d8:4a:66:6b:79:00:
         53:9e:a1:bc:e8:77:45:c5:d9:7d:11:6c:34:fd:aa:6a:b3:0b:
         c2:e6:6a:40:8e:d6:19:d6:64:a7:44:47:aa:62:4c:95:d4:61:
         45:7a:54:61:fb:70:8b:28:d0:c0:ee:3e:36:4a:8e:bb:42:07:
         17:2e:ae:a8:52:e4:5b:2b:7c:33:af:ac:7c:7e:c0:bc:ca:1b:
         ba:20:2d:31:c2:a0:38:ae:ea:b6:2b:63:27:de:50:c7:23:22:
         4c:e6:5d:d5:e0:12:62:0b:b6:99:cf:3c:ff:d3:d7:be:45:24:
         7c:cb:5f:dc:f9:88:28:9c:4b:30:83:5d:bc:c6:df:04:23:70:
         50:dd:73:3e:11:f0:ef:77:55:89:01:2a:fe:ae:ec:f2:24:7d:
         ee:e9:76:0b:f7:b5:a1:9a:73:67:bc:0a:8e:7a:b1:55:2e:be:
         68:a7:7f:1f:e6:27:63:ff:59:99:5d:0b:79:32:be:86:1d:5d:
         1d:31:0b:ee
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUId1Bf+7NXPoH0Uzgc1RsSRLeaTAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYxMDEwMTIyNDE4WhcNMjcxMDA5MTIyOTE4
WjAzMTEwLwYDVQQDEyhFNDRBMDE1QjNBNUI2NkY2QzQwQjdFMEQ4ODdFOTdBNjQ2
NjVGODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QF5lq2ZsA1L
i2CA5ESD/hWxiKlz+Bwbtix6hE05vKNNYqoO5WDuyuHiLodQU+/spg6i2l+TvJi2
P9ntStJymHaX3QKDW1wcWWyUq7lgh5m3qmAodEBHh+2JpO6q3jQEzTsfSRaUMpf4
bpakLYD7wPcdT7YEdWKmSMYr+Lhz2XN0B9xv+i4V9JHP50LtN9d7b0buFCCilbHv
NuD2CcIPEncL+jBFKqr/C6d3Ub23WxlJKj322KcFJMPWhUyzYR7mLhEu8J3kpR+n
ZirIq7BguBbEmczggb5/UogqII1qfHrAJofu7azaUrAh0r8KffBSOVSRmk30PDtK
GjXPAQIq7wIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFORKAVs6W2b2xAt+DYh+l6ZG
ZfiWMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzM5OTE2Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAIwGDAWAwkBJgf3QAAQACIDCQAmB/dAABAA
JDANBgkqhkiG9w0BAQsFAAOCAQEAJXwfsIh3c//+ZnRBLiHOsNBfgfCPbwXbiHsl
1aR1gAJDnA8Aja19eGB2UKbxAPTLLP/imf0LvThIZAi9SQhBqq0C2Epma3kAU56h
vOh3RcXZfRFsNP2qarMLwuZqQI7WGdZkp0RHqmJMldRhRXpUYftwiyjQwO4+NkqO
u0IHFy6uqFLkWyt8M6+sfH7AvMobuiAtMcKgOK7qtitjJ95QxyMiTOZd1eASYgu2
mc88/9PXvkUkfMtf3PmIKJxLMINdvMbfBCNwUN1zPhHw73dViQEq/q7s8iR97ul2
C/e1oZpzZ7wKjnqxVS6+aKd/H+YnY/9ZmV0LeTK+hh1dHTEL7g==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:32:44 2026 by rpki-client