Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS401986.roa
File:                     AS401986.roa (raw, json)
Hash identifier:          aZY+9i2qDUx6ukwu1fH8UBtMSw5Vy3ippTqEKdL1rkM=
Subject key identifier:   37:86:DB:FF:1C:2C:E8:FB:92:A0:44:A1:FD:CC:CA:15:55:19:89:E2
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       415504BDBB23C3A25AF48B68CE62076C015653DE
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS401986.roa
Signing time:             Wed 28 Oct 2026 04:19:56 +0000
ROA not before:           Wed 28 Oct 2026 04:14:56 +0000
ROA not after:            Wed 27 Oct 2027 04:19:56 +0000
asID:                     401986
IP address blocks:        45.54.44.0/24 maxlen: 24
                          45.54.55.0/24 maxlen: 24
                          2607:f740:e065::/48 maxlen: 48
                          2607:f740:e64a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 01:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:55:04:bd:bb:23:c3:a2:5a:f4:8b:68:ce:62:07:6c:01:56:53:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 28 04:14:56 2026 GMT
            Not After : Oct 27 04:19:56 2027 GMT
        Subject: CN=3786DBFF1C2CE8FB92A044A1FDCCCA15551989E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:2f:93:0b:2b:83:db:d9:f2:4b:e7:2d:c9:
                    77:2c:14:e6:b8:48:87:ef:e4:54:ca:1a:5f:ce:87:
                    f5:f2:02:7b:16:0d:b7:88:84:33:3a:92:a6:69:21:
                    f2:de:e6:50:98:48:5b:29:e2:de:2d:5e:07:41:f9:
                    0e:9c:40:a1:36:78:69:9b:b4:53:08:5f:47:74:4b:
                    38:d9:01:b5:c4:c4:a7:2e:e2:a6:77:50:58:27:1b:
                    4a:5c:97:7d:b5:2e:5c:e6:85:bf:19:e7:e0:53:33:
                    d1:28:ff:dc:f6:bf:83:30:a5:46:72:43:0b:3f:ee:
                    24:b4:66:75:3d:0c:c6:00:74:88:3c:dd:3e:18:bc:
                    74:06:11:ec:4a:f2:d5:63:a2:ad:0e:ae:16:36:b5:
                    0b:e6:3d:c2:88:2c:6b:30:77:dc:d2:1f:a1:c7:c5:
                    12:20:d3:6a:c1:98:c1:fd:a7:75:ae:7b:0b:d2:5d:
                    7d:d2:a7:e0:fb:4a:b3:03:84:a4:b2:03:a2:32:19:
                    f6:68:84:5f:f5:00:d1:6a:d2:71:14:66:e9:17:4f:
                    f6:5a:a6:43:c0:48:79:46:27:7b:a3:98:e2:ad:e7:
                    9e:67:e7:20:0e:04:02:20:8f:a6:2b:36:31:fa:27:
                    d9:b0:cb:72:cf:20:f3:ee:65:28:82:30:a2:24:75:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:86:DB:FF:1C:2C:E8:FB:92:A0:44:A1:FD:CC:CA:15:55:19:89:E2
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS401986.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.44.0/24
                  45.54.55.0/24
                IPv6:
                  2607:f740:e065::/48
                  2607:f740:e64a::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:f2:8e:ff:56:f8:24:ad:39:86:d1:e5:1b:cc:d2:73:d6:
         01:0a:d4:8a:bb:0a:64:1e:d2:29:b9:ec:71:d1:00:20:82:ee:
         2c:3b:b8:b2:6e:cd:7f:78:d7:b2:e6:96:7f:6a:f5:51:61:fd:
         84:72:51:fa:e4:c6:6b:44:64:d4:1d:0f:30:1c:25:98:6b:e6:
         43:4b:f3:cf:96:c2:13:ef:f8:2d:f6:b3:ef:11:8e:40:c3:ef:
         28:76:1d:94:bc:ae:76:34:24:4a:21:fd:57:c5:ab:67:9e:47:
         54:91:f1:4f:fd:3a:be:ac:b5:fb:bc:1a:ed:a0:23:fc:39:4d:
         59:f5:d7:71:da:19:e0:a0:f3:37:c5:6f:0d:d7:90:0d:7d:77:
         46:99:f9:db:10:97:47:8d:1d:ec:74:eb:f4:70:47:0a:8f:82:
         7d:65:ab:cb:5a:30:fa:d8:d1:5e:c4:ca:b7:f3:8c:9b:7f:46:
         b0:b5:d9:82:8f:7d:7f:3d:b3:e0:18:a0:c4:83:52:61:f3:ae:
         88:01:e6:ad:aa:6b:f5:cf:ca:02:0e:51:e4:bc:6f:61:9f:3f:
         65:9e:3e:e7:e8:57:30:e2:e2:73:af:94:04:27:d4:65:33:90:
         7a:ee:64:d8:8e:01:a3:ff:ce:9b:f9:1d:6c:15:53:1f:25:35:
         ca:e3:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:24:49 2026 by rpki-client