Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396120.roa
File:                     AS396120.roa (raw, json)
Hash identifier:          +42obopcV8IreyGwsGpjnbbwi0DLZT36rt0PG3tFnVQ=
Subject key identifier:   90:53:CE:8B:0E:2E:AA:B9:9B:DC:83:65:5A:0D:F6:5B:4F:55:78:E7
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       4B557C28CACF752183D4C95FAF486D112226A644
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396120.roa
Signing time:             Thu 21 May 2026 02:36:51 +0000
ROA not before:           Thu 21 May 2026 02:31:51 +0000
ROA not after:            Thu 20 May 2027 02:36:51 +0000
asID:                     396120
IP address blocks:        40.183.111.0/24 maxlen: 24
                          40.223.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 13:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:55:7c:28:ca:cf:75:21:83:d4:c9:5f:af:48:6d:11:22:26:a6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May 21 02:31:51 2026 GMT
            Not After : May 20 02:36:51 2027 GMT
        Subject: CN=9053CE8B0E2EAAB99BDC83655A0DF65B4F5578E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:09:02:6b:67:8a:a0:bc:2d:62:f5:19:78:
                    2a:97:a8:7e:d7:80:70:a2:c7:c3:f6:d2:10:c5:6e:
                    af:63:09:23:15:97:89:0b:0c:c5:87:dd:71:d7:28:
                    2b:64:c0:4a:b4:d8:43:ad:7d:19:0e:d9:d7:5d:1c:
                    ae:cd:6c:3c:4e:a7:d4:9f:ad:a9:d9:64:d5:f5:bc:
                    63:c9:70:08:ee:01:b1:7f:f4:91:c2:22:b7:dd:77:
                    19:9f:ce:cb:dc:98:1c:7a:6d:0e:9e:6a:01:fc:ce:
                    48:56:4d:33:ab:7a:85:3d:44:54:43:6d:4b:35:3d:
                    48:ff:76:77:ed:85:77:85:d7:5d:b4:9b:e8:ac:75:
                    1b:f9:bf:cd:1f:b9:45:d8:06:4f:5d:8e:b2:e9:54:
                    68:3f:25:6a:34:1d:dd:1d:b0:62:f9:18:57:fb:4c:
                    11:b7:45:00:17:e7:e8:79:7b:cb:92:96:11:e3:1a:
                    84:41:b2:dc:58:cd:9a:c8:c5:70:03:88:5b:00:39:
                    60:90:9e:5f:56:3c:67:9b:94:7a:20:86:ab:65:16:
                    71:bb:f1:d6:9a:7d:37:76:f9:91:6a:de:45:16:90:
                    ff:74:1d:d8:af:38:17:73:67:30:76:aa:76:14:13:
                    a0:11:6a:e3:b5:56:45:a1:12:0a:9b:ac:f8:11:3c:
                    f0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:53:CE:8B:0E:2E:AA:B9:9B:DC:83:65:5A:0D:F6:5B:4F:55:78:E7
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396120.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.111.0/24
                  40.223.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:06:a0:ee:be:e5:47:78:3a:3e:05:87:fd:e6:3a:4b:c2:
         2e:79:e9:15:dc:fe:00:4f:5e:84:ab:18:4b:c6:ae:c8:03:33:
         be:78:29:72:4e:14:d3:4b:b6:11:39:80:f2:2c:5c:ac:dd:bb:
         14:68:9e:f4:0c:93:ad:39:ff:9e:8b:6d:22:b7:d5:1b:4b:6e:
         9d:e9:fa:81:68:28:be:15:49:c1:b5:85:fc:55:fc:c6:6a:99:
         f5:8e:8b:3a:ec:fa:8e:db:1d:a4:92:e8:50:5f:e6:8b:ac:8c:
         d0:e4:cb:7e:ec:ac:c4:9a:53:11:18:78:eb:9b:43:f6:3c:0a:
         78:0b:bc:73:35:ad:2e:bc:fd:21:86:9b:2d:f3:f4:7b:7b:68:
         7e:0a:5e:e3:5a:d2:83:f3:8a:84:5e:77:d1:ed:c3:92:0e:89:
         b4:07:8a:bb:7e:25:61:a6:b9:32:d3:d2:ec:5e:b0:bf:89:e0:
         46:ba:f9:f2:c4:68:f7:57:21:bc:98:c9:1d:a7:79:3a:e3:32:
         63:6e:ab:77:bd:d4:83:7b:f0:9a:02:ef:16:66:89:53:88:17:
         f3:94:ee:df:c0:3d:b4:86:d5:37:d3:80:50:46:9b:ae:81:1b:
         43:67:4f:8f:00:76:34:d8:9a:6f:cf:be:32:0a:3d:4f:c2:be:
         be:1f:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:54 2026 by rpki-client