Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS398781.roa
File: AS398781.roa (raw, json)
Hash identifier: vAUgijUVDraS6zXYmzV3RnG80bFKOoZ2LM1UtAflZfc=
Subject key identifier: BA:3A:06:CC:F9:95:BB:AC:F1:52:B3:FD:74:D2:77:10:5E:05:F1:ED
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 231BA7C891B383A9605786F11271801B4F5D97D8
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS398781.roa
Signing time: Mon 09 Mar 2026 14:57:46 +0000
ROA not before: Mon 09 Mar 2026 14:52:46 +0000
ROA not after: Mon 08 Mar 2027 14:57:46 +0000
asID: 398781
IP address blocks: 40.223.6.0/24 maxlen: 24
40.223.8.0/24 maxlen: 24
40.223.10.0/24 maxlen: 24
40.223.11.0/24 maxlen: 24
40.223.24.0/24 maxlen: 24
40.223.25.0/24 maxlen: 24
40.223.26.0/24 maxlen: 24
40.223.27.0/24 maxlen: 24
40.223.28.0/24 maxlen: 24
40.223.29.0/24 maxlen: 24
40.223.30.0/24 maxlen: 24
40.223.31.0/24 maxlen: 24
40.223.32.0/24 maxlen: 24
40.223.33.0/24 maxlen: 24
40.223.34.0/24 maxlen: 24
40.223.35.0/24 maxlen: 24
40.223.36.0/24 maxlen: 24
40.223.37.0/24 maxlen: 24
40.223.38.0/24 maxlen: 24
40.223.39.0/24 maxlen: 24
40.223.40.0/24 maxlen: 24
40.223.41.0/24 maxlen: 24
40.223.42.0/24 maxlen: 24
40.223.43.0/24 maxlen: 24
40.223.48.0/24 maxlen: 24
40.223.49.0/24 maxlen: 24
40.223.50.0/24 maxlen: 24
40.223.51.0/24 maxlen: 24
40.223.52.0/24 maxlen: 24
40.223.53.0/24 maxlen: 24
40.223.54.0/24 maxlen: 24
40.223.55.0/24 maxlen: 24
40.223.56.0/24 maxlen: 24
40.223.57.0/24 maxlen: 24
40.223.58.0/24 maxlen: 24
40.223.59.0/24 maxlen: 24
40.223.60.0/24 maxlen: 24
40.223.61.0/24 maxlen: 24
40.223.62.0/24 maxlen: 24
40.223.63.0/24 maxlen: 24
40.223.64.0/24 maxlen: 24
40.223.65.0/24 maxlen: 24
40.223.66.0/24 maxlen: 24
40.223.67.0/24 maxlen: 24
40.223.68.0/24 maxlen: 24
40.223.69.0/24 maxlen: 24
40.223.70.0/24 maxlen: 24
40.223.71.0/24 maxlen: 24
40.223.72.0/24 maxlen: 24
40.223.73.0/24 maxlen: 24
40.223.74.0/24 maxlen: 24
40.223.75.0/24 maxlen: 24
40.223.76.0/24 maxlen: 24
40.223.77.0/24 maxlen: 24
40.223.78.0/24 maxlen: 24
40.223.79.0/24 maxlen: 24
40.223.88.0/24 maxlen: 24
40.223.89.0/24 maxlen: 24
40.223.90.0/24 maxlen: 24
40.223.91.0/24 maxlen: 24
40.223.92.0/24 maxlen: 24
40.223.93.0/24 maxlen: 24
40.223.94.0/24 maxlen: 24
40.223.95.0/24 maxlen: 24
40.223.96.0/24 maxlen: 24
40.223.97.0/24 maxlen: 24
40.223.98.0/24 maxlen: 24
40.223.99.0/24 maxlen: 24
40.223.100.0/24 maxlen: 24
40.223.101.0/24 maxlen: 24
40.223.102.0/24 maxlen: 24
40.223.103.0/24 maxlen: 24
40.223.104.0/24 maxlen: 24
40.223.105.0/24 maxlen: 24
40.223.106.0/24 maxlen: 24
40.223.107.0/24 maxlen: 24
40.223.108.0/24 maxlen: 24
40.223.109.0/24 maxlen: 24
40.223.110.0/24 maxlen: 24
40.223.111.0/24 maxlen: 24
40.223.112.0/24 maxlen: 24
40.223.113.0/24 maxlen: 24
40.223.114.0/24 maxlen: 24
40.223.115.0/24 maxlen: 24
40.223.116.0/24 maxlen: 24
40.223.117.0/24 maxlen: 24
40.223.118.0/24 maxlen: 24
40.223.119.0/24 maxlen: 24
40.223.120.0/24 maxlen: 24
40.223.121.0/24 maxlen: 24
40.223.123.0/24 maxlen: 24
40.223.124.0/24 maxlen: 24
40.223.125.0/24 maxlen: 24
40.223.126.0/24 maxlen: 24
40.223.127.0/24 maxlen: 24
40.223.128.0/24 maxlen: 24
40.223.129.0/24 maxlen: 24
40.223.130.0/24 maxlen: 24
40.223.131.0/24 maxlen: 24
40.223.132.0/24 maxlen: 24
40.223.133.0/24 maxlen: 24
40.223.134.0/24 maxlen: 24
40.223.135.0/24 maxlen: 24
40.223.136.0/24 maxlen: 24
40.223.137.0/24 maxlen: 24
40.223.138.0/24 maxlen: 24
40.223.139.0/24 maxlen: 24
40.223.140.0/24 maxlen: 24
40.223.141.0/24 maxlen: 24
40.223.142.0/24 maxlen: 24
40.223.143.0/24 maxlen: 24
40.223.144.0/24 maxlen: 24
40.223.145.0/24 maxlen: 24
40.223.146.0/24 maxlen: 24
40.223.147.0/24 maxlen: 24
40.223.148.0/24 maxlen: 24
40.223.149.0/24 maxlen: 24
40.223.150.0/24 maxlen: 24
40.223.151.0/24 maxlen: 24
40.223.152.0/24 maxlen: 24
40.223.153.0/24 maxlen: 24
40.223.154.0/24 maxlen: 24
40.223.155.0/24 maxlen: 24
40.223.156.0/24 maxlen: 24
40.223.158.0/24 maxlen: 24
40.223.159.0/24 maxlen: 24
40.223.160.0/24 maxlen: 24
40.223.161.0/24 maxlen: 24
40.223.162.0/24 maxlen: 24
40.223.163.0/24 maxlen: 24
40.223.164.0/24 maxlen: 24
40.223.165.0/24 maxlen: 24
40.223.166.0/24 maxlen: 24
40.223.167.0/24 maxlen: 24
40.223.168.0/24 maxlen: 24
40.223.169.0/24 maxlen: 24
40.223.170.0/24 maxlen: 24
40.223.171.0/24 maxlen: 24
40.223.172.0/24 maxlen: 24
40.223.173.0/24 maxlen: 24
40.223.174.0/24 maxlen: 24
40.223.175.0/24 maxlen: 24
40.223.176.0/24 maxlen: 24
40.223.177.0/24 maxlen: 24
40.223.178.0/24 maxlen: 24
40.223.179.0/24 maxlen: 24
40.223.180.0/24 maxlen: 24
40.223.181.0/24 maxlen: 24
40.223.182.0/24 maxlen: 24
40.223.195.0/24 maxlen: 24
40.223.196.0/24 maxlen: 24
40.223.197.0/24 maxlen: 24
40.223.198.0/24 maxlen: 24
40.223.199.0/24 maxlen: 24
40.223.200.0/24 maxlen: 24
40.223.201.0/24 maxlen: 24
40.223.202.0/24 maxlen: 24
40.223.203.0/24 maxlen: 24
40.223.204.0/24 maxlen: 24
40.223.205.0/24 maxlen: 24
40.223.206.0/24 maxlen: 24
40.223.207.0/24 maxlen: 24
40.223.208.0/24 maxlen: 24
40.223.209.0/24 maxlen: 24
40.223.210.0/24 maxlen: 24
40.223.211.0/24 maxlen: 24
40.223.212.0/24 maxlen: 24
40.223.213.0/24 maxlen: 24
40.223.214.0/24 maxlen: 24
40.223.215.0/24 maxlen: 24
40.223.216.0/24 maxlen: 24
40.223.217.0/24 maxlen: 24
40.223.218.0/24 maxlen: 24
40.223.219.0/24 maxlen: 24
40.223.220.0/24 maxlen: 24
40.223.221.0/24 maxlen: 24
40.223.222.0/24 maxlen: 24
40.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Mar 2026 04:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:1b:a7:c8:91:b3:83:a9:60:57:86:f1:12:71:80:1b:4f:5d:97:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Mar 9 14:52:46 2026 GMT
Not After : Mar 8 14:57:46 2027 GMT
Subject: CN=BA3A06CCF995BBACF152B3FD74D277105E05F1ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:68:b1:e2:2b:28:aa:22:d3:db:81:63:e8:
7a:9d:cf:eb:1f:c0:fe:01:b1:0a:b5:70:f9:48:1a:
b8:fb:d8:ed:d4:fa:d2:a8:8e:5c:fd:72:61:f6:b0:
3a:ff:41:e4:2a:e3:20:28:dc:ec:6a:9c:83:38:31:
38:4a:b0:35:7d:14:40:50:02:ac:33:86:39:7e:c7:
27:54:60:da:48:80:9c:d8:a5:62:72:54:1c:d5:4b:
37:b9:f0:f8:7c:8d:76:24:f3:53:09:f5:90:0b:db:
d7:55:b8:02:15:c1:9b:e6:cc:13:a7:67:5e:14:33:
95:c5:d1:c9:41:28:59:03:e8:b7:af:1f:95:92:37:
d7:a9:12:f8:0d:0f:dd:88:af:18:88:bf:54:c4:5c:
25:65:df:28:2e:73:ed:2d:e3:43:93:fc:8f:a4:e4:
92:7e:1c:05:37:4f:83:c2:26:bc:30:90:78:44:b1:
d5:9c:73:f3:34:8e:f2:19:11:cb:10:a1:a2:19:03:
8b:fa:e7:b3:2d:c0:79:27:c8:cb:02:29:58:ce:de:
c2:8f:ef:b0:4a:0d:95:48:02:51:ab:9c:6f:80:af:
41:53:27:a6:b4:45:c4:88:0c:75:d3:c8:e6:5d:7f:
2e:17:8d:9c:9b:e8:a2:36:50:2c:99:90:28:4b:10:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:06:CC:F9:95:BB:AC:F1:52:B3:FD:74:D2:77:10:5E:05:F1:ED
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS398781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.223.6.0/24
40.223.8.0/24
40.223.10.0/23
40.223.24.0-40.223.43.255
40.223.48.0-40.223.79.255
40.223.88.0-40.223.121.255
40.223.123.0-40.223.156.255
40.223.158.0-40.223.182.255
40.223.195.0-40.223.223.255
Signature Algorithm: sha256WithRSAEncryption
70:0c:1e:51:b5:ab:71:e5:47:b9:d1:38:40:79:6b:68:5b:b7:
e1:64:61:e0:40:c8:45:63:02:28:60:23:a2:32:b5:cc:08:94:
60:19:17:77:92:7c:41:7c:bc:e8:3e:cf:44:58:b1:96:b6:d4:
a7:ce:c6:e1:e1:b0:10:ff:5b:20:46:f3:e2:7c:1c:3d:63:af:
dd:35:fb:4d:0f:43:72:b6:9b:47:f8:eb:e1:73:79:50:69:f4:
23:3d:e6:15:d0:91:a2:16:23:a8:fe:6e:87:36:21:76:ac:86:
8a:a2:f7:80:fa:ab:5c:02:b1:3b:3b:31:7f:fe:5a:fb:8e:14:
98:b3:8b:2c:cd:e7:b6:35:78:67:1c:5b:85:e9:8e:4d:64:3f:
30:ae:e9:97:79:6d:a4:a2:3a:75:4a:ea:02:4e:02:c0:fc:6f:
3f:ab:75:b1:d5:56:92:ec:9b:05:35:5e:22:cb:6b:c2:59:71:
4e:ef:f1:0e:e3:09:f6:25:dd:f3:b2:99:31:a1:15:cb:e2:8b:
32:ec:35:b2:2e:b6:1e:4c:53:46:ca:9d:f4:98:c8:78:61:3a:
9d:ca:f7:45:e1:b1:69:7f:c1:0c:12:14:b5:99:65:8e:47:3b:
16:f5:77:80:d2:6d:ee:f0:c5:2c:6d:ac:6c:d9:b1:db:d3:48:
5e:81:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:47:07 2026 by rpki-client