Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402423.roa
File:                     AS402423.roa (raw, json)
Hash identifier:          4FN5sWCk/S+KALIfDGMfNUghop4sbrQ1il/9Vd2jPpg=
Subject key identifier:   40:21:14:B6:C6:9E:54:B2:94:6C:12:41:24:A5:93:21:41:7C:5E:4C
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3D5E97378166F3DBE21663C0EED0F27990176409
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402423.roa
Signing time:             Sat 18 Apr 2026 19:19:16 +0000
ROA not before:           Sat 18 Apr 2026 19:14:16 +0000
ROA not after:            Sat 17 Apr 2027 19:19:16 +0000
asID:                     402423
IP address blocks:        40.27.80.0/24 maxlen: 24
                          40.27.81.0/24 maxlen: 24
                          40.27.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5e:97:37:81:66:f3:db:e2:16:63:c0:ee:d0:f2:79:90:17:64:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 18 19:14:16 2026 GMT
            Not After : Apr 17 19:19:16 2027 GMT
        Subject: CN=402114B6C69E54B2946C124124A59321417C5E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:5b:bb:f0:d2:48:74:1b:93:ab:fb:85:99:
                    d3:86:b4:22:2a:2c:49:37:f8:e9:c9:b2:41:66:b2:
                    36:b3:d0:39:31:6d:3d:9f:91:04:3b:cc:4f:5d:d3:
                    d9:de:62:20:2c:1a:c5:62:ac:6e:7e:f8:a1:87:17:
                    df:6c:59:bc:86:8c:ee:b2:a4:b6:df:f6:d2:76:0f:
                    a8:bb:bb:81:3f:7e:26:19:ff:54:29:d6:57:36:52:
                    57:35:f8:8e:b4:45:05:a9:95:a6:a7:27:6c:dc:87:
                    f0:8b:11:57:a8:ba:88:9f:9b:1f:17:61:31:13:5c:
                    09:7f:0b:ac:e1:34:90:b0:e1:06:20:87:24:ad:65:
                    cc:6b:33:d4:4e:4f:f8:e8:5f:88:3e:6c:ae:14:ab:
                    0b:eb:88:a3:f7:49:00:d6:5d:3f:df:07:30:f9:1f:
                    d5:b1:36:e3:1a:e5:d9:16:75:b3:1e:d1:e9:e0:83:
                    c6:cb:09:43:68:ed:be:10:e4:64:cc:b4:97:9b:ef:
                    93:0a:7e:f0:78:53:e6:da:72:10:74:9f:bc:1b:f0:
                    ac:1b:62:0a:32:79:40:a2:9a:4d:19:9d:0c:cf:ac:
                    b9:76:a7:84:da:27:55:75:02:11:79:d5:de:5e:ff:
                    30:f1:3d:5a:e1:a3:44:5d:2e:a7:95:a4:68:83:a3:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:21:14:B6:C6:9E:54:B2:94:6C:12:41:24:A5:93:21:41:7C:5E:4C
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.80.0-40.27.82.255

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:6a:d3:4f:84:5f:77:c5:38:0d:97:53:c2:24:3c:d3:ff:
         fa:fb:a7:2d:71:3f:a1:ba:1b:66:a0:f6:39:af:b2:c4:3a:90:
         6e:10:b7:12:f0:b0:de:03:0c:1a:6a:24:1a:14:dd:69:55:c3:
         ef:21:11:83:c7:0c:6c:bb:8e:d5:21:f3:51:d1:ed:1e:b2:f6:
         23:d3:84:00:7d:98:90:66:83:3c:da:cc:cd:66:9e:7e:5f:23:
         36:57:dc:ea:a5:6b:cb:80:67:a7:60:ab:69:c7:0d:d2:21:a6:
         5c:f6:68:43:97:ca:83:a6:95:f9:6f:73:8b:c7:52:b0:70:18:
         f0:81:ce:13:e9:e7:3c:bd:80:c4:7e:5c:35:c5:fe:f5:37:24:
         14:c5:1a:b2:09:a7:cb:4a:39:f3:ca:e4:48:ab:f0:4b:a7:95:
         9c:23:67:89:c7:ce:6a:d1:b7:15:78:b3:dc:aa:d4:06:0d:cd:
         39:fd:57:8a:ec:7b:e1:97:cf:dc:7b:62:0d:d6:05:9e:da:a5:
         31:4c:e9:96:ff:3d:3f:25:a0:75:9c:5a:a6:1e:51:35:06:15:
         17:8a:4b:f8:b8:1c:dd:bc:5b:97:d8:1a:22:11:80:d0:92:31:
         3e:aa:cc:4d:5c:77:c7:a6:f5:08:4a:47:91:0e:85:00:1c:cb:
         98:87:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 05:54:11 2026 by rpki-client