Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402865.roa
File:                     AS402865.roa (raw, json)
Hash identifier:          JWE5oSPwt3othy2b4O4BGGdOxqf22RfKzuPLH5RZ+HM=
Subject key identifier:   24:FA:44:8D:6D:17:A8:B2:E3:6F:4E:6A:A0:10:C6:29:9E:19:9A:4B
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2947FE9A9FF04E619592AF19725A287F07B8CA98
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402865.roa
Signing time:             Sun 23 Aug 2026 07:15:03 +0000
ROA not before:           Sun 23 Aug 2026 07:10:03 +0000
ROA not after:            Sun 22 Aug 2027 07:15:03 +0000
asID:                     402865
IP address blocks:        40.27.107.0/24 maxlen: 24
                          40.27.125.0/24 maxlen: 24
                          40.27.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 10:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:47:fe:9a:9f:f0:4e:61:95:92:af:19:72:5a:28:7f:07:b8:ca:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 23 07:10:03 2026 GMT
            Not After : Aug 22 07:15:03 2027 GMT
        Subject: CN=24FA448D6D17A8B2E36F4E6AA010C6299E199A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:16:6a:f8:3a:66:be:82:f8:26:67:de:cd:
                    a0:9c:f0:5f:62:42:e9:42:6d:e4:e0:10:65:e8:be:
                    4b:f0:51:13:71:2a:95:b2:d2:36:b1:23:44:aa:31:
                    55:c8:b0:d4:1b:b6:0b:d8:1e:93:60:e0:16:43:d2:
                    35:4e:4c:f7:a5:e2:fe:10:44:43:a4:58:8a:af:82:
                    07:91:b1:20:c2:c6:37:67:bc:30:9b:e0:38:88:3f:
                    89:99:e7:12:07:cd:e8:9f:4d:e2:d9:48:67:5e:99:
                    d4:0d:25:08:11:29:00:e9:fa:7c:6d:29:24:31:6a:
                    a8:34:7d:4f:6f:58:a1:81:b5:0f:a4:c7:8b:d8:99:
                    f2:ea:d1:d8:25:22:ff:c7:30:68:4f:3b:c4:77:00:
                    e0:f2:69:f4:7f:40:96:1c:00:bd:7e:de:fe:08:74:
                    39:9d:7a:a1:56:a2:29:a9:e1:d2:97:6d:f7:31:35:
                    ce:2d:70:c6:6a:1e:df:cf:9a:2b:c6:bd:ae:de:2e:
                    3a:5f:9a:1e:6d:fe:a9:22:b7:4c:73:a7:19:c1:16:
                    67:5f:f3:ca:48:bf:94:2e:87:dd:88:64:1d:ca:8c:
                    42:c5:13:ae:b8:a1:2a:64:bf:05:03:c5:cc:b4:b2:
                    fe:1c:a7:04:c3:3c:71:1b:fd:2f:68:62:78:f9:ca:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FA:44:8D:6D:17:A8:B2:E3:6F:4E:6A:A0:10:C6:29:9E:19:9A:4B
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402865.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.107.0/24
                  40.27.125.0/24
                  40.27.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:01:8f:78:6b:c3:e7:1f:35:35:f4:4d:f7:21:c7:ea:24:4c:
         ed:13:61:17:ca:9b:e2:27:0f:65:42:74:0b:67:47:c4:76:2d:
         ca:84:93:ee:70:39:84:5f:ba:50:79:2f:19:0b:a6:f8:46:45:
         71:08:e9:5e:a4:02:89:61:0b:8f:9c:e3:54:86:a6:dc:24:b2:
         08:99:73:de:95:02:92:42:d0:ee:b9:72:48:6b:37:f7:9b:50:
         07:6b:ac:9c:27:ac:75:01:6c:58:6f:28:04:74:c0:f3:6e:d3:
         ea:3c:bc:98:03:ca:41:43:64:7d:12:2f:c3:70:e9:07:ed:f4:
         3a:32:8c:5e:92:30:86:a7:cc:60:19:5e:1e:8f:c7:b6:12:64:
         e4:6b:1e:2a:e6:77:be:c4:4a:cf:92:dc:cd:5f:ee:f6:8f:f9:
         ff:0a:f7:63:6c:56:3d:45:85:1e:ad:1b:6c:85:e3:b7:fb:25:
         67:3a:e1:06:fc:b5:60:30:94:67:5c:9e:79:8d:f4:14:7f:c9:
         2b:56:48:19:3e:b7:ba:f0:fe:25:5f:2a:12:71:7f:e4:62:36:
         54:53:4b:c8:22:52:46:80:0d:30:ab:dd:42:9a:3d:da:51:0d:
         28:e5:ea:47:ea:1f:e8:73:63:b8:f4:90:b4:09:f1:f1:c5:b0:
         cb:1c:71:6e
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUKUf+mp/wTmGVkq8Zcloofwe4ypgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwODIzMDcxMDAzWhcNMjcwODIyMDcxNTAz
WjAzMTEwLwYDVQQDEygyNEZBNDQ4RDZEMTdBOEIyRTM2RjRFNkFBMDEwQzYyOTlF
MTk5QTRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPEWavg6Zr6C
+CZn3s2gnPBfYkLpQm3k4BBl6L5L8FETcSqVstI2sSNEqjFVyLDUG7YL2B6TYOAW
Q9I1Tkz3peL+EERDpFiKr4IHkbEgwsY3Z7wwm+A4iD+JmecSB83on03i2UhnXpnU
DSUIESkA6fp8bSkkMWqoNH1Pb1ihgbUPpMeL2Jny6tHYJSL/xzBoTzvEdwDg8mn0
f0CWHAC9ft7+CHQ5nXqhVqIpqeHSl233MTXOLXDGah7fz5orxr2u3i46X5oebf6p
IrdMc6cZwRZnX/PKSL+ULofdiGQdyoxCxROuuKEqZL8FA8XMtLL+HKcEwzxxG/0v
aGJ4+co5fQIDAQABo4ICizCCAocwHQYDVR0OBBYEFCT6RI1tF6iy429OaqAQxime
GZpLMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzQwMjg2NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEACgbawMEACgbfQMEACgbhjANBgkq
hkiG9w0BAQsFAAOCAQEAuAGPeGvD5x81NfRN9yHH6iRM7RNhF8qb4icPZUJ0C2dH
xHYtyoST7nA5hF+6UHkvGQum+EZFcQjpXqQCiWELj5zjVIam3CSyCJlz3pUCkkLQ
7rlySGs395tQB2usnCesdQFsWG8oBHTA827T6jy8mAPKQUNkfRIvw3DpB+30OjKM
XpIwhqfMYBleHo/HthJk5GseKuZ3vsRKz5LczV/u9o/5/wr3Y2xWPUWFHq0bbIXj
t/slZzrhBvy1YDCUZ1yeeY30FH/JK1ZIGT63uvD+JV8qEnF/5GI2VFNLyCJSRoAN
MKvdQpo92lENKOXqR+of6HNjuPSQtAnx8cWwyxxxbg==
-----END CERTIFICATE-----
Generated at Mon Aug 24 15:32:42 2026 by rpki-client