Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          2hFC/n8xSf9HFOGSoosIXOqRWftAFh5l1gEyxVYIXgk=
Subject key identifier:   9B:51:DC:61:5B:92:8A:70:88:A9:0D:BD:74:DB:A5:8C:B4:F0:93:96
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6B626125F743A45440CAB8A9F29434D541172EE4
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa
Signing time:             Sun 19 Apr 2026 10:39:50 +0000
ROA not before:           Sun 19 Apr 2026 10:34:50 +0000
ROA not after:            Sun 18 Apr 2027 10:39:50 +0000
asID:                     40676
IP address blocks:        40.27.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:62:61:25:f7:43:a4:54:40:ca:b8:a9:f2:94:34:d5:41:17:2e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 19 10:34:50 2026 GMT
            Not After : Apr 18 10:39:50 2027 GMT
        Subject: CN=9B51DC615B928A7088A90DBD74DBA58CB4F09396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:b3:34:0c:bb:85:83:e7:ba:3e:e5:90:92:
                    23:d1:30:1c:24:2a:20:db:b4:22:bd:c0:47:3e:a6:
                    6e:fd:85:32:eb:59:62:41:b5:f1:84:69:16:5a:61:
                    5b:a0:45:9e:1f:79:66:67:99:b6:5a:94:29:ac:5f:
                    68:05:10:a2:90:9d:90:b9:1d:66:03:c5:df:00:8f:
                    30:79:42:71:85:ac:0f:0f:8d:7d:a5:4a:f0:37:de:
                    24:12:43:8e:b7:ba:95:1f:ea:b5:f7:63:8e:3a:4f:
                    26:0d:9f:e4:6a:48:93:5b:63:a2:75:8a:66:ee:bc:
                    1d:57:94:22:e0:d4:bc:71:1a:6e:9c:17:08:ac:98:
                    b3:3c:70:55:ff:d7:48:9f:52:18:de:33:de:a5:79:
                    c2:dc:55:00:4e:5c:b3:c8:a6:4f:cc:5b:b9:7f:13:
                    54:c6:44:b6:f6:3f:7a:30:5e:24:00:74:0c:5d:03:
                    3a:35:89:ac:38:f4:27:44:09:cc:47:7c:f6:fb:5a:
                    ab:f5:d9:aa:a9:ec:d9:c4:71:44:5b:c8:2d:92:41:
                    6d:ba:3a:8f:7f:fa:36:4a:5b:b1:ad:ff:4a:c7:89:
                    5d:d7:84:a7:11:17:3b:21:b3:78:94:23:86:ef:3c:
                    e4:ec:61:3c:9c:c5:98:df:7f:d8:60:63:e5:6b:e8:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:51:DC:61:5B:92:8A:70:88:A9:0D:BD:74:DB:A5:8C:B4:F0:93:96
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:03:a7:a9:92:f5:61:1b:75:19:f6:3d:a7:52:df:f9:76:55:
         7e:53:2b:f6:77:ca:ff:6e:6e:a0:fc:de:b1:ef:e2:d0:3a:72:
         00:1b:70:ac:10:82:f4:b2:94:9d:f2:f3:70:97:6d:8b:27:09:
         0c:5d:b9:35:ce:f4:fb:1a:cb:94:97:ea:61:e3:d9:73:43:b0:
         f1:05:d1:d7:68:8e:a5:a7:25:54:3f:4d:24:5d:83:e4:28:98:
         ef:2f:c7:07:01:e7:7e:0c:8d:91:1b:1d:3c:9c:88:df:05:5f:
         30:3e:56:0f:be:c5:93:b4:bf:83:33:b7:0e:f7:b8:33:78:15:
         b5:ab:93:6f:4a:ce:2e:ee:fd:4f:62:c8:60:44:a2:42:c8:02:
         37:d6:33:64:22:42:ef:cc:f4:85:b5:bb:58:80:fe:6f:3a:ae:
         9c:80:90:99:be:60:83:f3:f2:33:e4:f2:77:31:d1:d5:72:9a:
         58:28:b4:82:0a:c8:bd:91:cd:af:d5:fc:01:83:84:61:79:97:
         1e:61:72:2f:26:06:58:1c:ba:29:16:5e:16:51:ff:41:20:3b:
         78:5e:fe:6e:8b:84:91:8f:6a:47:83:1e:3a:ff:a8:27:af:7f:
         18:a8:c2:13:6c:a5:69:3b:b5:2e:7d:7a:c1:47:ba:55:47:29:
         df:79:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:47:25 2026 by rpki-client