Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4826.roa
File:                     AS4826.roa (raw, json)
Hash identifier:          IVbVhkCOP790nyQJW1F600CrG5krJontwMVUJ1j+h7w=
Subject key identifier:   C8:FC:83:5A:F8:F0:5F:27:21:23:A7:7C:77:80:6D:1B:41:DA:68:9C
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       72D24E2E6D51F1635661D8BA246317A2A965DE34
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4826.roa
Signing time:             Tue 01 Sep 2026 14:36:20 +0000
ROA not before:           Tue 01 Sep 2026 14:31:20 +0000
ROA not after:            Tue 31 Aug 2027 14:36:20 +0000
asID:                     4826
IP address blocks:        40.27.160.0/22 maxlen: 24
                          40.27.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d2:4e:2e:6d:51:f1:63:56:61:d8:ba:24:63:17:a2:a9:65:de:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep  1 14:31:20 2026 GMT
            Not After : Aug 31 14:36:20 2027 GMT
        Subject: CN=C8FC835AF8F05F272123A77C77806D1B41DA689C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:a7:f8:d8:40:6d:cd:26:81:3e:e2:fa:e2:
                    18:6c:c0:16:79:53:61:c4:ce:b8:27:91:fd:eb:97:
                    7d:38:03:d1:de:d3:09:8d:e7:90:be:d1:b5:f9:ce:
                    82:cb:3e:d8:43:50:f4:cb:6c:60:7e:30:35:85:9f:
                    3f:53:87:d7:50:2a:08:e6:fe:a2:8b:6d:6e:fd:4d:
                    9c:ee:9e:7e:20:77:83:15:15:85:ae:ab:8b:eb:c7:
                    63:c8:8e:ab:ec:ed:0c:48:35:a6:6a:d8:5b:d9:a2:
                    7a:8d:35:91:4a:96:20:90:e3:89:84:ee:d8:f7:86:
                    5c:50:95:62:51:e3:53:28:e5:bd:25:17:0a:e3:b0:
                    41:0e:50:d6:7a:7e:15:a5:e2:9b:db:e4:b7:99:38:
                    33:11:db:0f:c5:ec:0a:12:7a:ab:84:70:02:9c:e0:
                    6e:09:49:ac:ad:ed:c8:9d:1f:d7:4b:fc:75:19:fa:
                    92:f9:d1:4f:30:03:11:7c:f8:a1:2a:93:99:57:c2:
                    8d:37:68:1b:d6:b5:4f:c3:0a:4c:a4:b6:31:8c:43:
                    d0:c5:b7:df:ec:57:9f:5f:57:80:10:97:7b:be:e9:
                    13:7d:35:53:09:88:45:00:2a:92:12:29:bf:e5:59:
                    63:08:5a:2e:de:72:12:0a:5c:b6:97:07:1a:fa:97:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FC:83:5A:F8:F0:5F:27:21:23:A7:7C:77:80:6D:1B:41:DA:68:9C
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4826.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.160.0/22
                  40.27.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:20:8b:ad:13:48:06:7a:ba:7c:8d:4a:af:4a:dd:5f:5b:c2:
         70:53:e3:06:76:19:61:61:36:50:56:5d:d3:cb:ed:85:2b:65:
         d2:7e:4c:4f:6b:03:2b:30:9e:2d:22:38:b6:ce:40:67:f1:01:
         c4:76:7f:e5:7c:85:da:c9:5e:e3:af:2f:b1:33:7e:ad:ec:7f:
         cc:71:e2:38:34:60:6f:01:8f:8a:87:28:c9:9a:16:7d:31:f9:
         2a:f5:81:fb:ca:29:1b:40:77:e4:b0:66:3f:07:36:b9:66:4d:
         8c:89:c9:98:14:c4:a4:86:fa:5e:4f:ab:91:1b:6b:66:a4:b4:
         2e:c6:2e:cc:81:06:3f:34:6e:35:f8:06:dc:b7:51:4f:87:41:
         b5:ed:30:9b:f1:83:a2:ea:c2:c5:19:ca:b1:fe:68:d4:83:b9:
         e3:bf:a5:de:f8:c2:79:8f:58:aa:00:1c:3c:20:ba:6f:34:7a:
         34:f1:1a:b2:6e:13:32:24:c3:c9:cf:c6:78:9b:3c:e2:2e:dc:
         fa:cb:9e:fa:98:72:98:fa:0f:d2:b0:a3:63:4c:ba:15:fd:d7:
         72:7f:90:a5:a6:06:e2:03:ce:fa:de:25:d4:ee:4c:3a:29:61:
         78:a9:fe:2d:f7:71:30:86:61:f1:cc:cc:31:0a:c6:3d:76:23:
         53:84:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:22:59 2026 by rpki-client