Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401362.roa
File:                     AS401362.roa (raw, json)
Hash identifier:          XtKvXzbJt/85FDa6FKW8qgPXL7s2/12adgwojZiicEk=
Subject key identifier:   68:83:52:22:85:FB:27:A7:1A:E0:08:C9:2D:39:30:65:47:A3:F2:6A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       166F78CEE8F065D291D211481E1C01B1417C46E3
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401362.roa
Signing time:             Wed 26 Aug 2026 11:21:50 +0000
ROA not before:           Wed 26 Aug 2026 11:16:50 +0000
ROA not after:            Wed 25 Aug 2027 11:21:50 +0000
asID:                     401362
IP address blocks:        206.53.52.0/24 maxlen: 24
                          206.53.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6f:78:ce:e8:f0:65:d2:91:d2:11:48:1e:1c:01:b1:41:7c:46:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 26 11:16:50 2026 GMT
            Not After : Aug 25 11:21:50 2027 GMT
        Subject: CN=6883522285FB27A71AE008C92D39306547A3F26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:4c:64:eb:4a:aa:4d:ef:47:2c:e5:69:e6:
                    15:72:d4:f0:a4:39:33:a2:5f:09:19:35:b8:f6:3a:
                    9a:4b:ab:84:ec:d7:71:1e:a2:66:5e:70:b0:63:88:
                    1b:a5:b4:40:fe:e9:fb:d5:62:aa:ed:ef:98:a6:44:
                    4c:76:32:ea:70:b1:01:5a:ca:8c:7c:ef:83:2f:52:
                    13:a2:c7:f7:f7:86:06:0c:ff:e4:9e:8e:cc:43:b6:
                    3e:58:68:9d:86:2e:51:a8:15:fb:75:34:19:52:39:
                    6d:4b:b9:4a:fe:d3:eb:24:3e:f0:82:33:84:fa:40:
                    0a:e5:8e:6d:ce:c8:2d:32:84:63:82:ce:0f:b0:a1:
                    c0:98:12:e0:42:46:e3:6f:6e:f1:6d:bb:e2:1b:4c:
                    d5:ff:9e:b6:84:6f:44:bf:97:52:c6:6f:28:72:19:
                    94:ff:0d:44:97:af:5e:e4:1c:1e:5f:fc:a2:06:9c:
                    ab:50:e6:84:59:28:f0:99:f6:66:fc:7d:c2:fc:f0:
                    b3:a6:f3:c3:41:1a:37:f7:5c:e2:36:d9:ae:06:39:
                    27:e4:6b:0b:5f:60:3e:ca:dc:b6:33:4c:5d:ca:5f:
                    18:10:69:95:06:de:6a:db:1f:7f:72:59:fc:92:16:
                    46:89:70:20:66:4a:17:1f:9f:ef:44:01:97:88:d4:
                    72:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:83:52:22:85:FB:27:A7:1A:E0:08:C9:2D:39:30:65:47:A3:F2:6A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:f9:7e:b4:71:38:7b:0e:3a:9c:a2:10:3a:1b:d8:05:ef:ca:
         80:eb:88:c5:67:9b:ce:40:fc:0c:7e:fb:c3:f2:82:17:a9:b9:
         bd:4d:46:97:4f:7b:83:c2:30:fb:1c:e7:7b:83:59:09:c3:34:
         f3:ca:17:b4:1c:a1:92:21:ee:44:ee:6f:8a:62:05:43:59:6e:
         6f:eb:b5:7d:ac:20:8e:8c:ff:83:46:fa:c8:d8:ba:33:bf:23:
         61:3f:f5:71:bb:62:db:95:fd:69:66:08:2d:46:07:14:2f:e5:
         f2:49:df:85:40:68:62:7b:db:b5:22:22:04:32:28:61:41:50:
         05:7e:45:7e:57:14:5c:a4:fe:3c:91:cc:00:e4:a2:42:07:27:
         09:2a:f7:d8:d4:bd:0a:a8:f0:e2:06:ea:6e:40:8a:2c:77:ab:
         41:5f:a8:b4:fe:9d:d3:2c:01:ca:9c:97:f4:bc:f9:bd:44:e0:
         c1:bb:0f:6a:cb:0d:b6:d7:15:f1:45:4e:14:71:e3:cf:75:b4:
         ed:99:48:97:91:5d:0a:85:37:5b:35:26:fa:f2:a2:5f:f5:fc:
         fa:bc:89:aa:00:0a:73:ac:78:09:76:27:9c:cf:9e:cd:09:b5:
         35:77:08:c2:53:10:e6:c8:d5:dc:2d:34:c8:8a:5a:0a:60:e9:
         f4:47:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:04 2026 by rpki-client