Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa
File:                     AS40092.roa (raw, json)
Hash identifier:          C2xO2se6e+8fR87WUh3AfGfHQKQoqq70nc151kING5w=
Subject key identifier:   0F:4D:5F:E2:39:25:A0:A4:F6:27:C1:5F:C4:99:33:A6:5C:B2:5A:19
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       10CF5F68F3631D9D7EFF1482B6B75DB37831482C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa
Signing time:             Wed 26 Mar 2025 13:25:35 +0000
ROA not before:           Wed 26 Mar 2025 13:20:35 +0000
ROA not after:            Wed 25 Mar 2026 13:25:35 +0000
asID:                     40092
IP address blocks:        45.56.216.0/21 maxlen: 24
                          45.114.224.0/22 maxlen: 24
                          66.102.128.0/20 maxlen: 24
                          103.26.140.0/22 maxlen: 24
                          172.96.176.0/22 maxlen: 24
                          190.180.144.0/22 maxlen: 24
                          200.69.0.0/21 maxlen: 24
                          200.69.16.0/22 maxlen: 24
                          208.79.216.0/22 maxlen: 24
                          216.7.88.0/22 maxlen: 24
                          2604:9780::/32 maxlen: 48
                          2605:6f00::/32 maxlen: 48
                          2605:6f03::/32 maxlen: 48
                          2606:bd00::/32 maxlen: 48
                          2620:b:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 23:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cf:5f:68:f3:63:1d:9d:7e:ff:14:82:b6:b7:5d:b3:78:31:48:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 26 13:20:35 2025 GMT
            Not After : Mar 25 13:25:35 2026 GMT
        Subject: CN=0F4D5FE23925A0A4F627C15FC49933A65CB25A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:39:69:80:6d:a9:9f:2f:f8:10:30:e1:89:
                    61:1f:98:ea:cb:cb:4e:7c:93:ab:3d:56:c0:2a:c6:
                    dc:56:b0:85:b0:08:51:20:c9:c5:a3:28:04:04:83:
                    66:2b:4c:1e:c3:12:ea:18:7a:53:0d:c1:cc:fa:4c:
                    b0:ea:3b:a0:58:1c:9e:e1:82:50:19:cd:bc:b1:df:
                    8a:f0:b2:89:aa:a9:f0:f9:8c:9b:9e:d8:d1:fb:05:
                    1f:74:dc:ee:d6:68:98:49:7a:ac:28:3e:fe:88:fa:
                    41:c7:f9:f8:f7:6e:db:f3:c3:b0:7d:8f:54:f4:12:
                    be:ae:18:af:e6:60:90:ea:61:cd:7f:e2:90:ce:99:
                    e6:7e:04:81:9a:33:a1:dd:21:cb:b6:a7:8b:2d:7f:
                    3e:64:c5:46:da:2b:c8:69:64:84:d4:b4:88:23:e3:
                    e4:b8:39:3e:5f:9e:29:10:71:18:fa:7e:a3:72:a5:
                    66:91:31:83:46:5f:51:74:f1:5d:a2:b6:82:4c:87:
                    9f:27:28:e6:e1:39:3b:81:b8:d2:33:53:53:31:ca:
                    88:9e:b2:6c:a7:a4:a6:de:74:a2:90:70:89:bd:69:
                    61:91:ee:9a:99:d1:5e:df:77:f3:7a:19:4a:3b:54:
                    a2:6b:37:8c:76:28:9f:0f:3c:c8:96:b5:76:c6:37:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4D:5F:E2:39:25:A0:A4:F6:27:C1:5F:C4:99:33:A6:5C:B2:5A:19
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.216.0/21
                  45.114.224.0/22
                  66.102.128.0/20
                  103.26.140.0/22
                  172.96.176.0/22
                  190.180.144.0/22
                  200.69.0.0/21
                  200.69.16.0/22
                  208.79.216.0/22
                  216.7.88.0/22
                IPv6:
                  2604:9780::/32
                  2605:6f00::/32
                  2605:6f03::/32
                  2606:bd00::/32
                  2620:b:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:46:ce:ca:b8:6f:83:32:82:67:48:df:15:21:a2:70:6f:
         8e:31:c4:20:7d:93:28:4e:f3:da:28:8a:ef:30:04:1e:50:7a:
         e2:66:f9:dd:83:c0:bf:3d:3e:a9:31:73:42:22:f0:ae:fb:bd:
         10:5b:8d:68:c3:e7:b6:22:97:08:e3:2a:a2:b5:47:c4:19:5c:
         80:04:97:f0:d0:74:32:6c:be:61:ce:e9:f5:a4:fb:bb:9d:81:
         37:f0:30:16:10:11:bd:ea:57:6f:0e:54:37:d9:f0:3c:37:72:
         92:37:24:32:e3:c0:e4:6f:a3:59:62:62:a4:d3:19:1f:86:93:
         02:60:36:34:e2:68:c6:7b:59:e0:75:ad:31:65:45:47:ba:fe:
         b8:30:e2:80:0d:a4:83:3f:92:a5:e7:12:9b:f6:f2:87:77:21:
         25:95:43:2e:a5:8f:47:ea:d1:83:d0:44:0e:60:5d:ff:41:6a:
         b7:8f:93:ad:3f:ea:9e:bb:69:94:d7:b5:3d:bc:88:2e:d9:4b:
         fa:38:6f:08:1f:4d:7d:01:05:ae:03:2c:cd:8e:83:60:07:31:
         d5:f8:dd:e0:a2:ba:81:a8:64:5c:23:cc:4a:3f:ad:f5:ed:67:
         83:ea:05:44:e0:1c:3d:1e:29:22:54:70:cd:80:04:3e:c5:b3:
         b3:b2:80:85
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUEM9faPNjHZ1+/xSCtrdds3gxSCwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMzI2MTMyMDM1WhcNMjYwMzI1MTMyNTM1
WjAzMTEwLwYDVQQDEygwRjRENUZFMjM5MjVBMEE0RjYyN0MxNUZDNDk5MzNBNjVD
QjI1QTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2A5aYBtqZ8v
+BAw4YlhH5jqy8tOfJOrPVbAKsbcVrCFsAhRIMnFoygEBINmK0wewxLqGHpTDcHM
+kyw6jugWBye4YJQGc28sd+K8LKJqqnw+YybntjR+wUfdNzu1miYSXqsKD7+iPpB
x/n4927b88OwfY9U9BK+rhiv5mCQ6mHNf+KQzpnmfgSBmjOh3SHLtqeLLX8+ZMVG
2ivIaWSE1LSII+PkuDk+X54pEHEY+n6jcqVmkTGDRl9RdPFdoraCTIefJyjm4Tk7
gbjSM1NTMcqInrJsp6Sm3nSikHCJvWlhke6amdFe33fzehlKO1SiazeMdiifDzzI
lrV2xjfhkQIDAQABo4IC4jCCAt4wHQYDVR0OBBYEFA9NX+I5JaCk9ifBX8SZM6Zc
sloZMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzQwMDkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGC
BggrBgEFBQcBBwEB/wRzMHEwQgQCAAEwPAMEAy042AMEAi1y4AMEBEJmgAMEAmca
jAMEAqxgsAMEAr60kAMEA8hFAAMEAshFEAMEAtBP2AMEAtgHWDArBAIAAjAlAwUA
JgSXgAMFACYFbwADBQAmBW8DAwUAJga9AAMHACYgAAvgADANBgkqhkiG9w0BAQsF
AAOCAQEAKf1Gzsq4b4MygmdI3xUhonBvjjHEIH2TKE7z2iiK7zAEHlB64mb53YPA
vz0+qTFzQiLwrvu9EFuNaMPntiKXCOMqorVHxBlcgASX8NB0Mmy+Yc7p9aT7u52B
N/AwFhARvepXbw5UN9nwPDdykjckMuPA5G+jWWJipNMZH4aTAmA2NOJoxntZ4HWt
MWVFR7r+uDDigA2kgz+SpecSm/byh3chJZVDLqWPR+rRg9BEDmBd/0Fqt4+TrT/q
nrtplNe1PbyILtlL+jhvCB9NfQEFrgMszY6DYAcx1fjd4KK6gahkXCPMSj+t9e1n
g+oFROAcPR4pIlRwzYAEPsWzs7KAhQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:41 2025 by rpki-client