Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          Fdqk56q3fKSiFjMguBS13o6C5STADTYEWYZIN2vBxpY=
Subject key identifier:   09:D8:9C:DE:45:E1:48:D1:ED:1A:65:81:2B:B9:E2:3F:25:BE:B0:61
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       34148F8DBF1CF1E46AA32B34560C67F8568DD3AF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa
Signing time:             Tue 23 Jun 2026 19:14:38 +0000
ROA not before:           Tue 23 Jun 2026 19:09:38 +0000
ROA not after:            Tue 22 Jun 2027 19:14:38 +0000
asID:                     40676
IP address blocks:        107.173.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 15:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:14:8f:8d:bf:1c:f1:e4:6a:a3:2b:34:56:0c:67:f8:56:8d:d3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 23 19:09:38 2026 GMT
            Not After : Jun 22 19:14:38 2027 GMT
        Subject: CN=09D89CDE45E148D1ED1A65812BB9E23F25BEB061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:ab:0e:16:36:27:a8:db:9e:de:22:7b:fb:
                    5e:7b:1a:c5:9f:f3:bc:3a:c4:94:19:63:95:04:99:
                    2f:f1:d6:83:07:3e:be:a7:d7:17:47:5e:ba:aa:44:
                    33:8a:b8:28:25:21:cc:85:9a:b2:8b:9b:25:ad:68:
                    9f:1d:ba:73:ed:b3:5a:2d:25:90:a2:13:58:20:40:
                    89:aa:91:48:d2:57:8f:0d:03:23:3d:4e:87:5d:1e:
                    b4:54:c1:13:1c:80:3a:fe:d4:50:30:83:26:bb:37:
                    60:ab:72:69:d7:70:6a:95:1e:62:4f:9b:de:c7:fe:
                    24:5f:6b:f7:91:f7:74:52:99:cf:88:3a:7b:9c:3b:
                    ca:67:77:bb:10:ed:b0:54:70:d8:41:50:f3:f8:b9:
                    2c:4f:64:3c:03:da:7b:9e:e4:d6:1b:99:c6:85:59:
                    7d:0a:41:f9:1e:63:b1:f9:28:17:bd:ab:0e:3e:9e:
                    41:a3:35:21:9d:f8:1e:10:3c:89:3b:6a:38:0f:64:
                    8c:a5:d8:10:b5:24:0c:a5:cc:1b:fd:fe:9c:72:4e:
                    fe:ac:08:df:52:d2:50:30:4f:11:38:f4:3d:72:eb:
                    92:a4:63:fd:59:2d:ae:94:57:a7:4a:fa:86:05:8b:
                    30:bb:4c:69:9b:63:ec:31:52:42:36:5b:d5:b7:66:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D8:9C:DE:45:E1:48:D1:ED:1A:65:81:2B:B9:E2:3F:25:BE:B0:61
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.173.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:20:3b:4f:b0:7e:98:6b:41:7b:6d:de:4a:6c:12:e3:33:64:
         64:9f:90:87:89:20:1f:27:30:eb:c7:ac:60:28:3c:2f:92:ab:
         fe:7a:2f:3e:6c:9f:8c:dd:d0:19:4d:c8:61:ca:09:58:ad:13:
         b6:ef:3c:b1:af:ab:66:00:c6:06:bd:a8:1e:bc:9c:5a:2a:a2:
         9f:b8:32:19:95:a0:51:32:1b:74:5f:00:a0:8f:d6:5f:13:f2:
         16:21:f7:8e:c5:7c:f3:83:20:b8:6b:ad:e8:70:49:87:8b:08:
         a6:a4:de:da:af:ee:bd:d9:61:c1:05:b3:73:a5:8d:82:e8:a7:
         29:a5:06:f0:b2:79:dd:bd:3a:fa:93:ae:13:5e:69:16:14:31:
         b7:06:82:c5:5f:08:e6:f6:1c:2d:0a:a2:dd:a5:42:52:58:49:
         f5:f0:64:a9:1f:74:65:71:6e:96:19:93:fe:e3:38:31:51:07:
         d0:e7:2b:71:96:e5:90:4c:2c:7c:c6:0e:63:31:ad:3c:d6:c4:
         14:6e:37:a3:2f:b7:7c:5e:7d:4b:da:e8:10:84:36:b8:f0:e0:
         77:2d:35:8a:52:c7:ad:9c:8a:9c:32:44:90:bc:25:26:fd:17:
         80:5f:41:17:25:72:49:d7:ea:0d:f8:c5:17:ab:dc:48:48:07:
         1b:22:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 02:59:15 2026 by rpki-client