Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          tnI5lwHHpcRPzYVpno/C0nDfjG3+3+nS8CIYVGHWjZU=
Subject key identifier:   5E:84:43:0A:33:FE:8C:D8:CB:2F:CC:59:ED:17:BE:34:61:DE:73:1B
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       78C46D5D0D2C711EC4050BFF41D1384C13180EAB
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS46450.roa
Signing time:             Mon 13 Apr 2026 12:24:28 +0000
ROA not before:           Mon 13 Apr 2026 12:19:28 +0000
ROA not after:            Mon 12 Apr 2027 12:24:28 +0000
asID:                     46450
IP address blocks:        40.27.24.0/22 maxlen: 24
                          40.27.64.0/22 maxlen: 24
                          40.27.76.0/22 maxlen: 24
                          40.27.84.0/22 maxlen: 24
                          40.27.128.0/22 maxlen: 24
                          40.27.144.0/22 maxlen: 24
                          40.27.156.0/22 maxlen: 24
                          40.27.164.0/22 maxlen: 24
                          40.27.168.0/22 maxlen: 24
                          40.27.172.0/23 maxlen: 24
                          40.27.188.0/22 maxlen: 24
                          40.27.192.0/22 maxlen: 24
                          40.27.208.0/22 maxlen: 24
                          40.27.212.0/22 maxlen: 24
                          40.27.224.0/22 maxlen: 24
                          40.27.248.0/22 maxlen: 24
                          40.27.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c4:6d:5d:0d:2c:71:1e:c4:05:0b:ff:41:d1:38:4c:13:18:0e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 13 12:19:28 2026 GMT
            Not After : Apr 12 12:24:28 2027 GMT
        Subject: CN=5E84430A33FE8CD8CB2FCC59ED17BE3461DE731B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:1e:18:b8:9b:29:10:46:0d:ca:f7:1c:05:
                    b4:3c:70:49:87:22:19:68:20:ca:a1:86:8d:65:a5:
                    fc:25:23:75:20:c9:5b:e1:cf:58:65:4f:76:7c:c2:
                    69:9d:b2:5b:5d:55:d0:cb:30:36:fc:75:1b:4e:c8:
                    4a:ba:3a:16:0e:07:69:d8:b7:e5:f9:dd:77:77:34:
                    51:4c:fb:ea:12:3d:0c:64:3f:77:c1:12:87:8d:2d:
                    96:18:3e:a2:d9:5d:8d:43:b2:f6:13:35:f2:fa:70:
                    62:a1:14:27:73:72:91:07:6b:01:bf:5c:28:9e:2b:
                    10:e6:79:a6:e8:e0:78:e7:3c:e9:fd:51:f6:21:ba:
                    8e:d8:18:91:bb:9b:4e:cf:2d:38:da:aa:77:df:05:
                    d3:26:1f:86:6a:3b:32:b0:96:cc:08:8f:3e:9b:4f:
                    a6:e9:c2:f5:76:08:45:29:af:31:c9:e1:c4:ce:94:
                    fb:ea:6a:58:38:d0:9e:f3:82:df:5d:04:23:70:40:
                    32:ed:d2:63:e5:99:ed:4e:f5:53:4e:ec:c3:bf:54:
                    87:b0:bb:31:ab:e6:2d:85:92:1c:92:98:d1:db:7b:
                    4c:ae:fe:2d:ee:b9:73:bf:83:30:c2:e4:6f:28:ed:
                    a7:2d:1e:20:ca:de:67:79:c0:e8:bf:3c:55:57:b9:
                    65:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:84:43:0A:33:FE:8C:D8:CB:2F:CC:59:ED:17:BE:34:61:DE:73:1B
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.24.0/22
                  40.27.64.0/22
                  40.27.76.0/22
                  40.27.84.0/22
                  40.27.128.0/22
                  40.27.144.0/22
                  40.27.156.0/22
                  40.27.164.0-40.27.173.255
                  40.27.188.0-40.27.195.255
                  40.27.208.0/21
                  40.27.224.0/22
                  40.27.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:57:75:8a:3d:f7:e5:e7:66:31:8c:c7:0c:50:ff:f4:fb:10:
         11:44:e4:37:e2:9c:33:7c:05:5a:69:8e:52:4b:1b:da:3d:3a:
         13:5c:38:45:ac:95:05:7a:06:60:92:c6:dc:9f:46:5e:25:b8:
         db:21:8a:59:0b:60:28:b1:ef:f9:14:3e:e4:10:bd:48:a8:40:
         e8:e8:15:63:bb:f5:e7:f3:62:68:cc:d4:c5:7d:83:e1:93:a4:
         ed:a1:c0:6d:2d:b6:f5:25:43:1b:31:9e:17:dd:7b:b9:c2:a3:
         f3:de:77:01:84:4b:dc:04:d8:d6:09:97:13:4e:d6:85:7c:00:
         b5:75:71:8f:a2:25:0a:e0:ec:09:11:24:1a:eb:3a:e8:d4:64:
         bc:26:6c:7a:5b:75:c7:3a:05:5d:59:00:e3:d7:ef:b0:4c:dc:
         c6:e6:28:04:ac:d4:03:8c:50:10:bf:46:b2:e1:22:f2:8a:e5:
         26:77:a2:da:1f:e3:7d:02:f3:6e:41:98:c6:78:48:1d:d6:7b:
         f6:0d:5b:ae:98:72:ae:e8:42:3a:ee:6d:e7:f9:fc:01:f7:7a:
         70:37:a1:3d:48:e5:22:fc:55:48:04:f4:55:a2:39:68:2f:99:
         22:fb:d2:86:80:e3:74:6c:14:19:c2:ad:95:cc:17:01:0c:85:
         9b:fb:49:06
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgIUeMRtXQ0scR7EBQv/QdE4TBMYDqswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDEzMTIxOTI4WhcNMjcwNDEyMTIyNDI4
WjAzMTEwLwYDVQQDEyg1RTg0NDMwQTMzRkU4Q0Q4Q0IyRkNDNTlFRDE3QkUzNDYx
REU3MzFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKceGLibKRBG
Dcr3HAW0PHBJhyIZaCDKoYaNZaX8JSN1IMlb4c9YZU92fMJpnbJbXVXQyzA2/HUb
TshKujoWDgdp2Lfl+d13dzRRTPvqEj0MZD93wRKHjS2WGD6i2V2NQ7L2EzXy+nBi
oRQnc3KRB2sBv1wonisQ5nmm6OB45zzp/VH2IbqO2BiRu5tOzy042qp33wXTJh+G
ajsysJbMCI8+m0+m6cL1dghFKa8xyeHEzpT76mpYONCe84LfXQQjcEAy7dJj5Znt
TvVTTuzDv1SHsLsxq+YthZIckpjR23tMrv4t7rlzv4MwwuRvKO2nLR4gyt5necDo
vzxVV7ll1QIDAQABo4IC0DCCAswwHQYDVR0OBBYEFF6EQwoz/ozYyy/MWe0XvjRh
3nMbMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzQ2NDUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHEG
CCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQCKBsYAwQCKBtAAwQCKBtMAwQCKBtU
AwQCKBuAAwQCKBuQAwQCKBucMAwDBAIoG6QDBAEoG6wwDAMEAigbvAMEAigbwAME
Aygb0AMEAigb4AMEAygb+DANBgkqhkiG9w0BAQsFAAOCAQEAWFd1ij335edmMYzH
DFD/9PsQEUTkN+KcM3wFWmmOUksb2j06E1w4RayVBXoGYJLG3J9GXiW42yGKWQtg
KLHv+RQ+5BC9SKhA6OgVY7v15/NiaMzUxX2D4ZOk7aHAbS229SVDGzGeF917ucKj
8953AYRL3ATY1gmXE07WhXwAtXVxj6IlCuDsCREkGus66NRkvCZselt1xzoFXVkA
49fvsEzcxuYoBKzUA4xQEL9GsuEi8orlJnei2h/jfQLzbkGYxnhIHdZ79g1brphy
ruhCOu5t5/n8Afd6cDehPUjlIvxVSAT0VaI5aC+ZIvvShoDjdGwUGcKtlcwXAQyF
m/tJBg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:05:12 2026 by rpki-client