Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4766.roa
File:                     AS4766.roa (raw, json)
Hash identifier:          OiHwI4uPD/nM2iTUocyQM9xDqKUfnsHat44jST1/d6o=
Subject key identifier:   13:96:01:FC:C2:47:41:E1:D1:AC:B5:02:3C:6E:31:E5:52:1F:FB:C8
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       66D62A944A89088D9629535ED8B7F89AB8203A84
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4766.roa
Signing time:             Sun 01 Mar 2026 17:28:08 +0000
ROA not before:           Sun 01 Mar 2026 17:23:08 +0000
ROA not after:            Sun 28 Feb 2027 17:28:08 +0000
asID:                     4766
IP address blocks:        40.183.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d6:2a:94:4a:89:08:8d:96:29:53:5e:d8:b7:f8:9a:b8:20:3a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar  1 17:23:08 2026 GMT
            Not After : Feb 28 17:28:08 2027 GMT
        Subject: CN=139601FCC24741E1D1ACB5023C6E31E5521FFBC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:39:63:2d:d6:d5:b8:73:50:71:60:b3:62:
                    86:8c:e0:17:85:02:bf:92:7a:1f:86:55:a9:db:36:
                    b5:3c:40:59:3f:80:61:3d:f3:47:5e:2a:46:97:87:
                    e9:7f:8f:73:90:f1:a1:86:1b:85:05:72:59:06:73:
                    d9:c3:be:d8:b9:95:4d:25:9f:0c:c5:b6:2f:15:79:
                    5d:3c:0a:a8:86:7b:cd:65:9e:48:70:58:ae:77:a0:
                    48:f4:96:75:2b:c2:f0:c3:09:6d:d6:9f:f8:41:7f:
                    76:bb:97:63:10:47:60:b8:90:a8:fd:f4:67:c8:37:
                    3e:0a:bd:c0:28:01:1c:1d:34:a5:35:fb:e1:20:3d:
                    4a:6e:0e:75:05:94:3c:79:7d:fa:28:00:d2:4a:e1:
                    cb:1f:ca:10:4f:c4:20:6e:5a:7a:af:76:2d:03:4d:
                    68:9e:29:19:b8:65:2e:8e:80:a9:2e:30:8c:cb:2a:
                    dc:c5:ea:70:82:33:01:6c:30:0c:3d:29:16:fd:d9:
                    42:5f:10:7c:04:a3:9c:2e:46:c1:f5:11:4e:64:13:
                    cb:99:ae:ed:95:bf:3b:e3:17:d9:e1:81:36:54:26:
                    d3:4a:cd:22:5e:13:76:17:96:5c:e9:31:ee:12:59:
                    e6:f0:15:f0:87:ee:e5:62:aa:c6:05:54:bf:2f:6a:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:96:01:FC:C2:47:41:E1:D1:AC:B5:02:3C:6E:31:E5:52:1F:FB:C8
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4766.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:ea:f5:8c:df:76:74:6e:74:96:60:8c:26:9b:ca:ab:8b:36:
         36:7d:cb:27:84:68:d4:95:54:c4:9e:ef:c0:2b:51:4d:a8:de:
         b7:bd:3f:40:15:78:7f:40:94:8a:bc:38:56:24:a4:3f:54:b6:
         08:75:d1:e7:98:9c:f2:3a:3c:f4:3e:e8:50:de:da:85:c7:f2:
         e5:c9:c6:95:fd:fb:02:8b:7b:cb:11:d1:4c:e6:d6:f4:27:e1:
         87:e4:6c:6c:b4:db:1d:55:8e:66:d8:cd:ae:26:1f:35:65:d0:
         13:60:2d:c9:01:e1:34:3f:39:73:77:8d:83:ef:c5:4e:5f:22:
         a0:6d:cc:96:b7:1e:92:5c:44:de:cb:64:bb:17:f5:55:24:9f:
         84:4c:9c:2c:f4:cf:0e:f2:0c:b7:44:33:91:80:08:f9:32:ba:
         ab:1f:b0:e2:0b:cb:69:0d:12:60:49:8d:dd:62:05:66:43:2c:
         bd:07:8b:cf:d9:c1:b3:15:3b:ed:56:a7:2e:fd:13:5b:cc:c3:
         5f:a8:4a:05:f0:96:f5:71:5b:76:65:c0:38:40:21:25:37:16:
         f4:02:b0:e0:18:46:00:54:09:e4:75:a6:17:70:b4:92:d9:00:
         06:36:ce:4f:8e:c1:f7:f3:da:ab:9d:1a:ba:ef:87:78:62:8d:
         10:13:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:00:30 2026 by rpki-client