Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          jC41u1k22to/whltsa0/Vdaby3F07y0rleDjB9F1iaA=
Subject key identifier:   C3:48:E8:AB:F1:06:59:24:15:2B:25:05:BC:A8:35:2C:F1:C8:90:0D
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       63FE89427826CCEFD45CB8A4F91A3927ABB43A2A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa
Signing time:             Sat 13 Jun 2026 04:26:06 +0000
ROA not before:           Sat 13 Jun 2026 04:21:06 +0000
ROA not after:            Sat 12 Jun 2027 04:26:06 +0000
asID:                     40676
IP address blocks:        104.234.134.0/24 maxlen: 24
                          206.53.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fe:89:42:78:26:cc:ef:d4:5c:b8:a4:f9:1a:39:27:ab:b4:3a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 13 04:21:06 2026 GMT
            Not After : Jun 12 04:26:06 2027 GMT
        Subject: CN=C348E8ABF1065924152B2505BCA8352CF1C8900D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:4d:4e:63:18:07:ab:2b:c4:84:26:f8:a0:
                    3d:7b:b2:11:19:75:89:00:21:fc:55:d9:84:37:c9:
                    ae:f6:66:e1:3d:c8:e3:38:02:10:40:7f:96:49:bd:
                    a6:43:c1:6c:b8:e0:94:24:4c:b2:29:97:ba:bd:a7:
                    ae:ca:b3:09:cd:cc:d1:40:39:3b:78:0d:43:a3:b9:
                    14:ff:89:c8:a4:d0:b7:6f:82:eb:46:77:a4:7c:54:
                    f5:2e:7b:78:83:6f:2d:6b:7b:42:86:89:fe:c8:6f:
                    9e:e3:c3:c8:af:3b:9e:23:ee:dd:5e:27:15:eb:3e:
                    67:8a:25:e3:1f:79:7f:01:14:46:98:ed:6b:d6:f7:
                    56:35:5d:4e:a3:2e:94:6e:4e:77:87:0c:b0:03:10:
                    06:3e:28:d9:1f:94:f1:0a:1a:14:45:1e:85:dd:cf:
                    aa:f9:d7:b1:6f:c9:fd:4b:17:02:99:ef:c9:86:15:
                    89:52:2f:df:4b:d8:e4:4e:a6:a6:3f:3a:d0:ea:da:
                    1d:f8:bd:2b:54:90:ee:64:61:d6:36:15:c7:cd:5f:
                    ea:26:f3:9d:9a:4b:74:e1:fa:4e:4f:b9:b3:64:e4:
                    9d:45:14:6c:a7:d8:43:80:df:e6:e5:0f:23:82:ff:
                    65:04:09:04:30:32:d2:36:62:1e:93:19:7a:82:7f:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:E8:AB:F1:06:59:24:15:2B:25:05:BC:A8:35:2C:F1:C8:90:0D
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.134.0/24
                  206.53.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:c9:5d:2b:15:81:25:ed:9c:5e:91:ce:3a:2e:63:48:64:17:
         06:25:b9:d8:d5:f3:6c:dc:4b:05:42:db:b0:87:35:aa:f2:b5:
         0d:1c:e0:9f:d7:54:19:ba:3c:47:04:fa:17:ba:8f:c7:fa:2c:
         97:d7:57:a8:95:4a:b4:a6:46:5e:65:e6:a8:5a:a3:ca:89:f6:
         03:71:a0:b6:9b:11:60:38:ac:98:ec:46:c9:be:5e:42:a2:b4:
         fe:0b:fe:67:74:54:85:b4:5d:ef:f1:f4:e5:44:a0:58:89:92:
         21:76:7d:c1:22:f3:1a:b8:b5:03:d5:83:29:c5:cc:29:ec:25:
         39:e0:a8:ae:44:b3:c2:ae:dd:e9:45:f4:1d:b0:86:73:ac:f2:
         1b:80:bf:66:7e:6d:2f:43:91:65:59:74:60:c1:64:5d:ad:24:
         58:c5:f8:29:04:ba:36:89:43:ab:01:7c:17:b6:54:23:19:41:
         e0:45:97:68:61:60:c7:d8:c8:07:e4:32:3e:46:c6:2e:e4:bf:
         ff:94:22:e0:8e:fc:e9:32:3b:01:a4:70:c0:0f:45:cf:51:67:
         ea:06:62:93:e3:e6:1a:4b:3d:06:fb:22:fe:e9:69:ee:79:0a:
         69:d6:7f:54:33:66:73:1e:5a:e6:35:36:d8:fc:32:47:97:b1:
         dc:fc:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:28 2026 by rpki-client