Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa
File:                     AS40092.roa (raw, json)
Hash identifier:          piA3AmVuKwZ53x2SSH/ZkL7hrb2mQ3dpfEwHVrHzRww=
Subject key identifier:   14:22:E6:50:18:DF:3A:AC:1E:89:09:90:EF:3D:B7:65:E6:5D:29:D0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3DF5F789695D969114C94C68F1FA7D1B1A8AD6A6
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa
Signing time:             Thu 21 May 2026 13:25:14 +0000
ROA not before:           Thu 21 May 2026 13:20:14 +0000
ROA not after:            Thu 20 May 2027 13:25:14 +0000
asID:                     40092
IP address blocks:        45.56.216.0/21 maxlen: 24
                          45.114.224.0/22 maxlen: 24
                          66.102.128.0/20 maxlen: 24
                          103.26.140.0/22 maxlen: 24
                          172.96.176.0/22 maxlen: 24
                          190.180.144.0/22 maxlen: 24
                          200.69.0.0/21 maxlen: 24
                          200.69.16.0/22 maxlen: 24
                          208.68.104.0/22 maxlen: 24
                          208.79.216.0/22 maxlen: 24
                          216.7.88.0/22 maxlen: 24
                          216.222.192.0/23 maxlen: 24
                          216.222.196.0/22 maxlen: 24
                          216.222.200.0/23 maxlen: 24
                          2604:9780::/32 maxlen: 48
                          2605:6f00::/32 maxlen: 48
                          2605:6f03::/32 maxlen: 48
                          2605:6f07::/32 maxlen: 48
                          2606:bd00::/32 maxlen: 48
                          2620:b:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f5:f7:89:69:5d:96:91:14:c9:4c:68:f1:fa:7d:1b:1a:8a:d6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 21 13:20:14 2026 GMT
            Not After : May 20 13:25:14 2027 GMT
        Subject: CN=1422E65018DF3AAC1E890990EF3DB765E65D29D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:0d:a4:15:f1:f0:75:6e:c8:4d:95:d6:fd:
                    e9:1d:86:be:95:e8:e0:aa:32:35:65:2c:bf:2f:de:
                    cd:e1:68:33:f6:23:90:09:d2:5d:ba:02:ca:dd:4d:
                    f3:aa:44:8e:f5:ed:43:fa:1f:6c:da:65:f9:c9:65:
                    e8:78:fb:89:82:8c:d7:ae:70:aa:c6:37:fb:03:31:
                    7b:ae:94:ce:f0:28:a3:47:f4:f2:5b:83:c2:ac:fe:
                    51:81:7b:8e:4b:d8:68:3f:5a:35:0e:67:4a:40:40:
                    70:be:7b:b8:dc:8c:35:f0:13:a5:fd:b8:1f:2e:f9:
                    dc:e9:8b:7b:57:f7:23:e5:e6:9a:a1:40:a3:b5:b1:
                    10:43:96:a1:aa:ad:a3:ae:48:66:9b:bf:d7:8e:fc:
                    41:00:81:6a:5f:26:d2:f4:8e:b3:93:88:1a:a5:16:
                    65:25:0e:d4:cf:53:e6:88:11:a6:f5:85:07:62:54:
                    a3:d5:f1:b9:4b:89:94:5c:35:2e:b4:25:a6:d6:d1:
                    82:b8:2b:5a:6b:bd:6f:83:b3:99:b1:63:2d:51:ac:
                    25:dd:90:cc:d7:98:3e:c3:58:e2:f1:0f:a0:50:2c:
                    e1:d1:e7:5e:71:b5:64:1d:82:d0:2f:b0:08:63:f2:
                    07:97:25:f3:85:39:f2:81:88:39:4b:6f:54:56:8c:
                    00:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:22:E6:50:18:DF:3A:AC:1E:89:09:90:EF:3D:B7:65:E6:5D:29:D0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.216.0/21
                  45.114.224.0/22
                  66.102.128.0/20
                  103.26.140.0/22
                  172.96.176.0/22
                  190.180.144.0/22
                  200.69.0.0/21
                  200.69.16.0/22
                  208.68.104.0/22
                  208.79.216.0/22
                  216.7.88.0/22
                  216.222.192.0/23
                  216.222.196.0-216.222.201.255
                IPv6:
                  2604:9780::/32
                  2605:6f00::/32
                  2605:6f03::/32
                  2605:6f07::/32
                  2606:bd00::/32
                  2620:b:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:6c:9b:ec:1a:3e:8d:a3:a7:13:ab:3b:29:33:d3:b4:34:5c:
         f3:55:f5:81:d9:30:e7:ef:3c:37:e8:ce:e9:38:78:3d:ab:34:
         74:1e:f1:c3:8f:b8:f8:a4:99:3d:0b:ee:5a:9b:93:51:85:29:
         74:03:be:05:1b:8a:9c:83:44:45:e6:fe:bd:60:35:7c:80:34:
         ea:fb:81:a8:52:d7:53:49:45:a8:03:a7:3a:2d:fa:6a:4d:96:
         b1:18:e1:55:af:1a:20:45:c9:93:3b:fd:18:30:ff:fe:a0:59:
         fb:90:eb:40:1c:75:6f:8a:16:3b:36:98:bf:7c:02:70:3e:0a:
         63:66:83:30:5c:67:6f:5e:eb:61:c2:45:cb:93:4e:9f:78:c2:
         97:da:1a:51:42:fb:89:8d:1c:c4:c4:1f:41:f4:91:e3:b1:7d:
         6c:5d:95:28:bb:7c:4f:62:af:59:60:4b:4d:ef:b0:11:9c:41:
         12:31:c1:58:69:fc:69:04:cd:2e:ae:6d:c0:fd:04:6e:07:08:
         3f:fa:ce:40:b0:df:87:c5:9a:a2:19:68:f5:1b:89:e1:6e:36:
         af:40:44:01:93:53:07:e3:dd:9a:37:88:c6:5f:0c:a9:52:09:
         74:16:ba:3a:cf:69:75:4d:e2:88:08:54:93:e2:65:41:ee:1a:
         82:5f:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:12:23 2026 by rpki-client