Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa
File:                     AS40092.roa (raw, json)
Hash identifier:          OYX6Ahf0vwrpy+AicnTQ5SY6XKiW52tbRRcph1yTHTI=
Subject key identifier:   8D:E3:46:00:40:C7:27:E7:B2:9B:DD:A8:FA:7D:50:6A:96:1E:C2:07
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7746CB396601B9DCAF948E3A629E395011CF0458
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa
Signing time:             Mon 04 Aug 2025 13:14:44 +0000
ROA not before:           Mon 04 Aug 2025 13:09:44 +0000
ROA not after:            Mon 03 Aug 2026 13:14:44 +0000
asID:                     40092
IP address blocks:        45.56.216.0/21 maxlen: 24
                          45.114.224.0/22 maxlen: 24
                          66.102.128.0/20 maxlen: 24
                          103.26.140.0/22 maxlen: 24
                          172.96.176.0/22 maxlen: 24
                          190.180.144.0/22 maxlen: 24
                          200.69.0.0/21 maxlen: 24
                          200.69.16.0/22 maxlen: 24
                          208.68.104.0/22 maxlen: 24
                          208.79.216.0/22 maxlen: 24
                          216.7.88.0/22 maxlen: 24
                          216.222.192.0/23 maxlen: 24
                          2604:9780::/32 maxlen: 48
                          2605:6f00::/32 maxlen: 48
                          2605:6f03::/32 maxlen: 48
                          2605:6f07::/32 maxlen: 48
                          2606:bd00::/32 maxlen: 48
                          2620:b:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 13:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:46:cb:39:66:01:b9:dc:af:94:8e:3a:62:9e:39:50:11:cf:04:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug  4 13:09:44 2025 GMT
            Not After : Aug  3 13:14:44 2026 GMT
        Subject: CN=8DE3460040C727E7B29BDDA8FA7D506A961EC207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:70:83:b9:5d:89:bf:1e:bc:97:f0:8e:8b:
                    eb:fc:f0:67:da:01:c4:ee:02:42:db:35:92:60:2b:
                    ab:4b:4c:bd:c3:06:08:81:21:cb:7d:95:04:65:23:
                    d0:d3:e5:bc:74:fd:9c:7a:21:f5:34:64:be:04:47:
                    3d:e3:bf:ae:d6:e1:c5:a8:4e:cc:0e:d6:68:10:da:
                    1a:0e:77:9f:90:20:79:41:89:7c:f3:a5:4d:12:ab:
                    eb:a8:a6:a7:7c:ee:83:b4:b6:25:f4:8f:f9:58:be:
                    a8:3f:01:33:6b:1e:80:22:7a:36:d8:3e:75:a9:78:
                    d9:14:de:98:d1:9f:72:0d:13:06:93:98:11:cf:ad:
                    2e:e8:06:68:90:2a:02:fb:5e:f3:c0:d9:f6:95:78:
                    60:5e:b3:cf:dd:c4:c5:54:c7:41:34:8b:88:71:3e:
                    29:89:0d:a9:53:a3:91:ed:93:23:ae:54:27:47:d9:
                    60:cf:18:f5:d2:50:22:a2:9c:8f:cd:ac:58:f1:a2:
                    36:a2:e6:79:0f:5d:e0:97:a0:66:ca:7a:1c:a7:71:
                    d7:9e:89:fb:f1:5f:d9:5d:fd:bd:c9:2f:c2:24:bd:
                    00:52:7a:a9:85:b0:fd:72:fe:0b:48:69:9a:b9:4b:
                    03:f6:3a:68:e1:a6:bc:4d:d3:83:df:36:32:f7:54:
                    bd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E3:46:00:40:C7:27:E7:B2:9B:DD:A8:FA:7D:50:6A:96:1E:C2:07
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.216.0/21
                  45.114.224.0/22
                  66.102.128.0/20
                  103.26.140.0/22
                  172.96.176.0/22
                  190.180.144.0/22
                  200.69.0.0/21
                  200.69.16.0/22
                  208.68.104.0/22
                  208.79.216.0/22
                  216.7.88.0/22
                  216.222.192.0/23
                IPv6:
                  2604:9780::/32
                  2605:6f00::/32
                  2605:6f03::/32
                  2605:6f07::/32
                  2606:bd00::/32
                  2620:b:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:83:16:d7:c3:ad:33:bb:2c:26:3e:45:25:24:79:51:a4:d4:
         6c:55:c6:1f:cc:47:8d:a5:33:39:47:d1:4f:c1:e6:e1:97:66:
         4a:17:4c:2c:f2:65:2e:c2:d3:6d:3c:79:b8:f0:18:7b:2a:db:
         72:4e:2e:b2:28:b5:7e:f3:a2:36:9e:61:aa:cb:0e:86:fb:5c:
         f3:40:12:99:44:cf:5c:68:b6:c4:96:fc:a8:e5:05:5b:87:e1:
         fb:bc:9f:51:a7:74:a0:02:46:0c:76:80:27:5b:ff:32:60:23:
         15:6c:9f:8f:57:c1:a0:ff:d9:c7:5c:dd:09:82:82:a0:6a:b9:
         27:95:e2:f3:a1:a0:df:cf:c4:e3:c8:c1:6c:9d:7e:03:a4:dd:
         a6:bd:ce:e5:25:dc:9d:57:eb:ef:a5:df:c6:c6:5c:92:a1:cc:
         e9:42:64:79:fa:8b:67:bc:13:e3:7e:0c:52:bd:61:c3:ba:5a:
         b0:57:5a:b7:39:9d:bb:c0:7e:5f:a0:01:66:90:0a:9a:c0:26:
         74:b3:5a:d6:45:ee:5c:2e:38:63:a9:f3:5c:51:e6:2f:14:51:
         0b:a4:61:69:8d:b1:dd:0d:62:07:4e:2a:82:28:96:b2:97:fb:
         09:3f:cf:81:c1:e0:da:d4:76:b5:17:3a:0a:5a:e3:e7:ff:ff:
         cc:a7:3f:56
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUd0bLOWYBudyvlI46Yp45UBHPBFgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODA0MTMwOTQ0WhcNMjYwODAzMTMxNDQ0
WjAzMTEwLwYDVQQDEyg4REUzNDYwMDQwQzcyN0U3QjI5QkREQThGQTdENTA2QTk2
MUVDMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl09wg7ldib8e
vJfwjovr/PBn2gHE7gJC2zWSYCurS0y9wwYIgSHLfZUEZSPQ0+W8dP2ceiH1NGS+
BEc947+u1uHFqE7MDtZoENoaDnefkCB5QYl886VNEqvrqKanfO6DtLYl9I/5WL6o
PwEzax6AIno22D51qXjZFN6Y0Z9yDRMGk5gRz60u6AZokCoC+17zwNn2lXhgXrPP
3cTFVMdBNIuIcT4piQ2pU6OR7ZMjrlQnR9lgzxj10lAiopyPzaxY8aI2ouZ5D13g
l6Bmynocp3HXnon78V/ZXf29yS/CJL0AUnqphbD9cv4LSGmauUsD9jpo4aa8TdOD
3zYy91S9aQIDAQABo4IC9zCCAvMwHQYDVR0OBBYEFI3jRgBAxyfnspvdqPp9UGqW
HsIHMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzQwMDkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGX
BggrBgEFBQcBBwEB/wSBhzCBhDBOBAIAATBIAwQDLTjYAwQCLXLgAwQEQmaAAwQC
ZxqMAwQCrGCwAwQCvrSQAwQDyEUAAwQCyEUQAwQC0ERoAwQC0E/YAwQC2AdYAwQB
2N7AMDIEAgACMCwDBQAmBJeAAwUAJgVvAAMFACYFbwMDBQAmBW8HAwUAJga9AAMH
ACYgAAvgADANBgkqhkiG9w0BAQsFAAOCAQEAGIMW18OtM7ssJj5FJSR5UaTUbFXG
H8xHjaUzOUfRT8Hm4ZdmShdMLPJlLsLTbTx5uPAYeyrbck4usii1fvOiNp5hqssO
hvtc80ASmUTPXGi2xJb8qOUFW4fh+7yfUad0oAJGDHaAJ1v/MmAjFWyfj1fBoP/Z
x1zdCYKCoGq5J5Xi86Gg38/E48jBbJ1+A6Tdpr3O5SXcnVfr76XfxsZckqHM6UJk
efqLZ7wT434MUr1hw7pasFdatzmdu8B+X6ABZpAKmsAmdLNa1kXuXC44Y6nzXFHm
LxRRC6RhaY2x3Q1iB04qgiiWspf7CT/PgcHg2tR2tRc6Clrj5///zKc/Vg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:18 2025 by rpki-client