Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          1js1R0S68jI6DCilfLNjIw/U20oDZaU39GnNk2m4VrA=
Subject key identifier:   66:51:5B:33:AD:13:BC:C9:8A:82:03:1F:82:6D:75:0C:7F:4F:80:84
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5E53599DE5B506B5E3B270007A84258522BCA347
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa
Signing time:             Tue 31 Mar 2026 06:03:51 +0000
ROA not before:           Tue 31 Mar 2026 05:58:51 +0000
ROA not after:            Tue 30 Mar 2027 06:03:51 +0000
asID:                     40676
IP address blocks:        64.50.179.0/24 maxlen: 24
                          107.173.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:53:59:9d:e5:b5:06:b5:e3:b2:70:00:7a:84:25:85:22:bc:a3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 31 05:58:51 2026 GMT
            Not After : Mar 30 06:03:51 2027 GMT
        Subject: CN=66515B33AD13BCC98A82031F826D750C7F4F8084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:c0:bd:26:81:e8:b6:da:13:fb:4b:cd:48:
                    fe:c8:b1:c8:14:14:7a:57:97:00:e4:8d:59:5b:5a:
                    e4:40:66:7e:98:4b:8b:bd:5a:90:2f:9a:ab:ef:98:
                    df:df:d2:3e:d1:d5:1f:fb:f9:79:59:22:16:44:07:
                    04:4c:a9:ed:7c:ac:5d:07:37:e7:4a:a1:4f:92:0e:
                    6f:b1:7f:a4:de:e7:bb:c2:41:1a:82:f7:21:36:30:
                    54:d3:48:09:57:ab:61:ad:34:3a:9d:5f:10:0e:e6:
                    65:49:03:42:f2:a8:7e:df:42:81:d3:fc:a2:c2:2a:
                    8b:28:50:06:0a:21:15:9d:2a:71:49:9e:de:c3:f9:
                    66:3c:10:86:bd:bf:c2:76:14:17:c0:6f:27:db:2d:
                    b7:28:b7:20:f1:99:e4:1f:47:ed:d1:19:f8:7c:49:
                    1b:50:d3:96:1a:4b:1e:89:37:19:28:93:01:93:ef:
                    d3:af:7b:a5:84:0c:54:83:51:81:c3:ef:39:5f:0c:
                    af:b6:e8:85:d4:50:0b:c4:10:be:9c:7f:dc:3c:aa:
                    92:9e:09:a8:7e:78:a0:7d:a5:c2:34:6d:0a:e4:a9:
                    73:50:ab:6e:c1:c3:a9:04:92:33:4f:2b:ca:96:65:
                    23:11:36:3b:ac:90:db:f4:41:40:5d:74:ff:38:93:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:51:5B:33:AD:13:BC:C9:8A:82:03:1F:82:6D:75:0C:7F:4F:80:84
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.179.0/24
                  107.173.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:53:8f:2d:0c:b0:c8:62:84:83:32:8f:60:00:8f:6a:c1:e3:
         00:23:f5:36:74:35:f0:6d:ca:74:4d:42:50:f3:b5:d5:3d:45:
         ac:24:87:ee:ab:9e:1f:67:95:32:1e:ae:7c:60:df:cd:59:56:
         ad:36:20:77:d5:ba:0f:f0:2e:a2:29:34:48:11:fd:6f:23:98:
         e7:83:a8:0e:ff:c9:7c:ee:3b:32:83:32:f8:1b:ad:e0:ec:b2:
         c2:9a:68:e0:eb:58:bd:3e:ed:6a:af:09:24:c3:b6:20:9d:38:
         77:b5:86:f7:6a:af:7f:8c:e5:fd:bc:09:fe:5c:1c:5a:09:4c:
         6a:f9:50:39:74:51:9a:13:ad:9d:f8:b5:e4:78:95:b0:6b:70:
         a6:a8:1e:33:4e:1e:c8:e3:3c:51:6f:0b:b1:b6:d7:76:9c:cc:
         03:68:92:19:18:96:17:53:99:5d:17:6c:c7:eb:b5:27:12:16:
         f5:29:01:9c:71:c0:3e:1a:b0:27:8c:14:ac:56:6a:78:8a:7e:
         a1:2d:07:38:6b:78:24:35:13:52:53:53:63:9a:1e:5f:47:29:
         e2:3c:73:16:83:4a:55:9f:a5:af:85:16:74:76:26:5b:3f:2c:
         36:5a:84:f8:f3:7c:f4:6f:76:b7:2f:bf:2f:a2:ea:6e:27:8d:
         91:56:dc:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUXlNZneW1BrXjsnAAeoQlhSK8o0cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwMzMxMDU1ODUxWhcNMjcwMzMwMDYwMzUx
WjAzMTEwLwYDVQQDEyg2NjUxNUIzM0FEMTNCQ0M5OEE4MjAzMUY4MjZENzUwQzdG
NEY4MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnfAvSaB6Lba
E/tLzUj+yLHIFBR6V5cA5I1ZW1rkQGZ+mEuLvVqQL5qr75jf39I+0dUf+/l5WSIW
RAcETKntfKxdBzfnSqFPkg5vsX+k3ue7wkEagvchNjBU00gJV6thrTQ6nV8QDuZl
SQNC8qh+30KB0/yiwiqLKFAGCiEVnSpxSZ7ew/lmPBCGvb/CdhQXwG8n2y23KLcg
8ZnkH0ft0Rn4fEkbUNOWGkseiTcZKJMBk+/Tr3ulhAxUg1GBw+85XwyvtuiF1FAL
xBC+nH/cPKqSngmofnigfaXCNG0K5KlzUKtuwcOpBJIzTyvKlmUjETY7rJDb9EFA
XXT/OJPiQwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFGZRWzOtE7zJioIDH4JtdQx/
T4CEMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQDKzAwQAa63XMA0GCSqGSIb3DQEB
CwUAA4IBAQADU48tDLDIYoSDMo9gAI9qweMAI/U2dDXwbcp0TUJQ87XVPUWsJIfu
q54fZ5UyHq58YN/NWVatNiB31boP8C6iKTRIEf1vI5jng6gO/8l87jsygzL4G63g
7LLCmmjg61i9Pu1qrwkkw7YgnTh3tYb3aq9/jOX9vAn+XBxaCUxq+VA5dFGaE62d
+LXkeJWwa3CmqB4zTh7I4zxRbwuxttd2nMwDaJIZGJYXU5ldF2zH67UnEhb1KQGc
ccA+GrAnjBSsVmp4in6hLQc4a3gkNRNSU1Njmh5fRyniPHMWg0pVn6WvhRZ0diZb
Pyw2WoT483z0b3a3L78voupuJ42RVtwS
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:03:47 2026 by rpki-client