Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          F1KnWGe4ID5zdNWDCzYveLWz1wWSqS9WB9pimIKB2ns=
Subject key identifier:   43:7A:BC:01:71:55:D5:8D:99:EE:03:C3:2D:4C:B3:A7:27:86:E6:63
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7F04D142C9B5F0D6B72A237E163D83DE7E916396
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa
Signing time:             Tue 09 Jun 2026 08:21:51 +0000
ROA not before:           Tue 09 Jun 2026 08:16:51 +0000
ROA not after:            Tue 08 Jun 2027 08:21:51 +0000
asID:                     40676
IP address blocks:        157.254.8.0/24 maxlen: 24
                          157.254.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:04:d1:42:c9:b5:f0:d6:b7:2a:23:7e:16:3d:83:de:7e:91:63:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  9 08:16:51 2026 GMT
            Not After : Jun  8 08:21:51 2027 GMT
        Subject: CN=437ABC017155D58D99EE03C32D4CB3A72786E663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:44:b4:d3:dc:85:3d:64:d1:b4:f5:55:df:
                    c5:67:da:6b:73:5f:98:3a:a0:bc:d8:c9:6a:d9:74:
                    e8:78:23:3b:08:ff:be:21:f6:1d:f4:7d:d5:c5:0d:
                    41:f2:63:eb:8d:55:dd:c8:54:87:3f:3b:86:6b:df:
                    35:e6:05:0f:b6:a4:e7:1e:36:3c:b2:07:8b:b4:83:
                    b3:50:4d:f3:21:15:0f:9c:97:34:ac:74:7f:5e:db:
                    dc:de:4f:9b:7c:3d:fc:33:01:7f:2e:19:f2:69:ac:
                    36:87:25:da:6e:9b:b5:de:85:9f:6b:4d:87:7a:cd:
                    44:72:6b:b2:e1:47:f1:f8:7e:13:99:51:55:36:a0:
                    ce:98:1d:68:37:83:b4:4e:f1:d1:02:11:e0:c7:01:
                    f4:b4:84:12:aa:50:cf:db:db:5d:e7:e0:98:6b:48:
                    ee:e9:06:2a:b2:66:fe:7b:22:c2:45:98:96:68:b1:
                    16:e0:96:63:b3:67:35:b4:b7:08:69:4c:c5:ed:42:
                    e8:62:76:81:e9:a8:d7:93:a8:fb:29:9b:62:76:df:
                    44:bf:66:36:45:51:d9:10:3e:ab:7d:43:57:e4:26:
                    01:5a:e7:22:4d:20:36:f8:4c:34:94:35:d7:8b:79:
                    42:2a:d4:e2:e3:84:3d:e4:82:47:ab:ce:d8:43:c3:
                    d5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7A:BC:01:71:55:D5:8D:99:EE:03:C3:2D:4C:B3:A7:27:86:E6:63
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.8.0/24
                  157.254.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:88:9d:d3:9b:ea:b3:ca:59:07:d4:37:df:f0:de:fa:b9:d1:
         91:9f:6f:83:52:cc:e0:0d:4e:06:0a:4b:8f:27:23:e6:7f:7c:
         8a:44:fa:0c:a3:04:60:87:d6:c0:45:ea:f5:2f:98:a0:a2:c8:
         36:74:d1:e6:2a:5f:8d:6e:b0:64:e4:40:58:9b:82:ab:9d:c5:
         01:c2:a3:51:5b:25:9e:d4:39:d0:da:92:d9:3c:44:fa:f0:95:
         18:85:ab:de:fd:02:c7:c5:80:53:70:fc:3f:de:ab:c8:5b:44:
         4a:81:ad:51:aa:f5:4f:79:e3:8a:a1:5d:94:c5:5c:1c:40:88:
         9b:e7:95:cb:79:be:45:ff:23:a3:f7:f2:47:6e:85:40:7e:d6:
         ce:33:13:4f:24:2f:05:df:78:02:f7:0d:2c:de:1b:16:32:c5:
         2f:d3:aa:2d:1d:6b:91:06:be:e7:5b:ac:ac:54:c5:77:01:7a:
         70:5d:3a:fc:23:5a:42:1d:e7:e8:cf:97:c2:99:4b:cd:c9:7c:
         6a:fb:62:03:42:68:6c:3e:da:e9:c9:f9:7c:83:3c:44:98:75:
         7d:d9:cd:72:02:3c:07:1e:01:37:af:f5:78:09:46:91:58:06:
         2f:b8:a7:fe:24:c9:ac:06:a0:7c:b3:32:64:77:39:05:a2:9f:
         02:4c:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:56:43 2026 by rpki-client