Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS200660.roa
File:                     AS200660.roa (raw, json)
Hash identifier:          EAJOaq+VpyAOx2TDRFsO0wmCKcHL8SeWJpF7jtccQl8=
Subject key identifier:   7B:28:15:6F:67:1E:77:A4:96:38:64:14:FC:BD:6F:3C:D0:E3:9D:D5
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       65D818F71C0FAEE4F57DD8096BBD76008901F42D
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS200660.roa
Signing time:             Wed 04 Mar 2026 13:01:17 +0000
ROA not before:           Wed 04 Mar 2026 12:56:17 +0000
ROA not after:            Wed 03 Mar 2027 13:01:17 +0000
asID:                     200660
IP address blocks:        40.27.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 08:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d8:18:f7:1c:0f:ae:e4:f5:7d:d8:09:6b:bd:76:00:89:01:f4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar  4 12:56:17 2026 GMT
            Not After : Mar  3 13:01:17 2027 GMT
        Subject: CN=7B28156F671E77A496386414FCBD6F3CD0E39DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:35:58:8a:22:5a:1e:eb:67:04:3f:67:64:
                    f9:fc:02:31:8f:c6:58:4b:9e:6e:10:37:d4:59:6f:
                    73:f2:86:75:ab:97:2c:1c:a4:5c:14:08:8b:51:61:
                    0d:f1:e3:3b:9a:da:e5:6c:62:24:53:24:35:b0:1a:
                    44:f1:8c:70:c2:88:72:e9:68:5a:a9:1d:91:97:1b:
                    f8:68:9e:87:48:c1:19:ca:d3:57:7c:dc:4c:23:26:
                    c7:46:54:e0:a6:7c:a8:cf:7f:6c:73:8a:7d:2f:10:
                    07:3c:2c:f3:f8:ee:10:73:aa:f8:3b:6b:83:03:5d:
                    7f:98:9f:f9:3e:ec:63:55:78:c9:84:ac:9a:aa:56:
                    e8:16:c6:b3:76:54:91:54:73:1e:b8:c9:cc:5c:da:
                    e0:0f:a1:db:8b:83:b4:a1:4c:3e:b9:91:83:ad:e5:
                    c6:ad:e0:12:cd:73:15:7b:e5:94:20:73:34:1e:4f:
                    53:81:f5:19:dc:08:a1:45:3a:c4:b3:5d:2e:93:dd:
                    34:f3:d7:12:82:22:81:95:5e:55:0d:7b:5d:70:df:
                    17:f2:97:f1:64:6e:d0:5d:69:c6:67:e4:c6:38:bd:
                    d9:02:d8:ab:0b:08:ca:f1:3c:76:c1:73:e7:c9:96:
                    24:bd:00:5c:ed:be:b8:f1:41:f2:0c:74:03:13:ac:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:28:15:6F:67:1E:77:A4:96:38:64:14:FC:BD:6F:3C:D0:E3:9D:D5
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS200660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:a9:2d:ad:8b:01:2e:70:f4:0c:e1:08:63:bb:ba:97:97:
         33:da:c3:ac:65:bb:14:76:61:60:30:33:b3:4f:20:6f:7b:fb:
         01:61:34:1f:c2:5a:2d:c5:26:51:72:7d:c8:cb:ad:9a:49:73:
         84:36:9c:d1:a9:11:6d:ae:45:84:95:c1:b2:6e:69:63:c0:5c:
         54:43:2a:57:a2:ea:be:3b:6f:1e:c2:60:46:e7:b4:72:c7:f8:
         da:56:cc:94:a7:b1:bd:83:aa:4c:42:5e:07:af:0c:3f:0b:d0:
         d5:73:09:35:c3:a2:57:91:15:4d:58:4b:fa:8f:96:0d:ab:71:
         ae:60:57:3a:5b:63:f9:e3:d1:5c:5d:da:16:2d:aa:03:e6:f0:
         9f:f0:d0:35:b2:3c:4c:d1:66:40:0c:85:50:e6:63:69:36:5a:
         13:fc:56:07:49:1b:a4:96:38:1d:60:69:bb:dc:7f:fd:12:bd:
         4d:cf:17:43:db:d8:69:a0:3c:7d:a2:9b:95:73:45:22:21:4e:
         05:3f:06:b5:b8:59:be:77:df:11:fa:a6:30:8b:f3:3f:bf:a3:
         af:f7:1e:1f:56:4f:c0:7a:87:43:b5:6c:e6:43:05:52:c9:cf:
         a4:ff:b4:62:2e:79:47:cd:92:21:17:2e:ae:5c:73:c8:fe:f2:
         8f:53:b4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:24:47 2026 by rpki-client