Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9a416895-95a2-352b-8368-18532156deaa.roa
File:                     9a416895-95a2-352b-8368-18532156deaa.roa (raw, json)
Hash identifier:          XUYJTs/luFnGRXeEyUGx1awXsRD1nqK+oh+7Vg6kD5k=
Subject key identifier:   78:15:CA:50:7E:CD:B1:BA:03:72:D0:8A:B3:AD:64:50:C1:B5:A6:F3
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584EA787279FA0126B47DA1A7000
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9a416895-95a2-352b-8368-18532156deaa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10753
IP address blocks:        200.229.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:27:9f:a0:12:6b:47:da:1a:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9b4e0ee2-5535-4c9d-93d8-7c4c58db6106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:af:2e:56:93:8c:11:64:fd:23:fd:f9:8a:f4:
                    c2:3f:97:81:98:46:d7:44:53:69:f4:aa:61:e1:dc:
                    4c:21:48:62:e4:93:a1:db:e9:ac:7f:4f:86:28:b5:
                    dc:93:48:2b:06:24:3d:e9:e1:27:a8:4b:99:12:7f:
                    a9:6d:63:28:37:14:31:aa:11:1f:46:49:9d:74:fd:
                    28:39:91:41:cd:8d:89:a5:72:08:f4:83:33:76:fa:
                    f8:0a:95:e4:ef:6d:9e:71:d1:48:25:ea:0a:87:1c:
                    f5:31:80:23:4b:12:09:bf:89:85:93:a6:f2:01:07:
                    1c:c2:5d:e5:03:06:46:b9:48:ad:2f:2a:b3:21:d2:
                    29:1f:3e:58:b8:d6:df:de:1c:40:e0:ee:ef:0f:51:
                    f3:eb:6e:2b:b0:8e:71:d9:20:e6:40:01:4d:75:ba:
                    c7:ac:97:48:87:4f:6e:5a:02:b6:a4:7d:ea:be:f4:
                    24:40:57:0b:d6:7d:f5:08:a8:0e:65:34:de:97:32:
                    91:76:a9:23:a9:27:98:73:6b:97:26:e7:aa:4a:cf:
                    8f:bf:d2:37:cd:a0:ec:1b:ef:c8:5a:0f:dc:e1:ce:
                    4b:79:81:66:d9:bd:2c:f7:6f:1c:f5:6f:ab:d3:b7:
                    3e:65:c4:28:b8:fa:dd:b9:d5:7b:10:b9:53:69:7d:
                    95:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:15:CA:50:7E:CD:B1:BA:03:72:D0:8A:B3:AD:64:50:C1:B5:A6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9a416895-95a2-352b-8368-18532156deaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:c3:70:36:09:cd:cb:b4:b4:45:66:62:e3:7a:22:e4:f6:
         2c:b1:19:05:07:e2:6a:e3:ad:aa:2f:f6:5b:96:c3:0c:7a:c0:
         5d:4a:85:ac:ae:14:6f:1c:81:74:30:fd:a3:35:8d:a2:4c:43:
         7e:c8:02:02:c5:12:9e:b2:73:81:09:1b:ab:72:85:45:22:00:
         0d:de:77:07:fd:e2:25:ab:55:42:45:74:ee:44:b3:fa:18:7c:
         49:fc:98:11:f0:d6:dc:4d:3f:bf:20:7d:83:24:70:53:76:a5:
         e0:a5:3c:d7:06:a5:05:95:e1:f2:54:9e:d0:98:c1:a5:dc:6f:
         2b:c3:bc:17:c5:d4:bf:79:a7:5b:ac:36:a7:db:b8:91:88:8d:
         59:8f:49:95:15:08:7c:94:a5:d7:1b:9b:5f:fe:0d:52:e1:3b:
         72:f0:ad:b7:f8:bf:d2:72:be:5b:fa:ae:9d:39:3a:4c:51:27:
         70:70:ff:03:d5:6c:79:06:66:be:71:44:75:a6:8f:64:7f:1d:
         d4:a3:2b:25:1d:1d:38:00:54:02:2f:29:76:51:f8:78:bd:be:
         64:ec:33:0e:2d:30:5a:10:88:68:08:44:34:f4:d6:f5:f0:a6:
         36:fb:fc:47:14:65:c4:67:0e:1a:68:88:77:5e:38:3e:25:ae:
         0d:c7:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:47:26 2026 by rpki-client