Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS200660.roa
File:                     AS200660.roa (raw, json)
Hash identifier:          yzHKV5qT6OOX3KbH8GZQaEyLjnKey4dfXl8ZzsfkGKI=
Subject key identifier:   BE:A0:92:A0:20:33:DA:5F:66:40:9B:E8:60:22:99:E1:5B:D5:9D:9F
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       34ECE99C081B4D27E63180A481E5E52E2A628181
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS200660.roa
Signing time:             Wed 18 Mar 2026 14:10:57 +0000
ROA not before:           Wed 18 Mar 2026 14:05:57 +0000
ROA not after:            Wed 17 Mar 2027 14:10:57 +0000
asID:                     200660
IP address blocks:        40.27.40.0/24 maxlen: 24
                          40.27.41.0/24 maxlen: 24
                          40.27.42.0/24 maxlen: 24
                          40.27.43.0/24 maxlen: 24
                          40.27.44.0/24 maxlen: 24
                          40.27.45.0/24 maxlen: 24
                          40.27.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ec:e9:9c:08:1b:4d:27:e6:31:80:a4:81:e5:e5:2e:2a:62:81:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 18 14:05:57 2026 GMT
            Not After : Mar 17 14:10:57 2027 GMT
        Subject: CN=BEA092A02033DA5F66409BE8602299E15BD59D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:7b:84:c5:17:7e:f0:1a:17:ea:62:5e:04:
                    bd:a4:df:01:a9:68:90:aa:87:ee:fc:8f:79:4c:da:
                    a8:e0:d0:c9:33:85:c2:67:15:f1:0a:ff:56:6a:9a:
                    d0:e6:16:72:72:1c:2f:3f:65:ac:19:09:96:f3:23:
                    a2:4d:59:72:23:d4:ef:37:d1:e2:b4:33:4d:64:40:
                    a8:92:99:de:9d:7b:d8:70:75:74:9c:dc:38:c1:49:
                    46:12:7d:d6:26:b2:80:ee:0b:d6:28:eb:9a:1c:25:
                    0c:69:de:f8:26:b0:85:5b:71:2e:8c:0a:27:a9:ac:
                    57:32:0e:ee:e0:20:60:06:9f:83:f2:6f:1c:f9:6b:
                    74:7c:7f:f8:1e:e2:06:81:ec:43:0f:78:65:cb:90:
                    0c:00:db:37:3a:ca:2f:82:23:8b:96:7f:c3:ee:a1:
                    5a:85:b4:59:f2:37:62:13:4e:81:e5:bf:84:a8:e7:
                    36:d8:6a:91:5f:21:3c:8d:53:df:18:a8:29:1b:90:
                    73:a5:20:8f:9b:cb:00:de:25:87:04:2f:f9:0a:c1:
                    5f:b8:8a:a6:e2:87:67:4c:10:66:e8:91:4e:c8:0b:
                    fc:ad:25:6b:9b:00:41:28:49:a4:8b:2e:e2:88:29:
                    9a:82:d2:c7:b2:f8:b1:1a:78:7a:d1:fc:1a:eb:8b:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A0:92:A0:20:33:DA:5F:66:40:9B:E8:60:22:99:E1:5B:D5:9D:9F
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS200660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.40.0-40.27.46.255

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:6f:aa:9a:b1:f9:87:36:bd:a4:93:38:3c:b4:87:9f:59:
         aa:27:c3:21:6c:02:76:f8:63:d5:47:e6:f7:16:ca:c9:21:3d:
         a7:70:9e:1c:71:5b:fb:c0:5f:a1:0d:67:63:70:3a:46:e9:4a:
         9b:e2:37:34:5a:4c:ae:a5:18:82:92:77:37:9d:5e:7e:74:65:
         bf:e0:dd:fc:76:86:93:8d:ba:2e:94:d7:e4:a5:2c:06:4d:84:
         4e:39:39:39:e3:3a:2f:1f:0a:53:71:9e:c9:13:60:21:d3:a7:
         68:35:55:bf:e8:3a:58:34:f5:c2:4f:05:04:b1:79:3c:74:69:
         50:38:6a:52:71:e9:f1:ca:5d:93:ad:e7:43:f6:ea:1f:12:2b:
         39:e4:81:b8:33:a7:94:85:dd:17:b2:57:4a:5f:cc:22:38:8e:
         fc:c6:f1:ce:97:66:9c:3d:e4:84:28:cf:26:7b:ed:9b:7a:e1:
         30:49:1a:1e:42:d4:f8:0d:92:de:29:06:c0:3a:50:d5:10:ad:
         37:a4:3e:cf:5c:0e:a7:26:bb:b8:3c:5c:06:57:bc:c0:06:22:
         fe:b7:76:b1:f9:9b:82:6b:dc:84:d0:26:28:52:6f:05:ca:5d:
         b5:d2:9d:a3:32:cf:2e:f9:a0:df:c8:3b:62:27:69:f8:d9:72:
         32:1e:e2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:33:30 2026 by rpki-client