Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4d99a68b-06ce-3c9d-8316-eb949285ac4c.roa
File:                     4d99a68b-06ce-3c9d-8316-eb949285ac4c.roa (raw, json)
Hash identifier:          3SfJrqgQrFsRy6aHijog7OwvBtCcFWN6UGJ1IZUm3HM=
Subject key identifier:   26:FD:F5:93:93:40:EB:8A:23:D8:16:31:B2:28:F8:CE:98:AA:02:32
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584DB928CD209B7779870A8E6A60
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4d99a68b-06ce-3c9d-8316-eb949285ac4c.roa
Signing time:             Mon 04 May 2026 15:48:20 +0000
ROA not before:           Mon 04 May 2026 15:48:20 +0000
ROA not after:            Sun 02 Aug 2026 15:48:20 +0000
asID:                     394760
IP address blocks:        200.229.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:28:cd:20:9b:77:79:87:0a:8e:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May  4 15:48:20 2026 GMT
            Not After : Aug  2 15:48:20 2026 GMT
        Subject: CN=01fb2e78-dd01-47b9-beec-90deb23850cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:50:fb:f7:8e:2d:46:21:27:3e:d4:e9:6f:74:
                    b2:f9:d0:16:a0:75:5b:5c:9d:5c:5b:b0:69:8b:a2:
                    ec:64:46:75:0d:18:1e:05:b8:fc:f5:70:3d:84:b4:
                    c2:50:4e:80:be:a6:b3:33:3b:c6:22:f9:b9:ad:a1:
                    f8:66:c1:7b:ef:ab:0e:c2:16:1e:4c:3d:70:1a:84:
                    c8:a3:43:b1:4b:7a:d2:12:d1:31:11:be:e5:2a:13:
                    32:8d:14:53:98:e1:98:80:21:bb:9c:42:2e:04:fc:
                    1a:9a:10:51:e6:7b:db:3e:c9:17:e9:72:42:1f:cc:
                    17:8e:f2:b4:36:43:76:b3:50:91:e9:9d:9f:f9:b2:
                    d6:7f:88:54:59:2b:20:ee:ac:a0:53:58:21:b1:aa:
                    6d:a9:ad:e1:c0:da:f5:68:40:45:5d:6c:95:fc:45:
                    f3:ed:1d:14:49:bc:e2:d0:39:62:08:bc:fb:57:19:
                    71:bc:00:8d:88:1f:b6:af:13:7c:ba:34:4c:86:1c:
                    d7:16:df:a8:1c:2c:2b:da:e3:e1:7c:06:24:be:0d:
                    d2:1d:78:85:4b:86:46:7a:82:ef:57:e9:a4:ca:98:
                    8f:27:fe:58:3f:a0:22:de:50:e0:cc:52:21:06:09:
                    d9:16:0f:d6:16:b8:41:cc:2f:09:59:c5:b3:61:63:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FD:F5:93:93:40:EB:8A:23:D8:16:31:B2:28:F8:CE:98:AA:02:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4d99a68b-06ce-3c9d-8316-eb949285ac4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:96:3f:12:d3:53:9a:89:c9:16:bd:e8:25:f1:36:3e:15:4e:
         9f:31:ef:57:55:99:a8:c1:3b:40:ef:bd:c3:28:9a:2f:c7:b9:
         72:13:69:40:68:c3:1d:3e:c0:68:a7:c2:06:59:f6:c4:9e:16:
         64:7e:8d:da:ec:94:dd:13:b1:de:ba:60:1b:61:48:cd:5b:22:
         e1:87:eb:00:9b:0d:30:87:6a:b5:f4:33:97:d9:98:18:af:d0:
         12:3e:39:29:f0:2e:f0:78:a3:2e:7f:d1:d6:b5:d0:81:f1:6f:
         42:f3:aa:e5:2e:6a:0a:78:36:b8:a5:dc:55:34:2a:a9:f5:01:
         8a:5c:af:9e:bc:38:a4:c3:e5:87:7f:41:e3:ea:67:a4:14:17:
         92:08:cc:23:b5:32:56:af:6f:b4:39:16:d7:04:ee:91:a4:5d:
         11:cd:5a:71:79:e5:48:b0:0a:24:0c:cd:78:34:33:a4:86:db:
         fd:67:93:74:26:7c:77:8c:a8:bc:72:28:9e:cb:05:7e:92:f5:
         db:c6:3d:8a:f6:99:e8:a6:88:72:cf:e0:17:4a:cd:ca:e1:3c:
         cd:a8:81:f3:4e:4b:e2:55:18:4f:5f:8c:2f:55:c3:d2:94:43:
         d7:50:0e:fd:37:2a:55:bb:3e:35:99:8a:b6:71:2f:df:cd:86:
         e6:8b:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:52 2026 by rpki-client