Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e708f1fd-8c89-3f15-a7fd-77b765122423.roa
File:                     e708f1fd-8c89-3f15-a7fd-77b765122423.roa (raw, json)
Hash identifier:          HczTfRAsaabS5I3KdrcKpBS8DvZSMMGkLxqVp4uO38o=
Subject key identifier:   56:60:86:34:57:4A:AF:01:46:01:FA:7C:21:59:BC:9F:08:4A:F5:F1
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584DA6B034F60ABBA05C9E2181F0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e708f1fd-8c89-3f15-a7fd-77b765122423.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     3561
IP address blocks:        200.229.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:34:f6:0a:bb:a0:5c:9e:21:81:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=5a5e4198-b776-4890-b5e2-001b890ae08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0c:b3:d7:cb:3f:56:15:95:a3:83:a6:14:59:
                    6f:e1:c1:26:95:ba:0a:1c:67:15:0e:e1:87:09:bf:
                    f8:2e:70:06:5e:b1:bb:10:d7:03:ef:34:83:a4:b4:
                    b0:50:08:e2:fd:2e:91:b1:90:d8:50:35:8f:d6:f3:
                    e6:d2:6a:0f:ae:f3:d6:c1:dc:f4:89:58:65:00:fd:
                    f6:75:b4:0b:f3:f7:c0:60:a8:dd:53:8a:92:5f:5b:
                    d4:b1:ae:35:52:a3:c9:41:b4:95:7a:f4:32:c5:d8:
                    70:66:f0:44:05:d7:1e:2b:34:f2:8b:c8:20:5c:24:
                    b6:23:36:da:fd:08:73:39:f5:4d:f9:e2:99:35:9b:
                    1d:0c:35:01:49:23:3b:91:b1:4a:95:5c:7b:c6:98:
                    4c:e1:f7:b9:b7:be:d1:3b:cb:01:92:08:85:56:a5:
                    dc:63:56:12:2e:b2:a6:10:61:8a:e8:23:96:59:42:
                    5e:6e:6b:49:a6:e1:66:cf:09:86:b7:22:bc:06:c6:
                    45:9c:a6:96:72:40:c6:03:05:a0:17:9f:71:bc:d6:
                    14:25:97:69:91:28:7f:25:d9:67:7b:a1:bb:9d:a1:
                    5c:af:af:58:2a:7d:bb:d4:6a:55:65:73:78:05:c5:
                    9f:61:81:f5:c7:cc:77:89:9f:03:66:ca:44:3d:1c:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:60:86:34:57:4A:AF:01:46:01:FA:7C:21:59:BC:9F:08:4A:F5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e708f1fd-8c89-3f15-a7fd-77b765122423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:7a:57:50:3d:93:51:b2:46:55:2c:9c:c3:92:5e:17:48:
         6a:07:36:3d:e7:b8:d6:5b:e9:30:f6:37:58:b7:e8:af:3f:e8:
         23:c2:bc:36:74:a0:9d:26:a1:c8:9d:b7:6d:63:67:d9:ed:2f:
         50:fe:53:b6:29:84:41:e4:f6:82:86:23:90:ba:00:69:39:d9:
         df:2b:a8:00:2f:1e:97:8a:ae:55:cf:2f:34:5b:2b:76:87:10:
         ee:c4:20:d3:7f:61:a6:4f:e5:46:38:ad:4f:12:36:07:2f:77:
         a8:fc:8f:ed:ec:55:24:dc:fa:6f:75:85:28:b8:1a:b9:59:c2:
         7a:8e:3f:62:9f:46:a7:2f:55:60:f8:1a:3f:e9:ae:78:d4:0d:
         df:52:58:12:4d:66:3e:f8:bf:42:2c:a4:4c:c4:72:c3:72:f9:
         2e:e5:9c:42:7c:a4:3e:b9:ad:30:67:c9:c8:07:71:15:66:4c:
         69:6b:40:84:c4:9f:ee:8b:12:af:2b:10:16:94:ac:84:26:ce:
         07:26:8e:a1:4d:98:24:7c:56:d7:66:1d:6a:f5:32:de:fc:8c:
         93:3c:22:17:24:ca:c3:f0:58:dc:c4:3b:8f:27:75:9a:f0:0b:
         7f:2c:13:1d:ed:22:7d:d8:13:c5:28:1d:82:1a:32:18:ae:ac:
         46:ba:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:39:32 2026 by rpki-client