Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS202294.roa
File:                     AS202294.roa (raw, json)
Hash identifier:          2UoujJozYAqdiCWS5WL7wgDyCFf2lX6p+e9UMNu+6AI=
Subject key identifier:   A2:D1:C3:82:4E:7D:C0:B4:32:1C:FE:AB:83:6B:65:80:CD:65:E2:CA
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       0722E1FB6FE96A3FB5026E4E93E7694796212922
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS202294.roa
Signing time:             Sat 14 Feb 2026 20:08:44 +0000
ROA not before:           Sat 14 Feb 2026 20:03:44 +0000
ROA not after:            Sat 13 Feb 2027 20:08:44 +0000
asID:                     202294
IP address blocks:        40.27.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:22:e1:fb:6f:e9:6a:3f:b5:02:6e:4e:93:e7:69:47:96:21:29:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Feb 14 20:03:44 2026 GMT
            Not After : Feb 13 20:08:44 2027 GMT
        Subject: CN=A2D1C3824E7DC0B4321CFEAB836B6580CD65E2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:c2:5b:b5:aa:7f:d9:c9:59:5c:86:3d:70:
                    17:22:19:44:c6:49:df:2e:f7:4d:52:6f:ba:bb:b5:
                    0c:1a:79:ed:db:3c:a0:2d:25:83:74:c4:20:15:13:
                    4f:d4:13:99:35:14:fb:ab:63:aa:20:d3:97:b2:40:
                    b9:d6:56:97:75:94:e2:c8:9a:e9:7c:b8:80:7f:50:
                    7c:a8:ce:c4:47:54:0d:dd:62:c5:c3:1c:f4:47:cc:
                    fa:1c:93:6a:57:d3:ff:b8:ca:c7:70:b6:da:d7:25:
                    a4:05:f1:c2:1c:2a:fb:9e:4e:43:44:c1:27:77:42:
                    c0:7e:7c:07:a5:d9:9e:4b:79:41:b5:13:50:14:3c:
                    d1:fa:d6:fe:08:95:fb:00:af:bd:40:b1:83:d8:73:
                    29:90:ac:e6:b3:a3:9d:63:ee:44:d3:5e:59:75:53:
                    31:ba:8d:d5:61:6c:d0:af:0d:fd:f5:e7:77:4b:54:
                    ee:0e:0a:b8:e6:30:b6:10:44:b6:01:8f:6a:83:11:
                    d7:4e:17:38:1c:15:be:bc:9e:36:ad:cc:b8:d5:43:
                    08:04:e2:39:18:1b:86:50:eb:e0:ce:23:b4:64:ed:
                    1f:bc:64:3b:34:df:9a:45:66:56:bd:7e:8a:ca:59:
                    69:f1:a3:5f:e5:c6:4e:c1:73:28:25:6f:e7:a4:c6:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D1:C3:82:4E:7D:C0:B4:32:1C:FE:AB:83:6B:65:80:CD:65:E2:CA
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS202294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:f9:00:fc:c7:9a:7d:37:c7:25:a4:44:45:e4:8b:db:80:
         0c:b4:e8:e3:59:7c:83:6f:bb:9c:2f:16:2f:e9:75:b0:50:a9:
         1b:de:2d:44:97:d5:3f:13:d5:e5:87:79:b1:c3:ca:6e:f1:fb:
         66:30:8d:b0:26:f2:8c:57:1d:c9:e3:8d:45:39:1a:ce:45:72:
         6e:52:7f:c7:d8:0a:eb:bc:f5:69:9f:ec:17:3e:8f:31:33:03:
         a7:7c:52:d4:54:43:36:72:78:6e:25:69:e1:f5:c5:b1:26:13:
         6c:06:0e:6d:b2:12:88:88:27:5a:10:22:03:e1:1b:f2:4f:d5:
         2e:6e:69:69:2b:c2:16:0d:ef:a3:31:f1:59:41:2e:3f:67:c8:
         5c:c1:18:46:2d:39:65:24:44:84:17:eb:0f:5c:65:fc:0e:6e:
         dd:3c:85:39:b0:cf:0f:1c:37:3f:0e:50:1c:27:81:2a:28:60:
         71:ad:0b:b2:d8:89:a9:eb:20:1b:9a:06:64:29:8c:2f:4a:9b:
         7f:99:ea:29:0e:71:30:90:1d:14:b5:30:ee:a7:d1:f7:52:99:
         69:5e:3b:35:f0:45:f8:74:9e:c2:3b:e4:dd:74:b2:e2:df:9d:
         ab:1d:67:a3:23:9a:f7:b7:27:1e:e5:0d:6b:e8:f0:ef:14:12:
         f9:ba:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:55 2026 by rpki-client