Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/433d179c-4969-3563-a5ea-e66616c2bfa0.roa
File:                     433d179c-4969-3563-a5ea-e66616c2bfa0.roa (raw, json)
Hash identifier:          m9wgdXKR4ytxMHt3RzcMRk6RgeOetISX49rMpGZmvV8=
Subject key identifier:   61:67:CF:CF:51:4A:0A:82:5F:73:22:25:A4:0B:F7:72:D4:29:BD:E8
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F4989D3F80237E8FF63981680
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/433d179c-4969-3563-a5ea-e66616c2bfa0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399839
IP address blocks:        200.229.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:d3:f8:02:37:e8:ff:63:98:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d263474f-44a4-4f5e-872f-54c0f5bd1f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:80:72:ca:0e:18:85:88:96:70:73:5a:5a:7a:
                    3b:61:3b:11:1a:7d:99:4b:15:03:7e:bc:0b:f3:0e:
                    f4:ab:ab:ff:39:bd:94:c4:db:80:7e:d2:85:38:9e:
                    31:0e:df:9a:02:19:99:8a:4b:3b:0e:6a:08:a0:81:
                    14:9d:3c:c1:a2:fb:04:b6:51:ab:3d:60:62:25:86:
                    84:8a:c7:75:10:5c:12:2a:0d:2c:fa:94:6e:28:25:
                    d0:9e:91:1c:a0:1b:dd:c8:56:0b:5c:83:b8:c3:30:
                    85:4c:4b:d7:3e:23:8f:8f:4e:2b:3e:12:ad:02:5e:
                    23:89:85:fc:83:00:0e:52:b3:8e:fd:6b:54:a3:e7:
                    44:65:48:bd:92:f3:66:94:00:db:a7:c7:38:34:b2:
                    c4:d9:e6:9d:06:03:72:14:14:41:7a:84:3b:0e:6f:
                    16:eb:50:35:81:c0:cf:fe:61:d3:ca:d7:94:95:1a:
                    ee:82:9d:7c:fe:fa:ff:b1:59:ce:3c:df:07:cc:e2:
                    a1:ff:ba:ca:28:5e:f2:c6:25:63:c3:f4:0f:99:99:
                    93:4f:85:54:56:9e:b0:b6:61:3e:0a:fe:15:9f:79:
                    b8:8d:f1:4f:6b:df:14:8b:15:84:ae:ed:73:36:d6:
                    91:b5:1a:c7:8b:4e:3c:19:32:80:ce:55:e3:e9:03:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:67:CF:CF:51:4A:0A:82:5F:73:22:25:A4:0B:F7:72:D4:29:BD:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/433d179c-4969-3563-a5ea-e66616c2bfa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a2:7d:b6:51:77:9a:16:73:46:3d:90:38:47:ad:6f:d5:00:
         66:30:09:91:da:9e:a9:6c:e4:12:38:8c:27:a8:d5:5e:73:d3:
         e5:c7:20:60:2a:8f:7a:58:49:f2:12:ea:6a:57:09:ed:73:a8:
         1a:7c:70:2c:7e:26:eb:0b:bd:b9:93:34:d9:7d:6a:07:b6:35:
         df:b5:f6:2d:dc:52:19:fc:36:ef:c7:bd:1e:5b:8c:a8:d0:08:
         14:29:79:8e:da:49:e2:e3:f9:66:0f:82:45:7f:75:2d:02:27:
         91:b6:29:80:ec:e0:84:5f:4f:f9:c0:b3:d5:ac:1a:19:21:2e:
         c3:5f:5f:a5:03:72:49:a5:55:4f:99:d5:e8:5b:56:98:83:1e:
         cf:8b:d5:b3:1b:96:d5:73:ab:23:7f:5a:ca:ba:11:a8:77:8a:
         59:44:b0:cb:bd:39:e3:e4:9f:b7:e6:fd:d4:aa:f9:a6:19:6e:
         8a:bd:42:81:48:15:fe:13:ca:ab:fe:75:d2:a8:94:5a:d5:d7:
         bc:a6:15:f3:6d:5f:70:ba:17:65:44:bd:b1:c3:cd:46:51:b1:
         4b:00:b7:86:27:cf:49:b7:c7:61:4a:07:3e:73:2b:7e:fd:a2:
         e1:95:5d:2a:e9:42:5d:07:3b:72:b6:8a:1a:86:a8:e4:d4:19:
         33:cb:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:24:26 2026 by rpki-client