Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bcfb2281-cc88-3dfd-8d10-c2d38b3b3ed7.roa
File:                     bcfb2281-cc88-3dfd-8d10-c2d38b3b3ed7.roa (raw, json)
Hash identifier:          Mbt7J7+WVx+nLwr+waKElObyO0JV+x1d3lZJY12A6gk=
Subject key identifier:   61:AD:FA:83:5B:C0:0D:6F:B4:BA:0D:7E:47:68:A0:71:BC:2D:D6:C6
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584CE8F77ABFB899C8B9FD75C580
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bcfb2281-cc88-3dfd-8d10-c2d38b3b3ed7.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     10753
IP address blocks:        200.229.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:7a:bf:b8:99:c8:b9:fd:75:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=9cb3420c-cb76-44fa-9abd-823bb474b294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:60:18:5e:67:87:0a:68:c7:cc:fd:d4:c1:
                    2d:cc:7f:db:8d:04:2c:60:2d:50:45:a0:10:47:27:
                    cd:f2:bd:99:df:ef:ed:f0:1f:2e:c5:69:24:ba:1e:
                    71:7f:b7:cf:75:ec:78:e0:6d:60:07:4f:42:d5:51:
                    14:2b:e1:48:bf:c5:c6:f6:d7:29:c5:27:b3:41:79:
                    9e:a8:e9:9a:12:cc:80:64:18:49:36:a0:b4:32:43:
                    56:c6:12:f7:ba:d7:d5:d4:1e:ef:64:23:63:6f:10:
                    96:2b:93:76:59:79:3d:ac:4d:45:32:e5:bd:5e:4c:
                    e7:54:0e:b9:24:92:0b:b6:98:39:57:48:9d:84:e7:
                    af:97:64:8d:37:02:20:1b:c0:aa:c2:a9:71:9e:b2:
                    bd:7c:8b:e3:cf:73:77:63:62:1a:e5:38:cb:08:ec:
                    35:42:a3:14:d9:52:af:0f:fe:90:48:82:75:16:33:
                    25:d8:3c:f0:fa:d2:fa:a2:f9:fe:e3:c7:97:aa:23:
                    58:06:47:32:32:a7:fc:f9:fe:7b:51:e7:0b:6e:b0:
                    7f:72:e1:da:af:03:3e:8f:38:9e:06:22:46:25:8f:
                    f0:3c:d4:3e:3e:ef:94:e3:32:0c:ac:49:20:85:71:
                    70:1f:75:c5:6c:fe:ef:f8:eb:97:77:12:ab:5d:43:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AD:FA:83:5B:C0:0D:6F:B4:BA:0D:7E:47:68:A0:71:BC:2D:D6:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bcfb2281-cc88-3dfd-8d10-c2d38b3b3ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ae:75:65:08:d8:c0:29:ae:d7:28:fa:b1:90:fd:85:6e:3c:
         92:89:01:ae:32:1f:ec:dc:57:53:8e:19:38:4d:5b:ee:9d:2a:
         55:60:97:67:ed:44:d3:d5:09:70:0b:f1:9e:1c:57:a4:56:f8:
         e1:c5:bc:94:46:ce:0e:cd:57:cc:0c:a0:d6:23:dd:1d:08:92:
         43:fd:52:ac:97:21:dd:20:bf:9b:bb:33:8e:e4:3b:b9:b7:da:
         ce:c6:79:19:42:32:11:7b:98:bd:62:d4:48:5a:1c:44:e5:58:
         79:f8:5c:63:fd:7d:7c:b0:b7:3c:82:c1:31:6a:d4:ef:df:ed:
         82:39:86:43:d8:45:67:aa:6a:08:5f:d4:5f:a0:5e:78:c0:34:
         c9:97:a5:7e:a5:a7:9b:9c:4a:9d:74:86:4d:3d:fc:17:d8:8f:
         24:4f:ff:34:61:0e:07:39:f8:df:1f:1f:68:cb:62:49:c2:c7:
         16:cb:82:1c:73:ac:26:79:3a:db:9e:bb:47:61:04:b7:3e:a9:
         85:cf:6d:59:c4:d4:9f:82:6f:96:b1:f8:b6:be:ee:cc:9c:60:
         78:d8:ba:83:4b:b0:a7:fc:ac:58:3e:0b:06:e9:0f:6b:df:f5:
         04:6e:70:e7:7f:de:f0:ba:3f:7a:c3:00:2e:57:f4:55:d2:a5:
         fe:24:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:51 2026 by rpki-client