Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d55879c9-2d10-3462-87b1-25a7e24c3cd4.roa
File:                     d55879c9-2d10-3462-87b1-25a7e24c3cd4.roa (raw, json)
Hash identifier:          gyKZgU7YneBz6vPlIBk7arf3jFIl77rZs62lYl8ynXk=
Subject key identifier:   6B:8F:E2:94:4E:51:53:BF:F5:7D:2F:23:B5:CE:11:8A:0F:A6:9D:F1
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584CF15779D979BCDB3106086B00
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d55879c9-2d10-3462-87b1-25a7e24c3cd4.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     399126
IP address blocks:        200.5.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:79:d9:79:bc:db:31:06:08:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=a9f64263-2962-411d-83ab-84f0f299254c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:9a:7d:66:08:4c:0d:9d:19:e9:3d:5d:ae:
                    84:6a:70:a7:61:d6:c7:ca:3f:19:32:c2:37:01:8e:
                    4b:4e:71:d5:10:f9:d3:04:15:b1:d0:ff:15:bb:a6:
                    b2:49:f8:b3:53:3b:8a:d7:53:7c:8a:c5:c6:06:26:
                    88:26:54:21:70:02:5d:12:d3:79:23:76:e3:ff:85:
                    50:ea:81:09:c5:91:33:54:8f:06:2c:de:08:7a:5f:
                    88:cb:3f:1c:83:af:ad:c8:26:91:25:55:fe:75:75:
                    8d:6d:e3:4a:99:a1:c9:43:de:ad:f1:64:bb:1a:44:
                    7b:9f:4f:25:e1:c1:7b:4a:64:bd:94:29:d7:53:ac:
                    df:6d:e6:72:21:31:61:01:20:09:b7:d8:fb:7f:43:
                    55:a4:30:44:d7:89:86:55:69:9d:39:d5:a7:46:1e:
                    28:64:c6:26:4e:74:fb:08:1b:a0:7e:85:e6:0a:65:
                    51:b2:56:bd:89:67:b6:43:c6:9d:b9:90:10:75:64:
                    ad:ee:3c:b1:05:bb:b8:c9:f0:3d:2c:11:b5:51:2b:
                    af:20:b9:99:ef:25:dc:0d:0e:3e:ce:18:a1:af:9d:
                    0c:17:9c:65:71:b4:ed:2a:47:9c:e6:1b:f0:e1:85:
                    63:8a:f3:3f:2e:77:e2:b0:c2:2a:49:bc:1a:f6:81:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8F:E2:94:4E:51:53:BF:F5:7D:2F:23:B5:CE:11:8A:0F:A6:9D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d55879c9-2d10-3462-87b1-25a7e24c3cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bb:de:7b:34:4d:eb:78:c2:f6:53:52:41:75:64:d4:f3:12:
         26:6c:d5:36:a7:2f:55:8b:f2:db:f7:15:be:32:8e:a6:02:d9:
         fc:ef:3a:58:ec:bd:ee:8e:c0:aa:0c:b0:66:df:38:22:83:fa:
         7d:b0:03:21:be:13:76:37:62:f4:f7:48:a1:43:4b:ed:d2:b6:
         67:d7:68:d6:d5:50:9b:6d:6c:ee:0e:ed:8b:62:07:f2:cb:bc:
         f5:89:a5:97:6d:e1:39:7d:3b:d7:65:81:17:f4:06:d2:5e:68:
         05:d7:3e:32:97:4a:68:e0:2f:39:1d:66:02:c8:9b:06:d6:b8:
         05:23:2f:31:02:3f:67:50:f8:4a:0a:a6:6c:b5:72:c7:13:f5:
         b3:b7:19:33:93:75:43:0f:e4:c5:d9:fc:fd:f6:96:5d:42:d6:
         1d:4a:fa:94:2d:64:13:ae:7f:ea:d8:f9:72:48:c9:b1:b1:07:
         cf:5a:d7:81:6d:43:c7:4e:93:c9:09:ab:df:d6:33:f3:05:2b:
         d4:a1:25:d0:32:18:9f:21:0a:f2:a2:ea:1f:67:9b:84:2c:63:
         b3:bc:9c:31:b2:29:2c:91:24:7f:35:d6:a4:72:01:5c:ff:8e:
         ea:b8:b2:d2:e7:51:e9:46:84:7e:d9:ab:36:04:d5:74:ad:9c:
         52:72:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:10 2026 by rpki-client