Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/10ee590a-a875-312d-a734-f42c39cd8c39.roa
File:                     10ee590a-a875-312d-a734-f42c39cd8c39.roa (raw, json)
Hash identifier:          utErz7Arum3pgLgbD/SbV5Pe1bsXksPTxDre3IeCB58=
Subject key identifier:   63:2B:98:F3:F3:6D:93:8F:45:61:40:3B:E5:D7:6F:C0:87:89:07:F4
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDDD3363F4375BE8F3ED040
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/10ee590a-a875-312d-a734-f42c39cd8c39.roa
Signing time:             Tue 07 Apr 2026 16:31:38 +0000
ROA not before:           Tue 07 Apr 2026 16:31:38 +0000
ROA not after:            Mon 06 Jul 2026 16:31:38 +0000
asID:                     212238
IP address blocks:        209.73.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:d3:36:3f:43:75:be:8f:3e:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:31:38 2026 GMT
            Not After : Jul  6 16:31:38 2026 GMT
        Subject: CN=9ae39ba0-e83b-4591-a9d2-a18059eac8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:c0:7b:f5:9f:42:31:06:87:00:60:39:00:
                    ed:60:30:6e:9a:06:71:e7:0e:0a:b3:e2:c8:9f:90:
                    0a:75:78:16:c7:7c:d0:30:f9:05:e7:5d:d2:91:1d:
                    ea:99:15:5a:d2:2c:42:ae:3f:3c:51:31:b8:d2:5d:
                    32:a8:ea:55:91:d5:be:a3:7c:68:40:f6:76:8e:d6:
                    55:04:23:26:aa:78:41:2e:64:c0:6e:4b:59:2f:31:
                    d5:c4:18:fc:d6:07:2b:03:39:7f:99:b5:61:55:72:
                    ae:c5:ee:a3:2c:d3:bf:73:5f:80:91:2e:49:b1:bf:
                    39:8a:cc:3a:f5:50:4f:b1:7d:fd:b1:c4:16:d5:58:
                    35:16:41:2c:a8:e9:35:e7:8f:e3:62:5c:3f:ca:51:
                    30:d1:4b:92:fd:fe:8f:71:93:d2:57:c9:84:ff:49:
                    c9:57:55:34:8d:21:fd:65:a9:d1:b0:af:6a:a5:5f:
                    02:1c:27:a2:05:32:47:5d:9e:03:f1:43:c7:ce:d3:
                    e5:b7:cf:3e:ee:7a:84:2c:0c:aa:02:46:18:18:0d:
                    83:35:95:0f:65:80:d9:cc:7b:be:fb:77:2f:31:1c:
                    70:be:ef:78:42:0b:ae:23:d1:fa:25:c0:74:11:2f:
                    61:99:06:e4:f2:08:4a:6e:cc:e7:8e:b1:c5:23:bd:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:98:F3:F3:6D:93:8F:45:61:40:3B:E5:D7:6F:C0:87:89:07:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/10ee590a-a875-312d-a734-f42c39cd8c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.73.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4d:29:d7:e7:2c:f8:5f:9b:f2:9f:44:77:6b:f0:69:c3:47:
         32:36:af:79:82:10:29:b5:3d:51:a4:78:47:81:c7:83:4d:d3:
         0d:38:0f:63:32:0d:20:d5:35:f8:99:4f:8a:60:78:5d:c2:f0:
         50:d0:29:13:dc:90:11:dc:2c:b0:f9:f2:00:21:68:e7:b5:9a:
         40:0a:34:aa:ce:ef:21:f2:0f:66:9e:55:78:86:36:55:e0:30:
         3e:48:93:96:08:99:c9:cf:3a:64:76:7a:96:fd:ab:8c:96:89:
         da:e0:40:6b:92:18:44:aa:19:ce:79:21:67:54:f1:08:37:a8:
         61:07:f5:a5:5f:a1:ce:ba:71:2d:7c:f2:0c:81:53:fe:b4:3a:
         64:b9:4f:2c:fe:e2:6f:7a:a7:33:8d:be:ae:fb:63:d6:82:e7:
         47:ab:76:20:2d:94:35:af:26:48:d8:52:c3:e6:b5:5a:e1:26:
         13:93:08:83:ac:c9:96:67:fc:64:01:b6:8f:df:69:23:56:6b:
         b0:8b:30:78:20:5a:ae:40:97:3d:eb:bc:a1:e8:e1:e7:7e:52:
         12:0b:2a:62:90:89:32:83:b7:14:fa:37:f8:92:3d:78:8d:44:
         e2:52:2f:2e:1f:e7:c8:30:15:c9:2b:cb:0e:55:c3:57:85:fd:
         0c:b0:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:44:37 2026 by rpki-client