Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/28070eab-4ac7-3a8b-810c-377d06270c2a.roa
File:                     28070eab-4ac7-3a8b-810c-377d06270c2a.roa (raw, json)
Hash identifier:          gUFrCT6T1wzvmtekpatJy5SAlGzywCq8QoiqkzdHSBw=
Subject key identifier:   BE:42:FE:81:C6:F7:91:8B:94:EC:CF:52:C1:89:14:71:EB:33:5D:C6
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD284DD592E8C3E57D7680
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/28070eab-4ac7-3a8b-810c-377d06270c2a.roa
Signing time:             Tue 07 Apr 2026 16:30:17 +0000
ROA not before:           Tue 07 Apr 2026 16:30:17 +0000
ROA not after:            Mon 06 Jul 2026 16:30:17 +0000
asID:                     18779
IP address blocks:        172.252.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:28:4d:d5:92:e8:c3:e5:7d:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:17 2026 GMT
            Not After : Jul  6 16:30:17 2026 GMT
        Subject: CN=30c4acdc-1d23-4b88-a201-cd40d320defd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:f2:2d:dd:56:56:01:92:33:f9:05:a6:81:
                    cd:d8:52:b1:33:9e:d4:4a:bf:08:77:a9:6e:18:c2:
                    67:47:98:61:91:da:f9:27:d0:09:a7:bd:58:d1:c4:
                    3a:c0:ca:89:e5:f4:88:79:ed:61:7c:6f:57:0a:f0:
                    5a:81:9c:97:ba:9b:7c:0c:69:35:e8:45:97:81:bb:
                    b9:85:9d:4c:c3:e6:e6:b2:58:0b:3c:44:c4:9c:04:
                    b3:ff:2d:9a:65:8c:81:aa:5e:ff:0c:03:8e:3a:c9:
                    0e:2e:f1:e0:e3:54:d7:c6:e7:eb:48:30:44:19:88:
                    1a:a1:9b:81:ec:21:20:d5:d4:45:42:4a:52:05:3e:
                    88:96:4e:99:84:09:e0:55:dd:2f:17:47:45:c8:c2:
                    ac:9c:75:ff:96:be:2e:c8:12:5c:bd:7b:26:65:d7:
                    57:76:2b:21:0e:f3:14:5c:e0:ef:d1:52:ac:ef:80:
                    d7:6f:8b:82:76:19:19:fc:2e:38:bb:3b:73:d5:e5:
                    8d:23:f5:c8:0f:a2:15:0f:04:94:9c:a8:d0:e5:78:
                    81:2d:fa:00:a6:18:4c:9f:5b:54:16:a1:db:cc:09:
                    54:12:78:f5:88:15:78:89:ea:7c:5b:0a:cd:2f:4e:
                    ba:27:0e:93:11:7e:db:50:54:d4:aa:0b:b0:d9:06:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:FE:81:C6:F7:91:8B:94:EC:CF:52:C1:89:14:71:EB:33:5D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/28070eab-4ac7-3a8b-810c-377d06270c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:fa:d5:78:90:b7:e2:0b:e3:bf:f9:c5:05:95:d8:5e:2a:
         a5:31:07:fc:51:3b:48:3f:36:38:59:60:92:0f:dd:7f:08:b5:
         f6:67:bb:33:b7:ba:1f:59:38:c0:bb:d7:47:ec:f7:3d:e9:91:
         89:43:a7:f1:78:c8:33:78:29:fa:c8:3d:6d:ac:1b:79:4d:83:
         5d:7c:2e:11:65:8f:95:ea:74:09:30:f1:30:99:50:e7:14:97:
         b0:4e:fe:9d:f2:97:d2:57:65:40:29:ad:f6:fe:bb:db:ab:80:
         8b:59:93:91:6b:24:1d:9e:9e:4f:7a:9a:34:6a:ec:4d:b5:68:
         b7:60:f6:c5:2c:ab:0d:0d:a8:4a:7c:f9:ae:9a:f5:3c:5e:ab:
         12:58:6b:af:34:12:ae:0c:1b:e9:e9:7c:5a:e0:fa:5a:88:de:
         38:37:45:1b:28:13:a8:1f:ca:b3:a6:16:18:4f:df:c0:7c:19:
         2f:52:f6:92:da:4b:3c:92:c5:d6:7d:ef:c8:75:ae:6d:08:53:
         cf:dd:c0:da:08:0f:8c:6c:b3:2a:81:1d:e0:3a:6b:2a:d0:a7:
         79:2d:57:66:93:cf:3f:e4:b7:14:be:a2:95:61:a5:4b:f0:60:
         3c:b8:2b:78:b8:2f:3e:7a:9f:c2:11:60:79:64:40:14:4c:ed:
         24:35:26:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3ShN1ZLow+V9doAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MzAxN1oXDTI2MDcwNjE2MzAxN1owLzEtMCsGA1UEAxMk
MzBjNGFjZGMtMWQyMy00Yjg4LWEyMDEtY2Q0MGQzMjBkZWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/jyLd1WVgGSM/kFpoHN2FKxM57USr8Id6lu
GMJnR5hhkdr5J9AJp71Y0cQ6wMqJ5fSIee1hfG9XCvBagZyXupt8DGk16EWXgbu5
hZ1Mw+bmslgLPETEnASz/y2aZYyBql7/DAOOOskOLvHg41TXxufrSDBEGYgaoZuB
7CEg1dRFQkpSBT6Ilk6ZhAngVd0vF0dFyMKsnHX/lr4uyBJcvXsmZddXdishDvMU
XODv0VKs74DXb4uCdhkZ/C44uztz1eWNI/XID6IVDwSUnKjQ5XiBLfoAphhMn1tU
FqHbzAlUEnj1iBV4iep8WwrNL066Jw6TEX7bUFTUqguw2QaT+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5C/oHG95GLlOzPUsGJFHHrM13GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMjgwNzBlYWItNGFjNy0z
YThiLTgxMGMtMzc3ZDA2MjcwYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrPxmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmK+tV4kLfiC+O/+cUFldheKqUxB/xRO0g/NjhZYJIP3X8ItfZnuzO3
uh9ZOMC710fs9z3pkYlDp/F4yDN4KfrIPW2sG3lNg118LhFlj5XqdAkw8TCZUOcU
l7BO/p3yl9JXZUAprfb+u9urgItZk5FrJB2enk96mjRq7E21aLdg9sUsqw0NqEp8
+a6a9TxeqxJYa680Eq4MG+npfFrg+lqI3jg3RRsoE6gfyrOmFhhP38B8GS9S9pLa
SzySxdZ978h1rm0IU8/dwNoID4xssyqBHeA6ayrQp3ktV2aTzz/ktxS+opVhpUvw
YDy4K3i4Lz56n8IRYHlkQBRM7SQ1JkE=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:15 2026 by rpki-client