Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2bb36a6a-c8bf-393c-8825-653a1e5ba836.roa
File:                     2bb36a6a-c8bf-393c-8825-653a1e5ba836.roa (raw, json)
Hash identifier:          b9c1gg+XugneK5mgBuqSOminBogFBH+23eQgLlAcPew=
Subject key identifier:   E0:D3:D7:D0:3C:37:91:DD:22:AF:80:11:95:EC:D1:46:DC:1C:C1:08
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDCFEB8976E9847F14BC280
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2bb36a6a-c8bf-393c-8825-653a1e5ba836.roa
Signing time:             Tue 07 Apr 2026 16:29:58 +0000
ROA not before:           Tue 07 Apr 2026 16:29:58 +0000
ROA not after:            Mon 06 Jul 2026 16:29:58 +0000
asID:                     25893
IP address blocks:        172.252.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:fe:b8:97:6e:98:47:f1:4b:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:29:58 2026 GMT
            Not After : Jul  6 16:29:58 2026 GMT
        Subject: CN=bb9ce6bb-5d8f-45b0-b1b7-2fbd3434f19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0c:13:a4:d8:15:41:7f:c0:21:eb:0e:8e:ca:
                    e3:6a:f4:c4:da:62:a9:0d:85:13:76:0a:85:73:f0:
                    51:94:43:1e:4a:38:ed:62:e3:af:89:b8:e8:78:8b:
                    92:3c:62:ab:4b:60:af:7c:1a:08:c9:e6:14:4d:d2:
                    24:b5:0a:59:ab:ef:bd:31:af:8f:52:db:a3:a9:05:
                    9a:58:82:b6:14:5b:a8:47:f5:4a:b9:86:82:9b:be:
                    48:ce:17:44:27:41:51:58:be:d8:92:51:6d:af:90:
                    94:09:07:ac:a7:b4:39:c1:ae:63:ad:8d:87:5c:b5:
                    70:52:e5:5d:48:52:1d:f8:8f:37:73:7f:13:7c:5f:
                    40:02:64:9c:23:2d:80:74:b2:71:01:ef:1e:fb:7e:
                    59:fc:22:61:3b:36:59:2d:9f:a3:4a:1c:0c:6c:7c:
                    99:27:8a:35:52:0c:f3:52:e9:1e:af:9e:0b:1c:ad:
                    d4:f3:f6:2a:53:7f:34:89:89:a7:5c:40:5e:b4:d0:
                    ee:b1:db:81:54:bc:d8:62:45:4a:a3:65:7c:6f:34:
                    54:88:a4:00:1f:92:ae:20:d7:43:e0:ff:b0:f4:6e:
                    49:7f:88:cc:5a:5b:eb:82:26:83:46:cd:d7:33:5b:
                    fe:50:71:11:ce:4c:db:5d:08:0d:ad:98:3a:13:3f:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D3:D7:D0:3C:37:91:DD:22:AF:80:11:95:EC:D1:46:DC:1C:C1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2bb36a6a-c8bf-393c-8825-653a1e5ba836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:27:31:7d:54:40:e2:0c:43:fa:c4:2a:5d:6b:6d:a5:3d:25:
         ab:ca:a4:d5:22:a5:12:e8:41:d0:b4:4b:c4:63:e1:38:ee:22:
         a0:01:98:90:50:8a:77:aa:6b:3e:2e:b3:f1:b1:07:17:4e:97:
         f3:85:21:94:37:5e:ae:ab:de:9d:31:1d:2f:db:21:df:ca:d2:
         2e:85:0e:31:be:65:4a:e5:ba:43:84:38:b7:d8:08:2d:3a:6a:
         03:b5:10:b2:4c:48:dd:0c:fa:4e:d0:ed:ce:7a:7f:b3:2a:59:
         41:80:69:75:07:58:6f:1a:f1:c8:9d:8e:ac:ff:4e:99:9f:5e:
         d1:19:ce:cc:8f:45:9a:47:2a:70:f7:55:46:03:57:ef:47:50:
         05:cd:43:8f:ce:c5:9c:a8:1d:cf:62:8d:a8:fb:80:de:31:32:
         e6:a7:10:66:1e:e8:bb:15:c4:7c:1d:40:72:70:4d:9c:b2:64:
         ef:61:d7:15:67:3a:13:e3:5a:17:5d:d2:88:3a:a2:96:52:ab:
         6a:e6:ff:f8:dd:35:29:1f:de:0e:7c:6e:2d:8d:bb:7d:12:c7:
         ea:57:68:a0:6c:5d:2e:d2:4e:4c:2d:72:5f:3d:23:c9:d3:0b:
         96:ec:45:6a:c2:b5:b5:79:c1:59:10:be:d7:b9:47:e8:c3:02:
         35:f8:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:51 2026 by rpki-client