Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/32023f4f-c143-3700-8b75-d46bae918f26.roa
File:                     32023f4f-c143-3700-8b75-d46bae918f26.roa (raw, json)
Hash identifier:          pSuyfrAt7FaV342g0EWm6NXT9I8z25Pb+pXThBUDYvU=
Subject key identifier:   36:3A:A3:83:F6:C8:EF:9B:9B:1D:B3:46:67:09:28:29:9D:37:B1:E5
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD3BCA349163C7AA98C8A0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/32023f4f-c143-3700-8b75-d46bae918f26.roa
Signing time:             Tue 07 Apr 2026 16:30:27 +0000
ROA not before:           Tue 07 Apr 2026 16:30:27 +0000
ROA not after:            Mon 06 Jul 2026 16:30:27 +0000
asID:                     18779
IP address blocks:        172.252.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:3b:ca:34:91:63:c7:aa:98:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:27 2026 GMT
            Not After : Jul  6 16:30:27 2026 GMT
        Subject: CN=6176013e-1aa5-4844-9bf4-8d665df95e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:e9:f2:bd:bd:8b:ab:61:07:b4:38:9a:fd:
                    27:2c:c8:74:96:77:7f:e7:2a:a9:c1:fe:fd:71:bc:
                    21:73:ad:6a:14:65:1d:ca:14:41:1c:73:e8:f7:06:
                    41:00:6f:7a:cf:d9:c3:2b:a4:21:6f:14:ce:7f:ed:
                    8e:3d:e6:f7:52:61:7b:0b:5a:2e:cb:92:4f:07:50:
                    31:89:80:34:65:4a:09:6b:0a:01:36:d9:97:a4:05:
                    26:c8:a7:29:c0:ba:9d:b8:6c:4a:03:40:2b:84:24:
                    33:d9:86:ca:a3:70:9b:54:51:30:7a:9e:80:07:e2:
                    d7:16:6e:db:6b:c5:22:42:bc:86:68:41:10:a5:1a:
                    49:12:f4:56:02:21:bb:b2:6e:a7:49:59:d3:23:53:
                    08:c7:c9:71:dc:1e:6b:b3:89:78:40:15:cc:b6:cc:
                    2d:0d:0a:fb:8e:2b:ca:95:6b:e3:0b:c3:7a:a1:08:
                    80:f9:c0:d5:3b:d3:7a:bf:89:bb:ee:dc:eb:45:6a:
                    45:32:b6:43:ce:a6:9f:70:96:39:6c:9c:72:4e:93:
                    67:27:ab:c2:86:c3:01:83:13:46:0c:b3:95:e4:af:
                    22:25:fc:75:af:ae:cc:e2:af:87:1a:73:c9:c6:a0:
                    96:79:77:2d:28:01:28:87:36:5e:5f:51:c2:c2:17:
                    3a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:A3:83:F6:C8:EF:9B:9B:1D:B3:46:67:09:28:29:9D:37:B1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/32023f4f-c143-3700-8b75-d46bae918f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:38:9b:d4:0c:05:f1:4e:5e:9b:8e:f6:78:7a:a8:6a:a1:
         39:6b:82:08:d4:47:ae:70:18:f2:bf:9f:1d:5e:15:e9:54:e8:
         26:09:b9:e1:f7:50:80:db:bb:a1:7e:8d:44:74:b9:02:bc:7d:
         f3:3d:e1:38:d9:2f:ba:d4:ab:74:cd:3f:86:43:80:3d:ad:de:
         7c:30:cf:b3:a2:c1:83:2d:cc:e2:d0:8c:42:ba:75:57:86:5d:
         87:94:6b:02:a5:e9:7e:c4:8d:9c:cd:bf:a4:85:74:04:4e:fc:
         b0:fe:59:bd:6d:4c:1b:75:6b:e9:9a:9d:2a:0f:ba:41:22:77:
         13:31:1f:c3:cb:13:5c:bb:7a:45:03:be:f3:da:0b:2b:41:7c:
         dd:dd:8c:11:0f:6e:70:0a:5d:e3:7f:f7:17:75:29:b4:0f:43:
         d8:aa:0c:36:24:ae:80:83:2f:14:73:d7:16:a3:06:33:b6:db:
         54:b7:4a:fa:0c:38:cf:71:f2:49:bb:15:e0:bf:2f:41:62:a5:
         46:a5:65:3f:77:e3:1b:bd:78:75:99:84:83:43:ed:ed:13:33:
         d5:ce:8b:dd:9b:0e:e9:08:63:1c:5f:52:0c:b4:85:f9:bf:59:
         40:85:37:06:5d:28:f2:31:6d:83:ed:ce:9f:1e:a0:4f:85:1c:
         ea:f3:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:26 2026 by rpki-client