Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/363ddb61-07b5-3b92-ac88-ea02e8f82ad9.roa
File:                     363ddb61-07b5-3b92-ac88-ea02e8f82ad9.roa (raw, json)
Hash identifier:          53LKwiBK3yp6EY0BhghsEOxikIiz5rqLlArwhjyodGs=
Subject key identifier:   B4:72:A0:35:F5:F9:22:36:61:FA:35:3B:B8:77:56:F2:41:26:F7:02
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD3BBD3147C49596EC6DB8
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/363ddb61-07b5-3b92-ac88-ea02e8f82ad9.roa
Signing time:             Tue 07 Apr 2026 16:30:27 +0000
ROA not before:           Tue 07 Apr 2026 16:30:27 +0000
ROA not after:            Mon 06 Jul 2026 16:30:27 +0000
asID:                     398781
IP address blocks:        172.252.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:3b:bd:31:47:c4:95:96:ec:6d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:27 2026 GMT
            Not After : Jul  6 16:30:27 2026 GMT
        Subject: CN=cee61c07-b132-411a-b583-60067c501def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:7f:87:f2:8a:2c:93:db:29:3e:1d:23:d5:
                    e3:ab:46:be:19:95:58:b0:9f:bf:b9:2f:db:5a:e4:
                    e5:24:5c:93:e9:8a:bc:d9:b9:5b:34:90:34:dd:b1:
                    e0:6d:ea:c3:73:f2:d2:b3:e4:6c:a1:57:e7:8a:81:
                    80:77:70:e6:63:95:f8:86:d6:29:64:7f:39:f8:04:
                    51:59:85:fc:d0:19:39:b5:35:83:4a:1e:94:f8:1f:
                    50:ee:4c:f2:b7:d2:aa:ed:4d:77:89:a6:06:fe:48:
                    2d:d0:e8:82:ba:56:32:ea:c0:78:29:18:4a:e2:99:
                    a2:be:4e:a3:50:96:61:87:99:9c:80:86:bf:15:d3:
                    4f:0b:e7:22:9a:3e:fc:be:3c:d6:89:16:3d:ba:7d:
                    fb:38:d2:87:92:a0:ea:43:a7:95:ad:2c:27:7c:ce:
                    c0:1c:ab:72:27:91:87:af:68:ef:3b:69:b3:e0:bb:
                    d2:3e:64:e3:bf:43:cc:25:d9:ff:ea:db:f3:23:ca:
                    cc:4d:2d:e5:dc:7f:bd:19:32:e3:fe:75:a2:87:1a:
                    89:87:61:05:d7:6d:2e:f1:03:b4:84:c2:15:47:a2:
                    e2:f0:67:2d:15:2b:36:fb:bd:b9:ef:a4:97:b3:af:
                    ab:46:16:1c:d6:34:35:3e:c6:c8:e9:6f:1f:a5:8d:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:72:A0:35:F5:F9:22:36:61:FA:35:3B:B8:77:56:F2:41:26:F7:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/363ddb61-07b5-3b92-ac88-ea02e8f82ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:cd:c9:30:d3:69:94:1d:24:4e:b5:7a:e2:0d:0d:0b:af:44:
         8c:5f:08:92:58:a9:08:82:b4:26:10:9d:d1:0e:54:96:8e:69:
         3c:90:fc:c2:f3:11:89:66:fb:75:24:57:ff:ff:35:3b:0d:af:
         3f:c8:5f:08:93:e5:59:a9:ec:ad:53:75:a8:12:b5:18:f0:a4:
         b2:79:d5:4a:f8:90:3e:19:11:c9:4b:81:9c:e0:88:10:c4:80:
         f9:c7:e6:8e:39:0c:d4:82:c4:7d:57:0b:eb:ca:f1:a2:23:ec:
         97:44:af:fc:1e:41:6a:00:f0:22:44:c5:cc:ab:14:70:fa:50:
         be:2c:9b:c8:7c:43:5c:6b:1b:ba:a4:0e:f3:29:b4:2c:12:c0:
         d3:46:ad:cc:3d:e4:99:02:1e:df:26:b5:c1:a9:ad:f3:22:4f:
         9e:52:70:ee:d9:13:3d:69:dd:ac:68:2a:6a:c2:fb:7d:71:76:
         1a:8d:c6:53:43:e2:07:f9:1f:a5:e9:aa:85:57:ac:85:fb:e6:
         5e:49:e7:85:ce:cd:67:99:d8:2c:8e:59:aa:f9:9a:c2:15:10:
         29:d2:75:81:ba:0e:e8:df:c6:3d:de:bd:03:60:fd:20:06:d9:
         d5:a6:40:ff:b4:c8:1a:3d:68:b6:c6:c2:37:99:85:2b:41:5a:
         0b:c3:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:07 2026 by rpki-client