Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41e02930-4001-3fe6-86e8-0a14402f4273.roa
File:                     41e02930-4001-3fe6-86e8-0a14402f4273.roa (raw, json)
Hash identifier:          r08nugai7HLCG8GsYLwMxt97+2Y/pc3AZq0Nm/ZcGoo=
Subject key identifier:   E2:E5:C3:96:E1:FD:98:C3:71:62:41:B5:57:A0:F1:AD:2E:2A:CF:E6
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD2902538095CEAA7CE940
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41e02930-4001-3fe6-86e8-0a14402f4273.roa
Signing time:             Tue 07 Apr 2026 16:30:18 +0000
ROA not before:           Tue 07 Apr 2026 16:30:18 +0000
ROA not after:            Mon 06 Jul 2026 16:30:18 +0000
asID:                     398781
IP address blocks:        172.252.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:29:02:53:80:95:ce:aa:7c:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:18 2026 GMT
            Not After : Jul  6 16:30:18 2026 GMT
        Subject: CN=b0d4e037-95c6-4041-a3e9-54503d89e1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:da:7e:b8:0d:49:a1:7a:23:cd:dc:d6:c1:
                    8b:ab:b0:3a:4c:e9:2e:55:b6:10:51:24:2f:a4:0c:
                    cf:96:78:86:58:7d:df:df:70:de:18:b1:a9:05:8a:
                    3d:3d:7f:3c:78:ac:89:10:75:87:28:45:d4:b4:58:
                    dd:69:c9:b0:73:c5:cd:f8:b3:96:ce:28:37:c2:1b:
                    ab:aa:ad:6e:ef:f2:9c:78:a4:06:83:05:a2:d1:e6:
                    89:54:9c:e3:c8:ec:66:8b:c1:23:1e:c2:54:b6:60:
                    a2:63:4c:44:ae:a4:c0:2c:a6:f0:df:d6:4e:82:90:
                    57:f1:a3:0f:22:e5:c5:2e:bb:e8:7c:d8:80:de:4e:
                    1b:25:e4:e0:2c:ed:46:1e:cd:d9:9d:13:c0:ce:51:
                    a9:0e:6d:9c:8c:b3:7b:6b:81:98:2b:4a:e2:2d:91:
                    63:97:62:6c:29:4a:1c:9f:ed:0e:ad:35:6c:35:ca:
                    36:a4:f7:27:da:f5:d5:6a:3e:d3:41:89:47:d1:dc:
                    82:84:78:04:9a:6d:97:6e:ef:bf:3d:ee:bb:89:98:
                    bc:a4:0e:16:95:7e:c4:ae:2d:45:26:32:85:58:29:
                    9d:20:31:9f:9e:a8:41:3e:e5:64:62:d6:de:5f:ef:
                    b1:7a:68:da:3e:bb:e3:a7:37:80:d5:43:bb:9c:1e:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E5:C3:96:E1:FD:98:C3:71:62:41:B5:57:A0:F1:AD:2E:2A:CF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41e02930-4001-3fe6-86e8-0a14402f4273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:8d:53:f4:77:f8:ed:18:b1:c6:45:8f:d5:63:f6:28:e0:
         c9:1f:ff:e2:6a:a2:25:10:76:d6:63:89:41:e0:c7:20:93:6b:
         b9:14:a7:0a:30:f3:7a:6e:8c:a1:3d:ed:25:1f:37:09:b3:cf:
         97:5a:b5:26:65:35:88:7e:f9:65:09:0e:2d:dc:f1:b1:60:9a:
         ae:4d:c6:e7:2d:95:3b:76:2e:e7:90:fa:85:e5:e5:11:6b:9f:
         06:46:a2:af:72:b5:76:3e:30:b2:f2:f8:ab:f7:fd:c9:51:39:
         eb:8f:2d:d4:d3:e5:6c:2f:23:c6:7e:b2:c9:76:07:ef:a8:30:
         d6:20:6b:53:25:42:4a:86:f4:31:74:c8:e6:2c:a4:e3:dd:19:
         59:47:aa:6d:7d:07:43:54:99:b2:f5:36:48:1e:02:2b:34:c1:
         d2:a3:53:2e:b1:f4:a3:44:86:e6:b2:d0:0a:0f:16:b6:85:e7:
         1d:9f:71:c0:fc:2e:e3:ae:9c:dc:cc:ed:16:44:0b:43:8f:74:
         62:fd:e7:fa:a3:c6:88:d5:26:90:dd:8c:b4:f4:ad:83:71:15:
         71:73:6e:d3:d7:cd:93:27:63:ff:56:6e:90:c5:ea:03:91:21:
         51:f6:be:5e:78:34:e5:15:7c:25:93:4a:cf:51:d6:0a:02:af:
         65:62:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:44:38 2026 by rpki-client