Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/45ba34cc-a611-3eff-9c3d-18c5f6b4acbd.roa
File:                     45ba34cc-a611-3eff-9c3d-18c5f6b4acbd.roa (raw, json)
Hash identifier:          JrVxp/tgYReAiyFFz8QRL0tpffJJK5kHlicTwCvUOd8=
Subject key identifier:   4A:99:AF:EB:D1:C6:20:37:B4:BB:CD:87:F4:D7:73:C2:C3:77:F9:DB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD0FFF0607474563E83400
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/45ba34cc-a611-3eff-9c3d-18c5f6b4acbd.roa
Signing time:             Tue 07 Apr 2026 16:30:06 +0000
ROA not before:           Tue 07 Apr 2026 16:30:06 +0000
ROA not after:            Mon 06 Jul 2026 16:30:06 +0000
asID:                     398781
IP address blocks:        172.252.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:0f:ff:06:07:47:45:63:e8:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:06 2026 GMT
            Not After : Jul  6 16:30:06 2026 GMT
        Subject: CN=20b7e795-e119-48e4-b09e-3d6734be5ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ab:9f:f7:0c:c8:00:81:bb:18:06:d2:a5:ab:
                    ba:41:06:f1:7f:fc:4b:a7:48:fa:f6:10:2a:e4:f0:
                    57:04:41:33:ce:55:7e:2f:a5:bb:6b:70:38:1f:a1:
                    28:11:e5:50:7d:53:ab:f5:74:a7:94:6d:15:82:d4:
                    be:f3:20:0d:92:06:7c:54:4f:de:8a:d2:ac:26:42:
                    69:ac:1a:82:ca:1d:39:8e:7d:1b:d3:5c:36:bc:7d:
                    66:df:d4:5a:dc:8e:91:0c:7c:3a:59:18:49:a3:1e:
                    60:28:3b:08:47:f5:51:ed:75:2e:be:28:98:3c:6b:
                    c1:83:b1:a2:33:5e:80:85:1d:64:db:2f:c4:c1:89:
                    a3:11:dc:c5:bb:c0:bd:b6:35:a4:ec:63:9c:49:24:
                    87:ea:9a:9d:00:d3:f2:9e:c3:08:c6:84:63:bb:fc:
                    8f:46:7f:8a:18:40:42:57:89:be:07:85:cc:53:e1:
                    33:55:f8:4b:f6:e5:05:1c:96:08:21:f3:49:47:5b:
                    d9:37:09:97:57:de:4e:30:d2:9a:96:13:f7:93:fa:
                    23:30:8c:78:4c:61:9f:21:6c:61:ad:82:29:f3:ee:
                    a2:61:89:49:7a:07:0d:c4:b3:56:de:8b:d2:89:c6:
                    70:d6:40:02:ad:4b:42:03:05:a4:5e:13:c2:9a:8a:
                    6d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:99:AF:EB:D1:C6:20:37:B4:BB:CD:87:F4:D7:73:C2:C3:77:F9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/45ba34cc-a611-3eff-9c3d-18c5f6b4acbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:50:aa:4e:da:a5:c2:39:c9:f5:c4:85:83:3e:34:2c:ca:73:
         71:58:53:e4:57:5d:7d:9c:51:96:9c:91:b5:5d:45:1d:88:d8:
         fd:45:9d:f9:4e:ea:26:28:1c:c4:ae:fe:00:95:c7:2f:4e:39:
         34:95:c2:ed:4e:13:e1:fe:70:6b:05:b2:d3:79:24:95:a5:57:
         6d:a1:b5:46:60:96:c2:72:72:e0:e3:2d:24:cb:3f:48:53:91:
         0d:46:73:96:05:8b:89:4f:e7:55:8d:16:0c:6e:3b:ee:49:43:
         66:fc:5f:7c:57:f7:4d:d4:fa:9e:5e:25:40:32:de:b1:d8:0a:
         60:0f:ae:7a:4b:d6:68:75:73:12:42:db:61:21:08:76:35:8a:
         9b:13:e1:0e:a8:f9:63:85:44:83:9a:98:7b:6f:3d:07:15:c7:
         c7:b4:2b:57:95:4f:21:5b:95:83:94:38:9e:d4:09:8d:a7:50:
         b8:dd:5d:c6:85:10:28:5f:7b:1c:d2:90:e2:63:55:e0:b3:28:
         f2:bb:c1:69:78:8b:7e:1a:a0:01:86:0b:69:f5:dc:d8:81:4f:
         e7:10:84:11:01:06:f6:bf:dd:72:97:26:ca:4a:27:8b:d7:9e:
         6b:0b:ad:f5:8a:f3:de:0e:64:8f:ac:15:d1:c5:0a:3e:64:55:
         43:45:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:50 2026 by rpki-client