Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4a767b1d-32f6-3a18-8618-f3d2a6e6fa72.roa
File:                     4a767b1d-32f6-3a18-8618-f3d2a6e6fa72.roa (raw, json)
Hash identifier:          GZQyTNI98OaU7sN3mqz8ORpPcL8B5zUmHShUybta5r0=
Subject key identifier:   54:D2:32:59:E8:94:5B:4C:0C:51:83:2F:B7:62:CA:16:2E:B8:C7:38
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD50844F7A854CAC53B900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4a767b1d-32f6-3a18-8618-f3d2a6e6fa72.roa
Signing time:             Tue 07 Apr 2026 16:30:36 +0000
ROA not before:           Tue 07 Apr 2026 16:30:36 +0000
ROA not after:            Mon 06 Jul 2026 16:30:36 +0000
asID:                     208226
IP address blocks:        172.252.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:50:84:4f:7a:85:4c:ac:53:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:36 2026 GMT
            Not After : Jul  6 16:30:36 2026 GMT
        Subject: CN=cf4cabe1-e4cb-400a-9017-edb797b1d321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:e9:ba:a7:3f:63:09:b8:23:c5:62:49:c0:
                    15:d9:3a:54:de:a5:9a:e0:7f:0b:74:3c:d7:06:b8:
                    cd:4d:e7:87:92:df:09:30:41:34:b8:54:02:f5:94:
                    21:70:8c:8f:a4:d7:36:f0:62:71:9b:fe:47:83:de:
                    f0:cc:b3:e1:03:1b:02:19:14:1a:71:be:6d:eb:84:
                    1d:d6:c2:6b:ee:9b:41:03:07:3a:50:48:4e:64:e4:
                    a4:2e:42:87:f0:47:8e:6e:2a:8c:a0:9d:47:54:bf:
                    6c:89:03:cf:9b:9a:2f:9c:76:6b:4a:a9:44:ed:98:
                    28:eb:33:83:02:81:0b:69:e2:bc:d6:fa:ac:72:02:
                    14:51:75:2c:da:f7:05:fd:6d:0d:f8:fd:e6:37:7b:
                    f7:5e:ee:af:be:c9:d1:d6:7b:24:fb:5d:30:69:6b:
                    33:08:da:8e:f4:88:0a:97:ea:02:af:cd:db:70:02:
                    3b:68:98:0d:5c:c0:54:44:23:86:b4:00:3a:80:14:
                    93:29:46:49:77:f2:51:93:59:06:14:86:d7:cf:0c:
                    39:4e:6b:c9:81:ef:0f:79:e2:7f:74:c0:0d:7d:0c:
                    a7:28:22:2c:ee:60:e2:bf:2e:0c:70:43:4c:c1:a1:
                    0e:68:42:0f:11:61:1e:45:45:2a:c5:9d:f0:66:24:
                    99:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D2:32:59:E8:94:5B:4C:0C:51:83:2F:B7:62:CA:16:2E:B8:C7:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4a767b1d-32f6-3a18-8618-f3d2a6e6fa72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:52:1f:ea:b4:29:06:cf:b1:c5:ce:31:93:8c:63:fd:3b:
         00:d1:8d:b3:3b:37:f0:1e:db:54:84:f2:d8:98:24:25:70:b4:
         e5:8a:29:de:d4:18:26:bc:3c:68:94:4e:e2:7c:ff:b5:b3:ca:
         c4:1f:60:41:38:c7:24:60:a8:35:c0:3e:15:9e:12:e7:b9:f4:
         98:56:c1:96:bd:72:47:11:94:da:21:18:66:58:14:f6:cd:44:
         2a:38:ec:0b:72:43:c3:36:f9:03:37:2f:57:03:8f:e2:2f:a4:
         44:0f:e3:4e:80:08:11:0a:68:80:ba:d7:50:fc:40:86:42:3b:
         45:93:77:d3:1f:0e:0a:18:df:73:3d:27:9b:e7:5d:58:fa:53:
         d2:5d:7a:be:66:60:de:b2:ab:88:c6:70:59:67:e0:dc:d8:f6:
         e1:41:58:55:35:19:5a:df:10:de:2c:27:01:0a:75:7e:6c:ec:
         46:76:2a:bf:2f:e4:25:05:4b:75:4f:5d:28:c5:f9:9e:db:a2:
         2d:e5:22:43:52:3c:85:e1:a5:1f:66:d7:d7:d2:ef:41:9f:c3:
         c3:ed:2c:b5:33:d8:50:eb:fd:49:d6:32:90:9a:1a:bf:49:c1:
         35:21:2e:a5:7c:4f:f1:70:18:ee:18:e1:e8:4d:22:77:0a:ec:
         9f:68:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:44:00 2026 by rpki-client