Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ab8c46e-5c2b-3208-a893-ae6a016766df.roa
File:                     4ab8c46e-5c2b-3208-a893-ae6a016766df.roa (raw, json)
Hash identifier:          /+ssU+0veyy8rXS4bk0PSWszPXRVdgJPLg4LSyP+rNs=
Subject key identifier:   96:27:F0:C2:54:26:4C:55:C4:12:28:C4:02:DE:38:6B:CB:33:6E:63
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD5058F4B5FF68BCEC0900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ab8c46e-5c2b-3208-a893-ae6a016766df.roa
Signing time:             Tue 07 Apr 2026 16:30:36 +0000
ROA not before:           Tue 07 Apr 2026 16:30:36 +0000
ROA not after:            Mon 06 Jul 2026 16:30:36 +0000
asID:                     64267
IP address blocks:        172.252.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:50:58:f4:b5:ff:68:bc:ec:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:36 2026 GMT
            Not After : Jul  6 16:30:36 2026 GMT
        Subject: CN=847b9640-720a-4628-948b-fe5f5a6884c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:40:c0:1a:86:6e:2c:8a:aa:d8:c1:6c:be:
                    ed:81:42:9d:59:48:6d:10:71:5d:82:52:6e:f8:62:
                    db:ee:57:36:b6:07:0e:cf:73:f8:81:0c:c6:a5:42:
                    a2:6e:5f:84:5d:86:80:bf:22:a8:ca:a2:f8:25:0a:
                    98:ef:e5:4e:be:62:a2:78:90:13:cd:17:0b:f6:a7:
                    54:98:b2:b9:0b:fe:d0:5a:81:25:a0:63:73:bd:82:
                    93:4f:67:5f:db:2f:bc:5e:e5:0d:f5:47:e7:af:1f:
                    84:a0:06:cc:05:da:bc:c7:85:6e:2d:d2:39:6a:b1:
                    f4:ea:c9:7a:f0:22:5e:c9:6a:fd:8f:49:df:e7:cd:
                    a9:2e:5b:6b:37:74:b0:5f:77:52:15:0e:be:57:e0:
                    5e:2e:6a:26:28:68:a5:c5:e9:8f:22:5f:08:3a:8d:
                    9a:79:a2:9e:f1:a7:7e:ef:d9:3e:aa:3c:ba:39:e4:
                    8e:cb:5e:a3:8c:da:13:d5:a2:2b:24:c0:69:66:d3:
                    bd:b3:a9:60:96:4d:95:a5:d5:a4:0e:c3:34:eb:3d:
                    eb:15:a8:21:48:2b:b7:9d:e7:df:0c:a6:bd:3c:10:
                    87:2e:c3:b8:a0:0e:2f:12:1b:c4:0c:da:50:81:80:
                    09:5e:09:26:c9:a2:ef:83:c8:b4:31:9d:b7:e8:04:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:F0:C2:54:26:4C:55:C4:12:28:C4:02:DE:38:6B:CB:33:6E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ab8c46e-5c2b-3208-a893-ae6a016766df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:0f:2d:14:ac:19:d9:49:3a:4f:4d:1c:6c:e4:47:04:14:39:
         2f:5a:6f:18:49:c9:e1:db:0f:1e:27:fb:bc:ef:48:94:63:d7:
         2c:25:1a:5e:f7:88:b4:4f:8a:b7:4f:72:ac:0e:fd:5f:f9:57:
         e2:5e:3d:48:ca:a8:e3:25:28:fa:88:f0:7a:8f:f4:85:9d:8a:
         2a:c6:7e:8a:e1:72:91:5f:3f:b3:94:2c:94:09:54:62:a0:d5:
         28:eb:3c:f3:06:76:16:13:13:b2:21:1b:a9:ed:70:7e:c6:3b:
         bf:a3:fb:1a:a0:bf:2d:81:cc:e3:51:e9:81:2f:de:e7:bf:ff:
         a4:3f:65:4f:5a:62:88:fe:2b:fa:68:e1:1d:64:73:eb:b2:ea:
         8f:2c:78:45:c8:a6:ca:e6:b7:ff:22:9d:e4:f1:44:e6:25:ab:
         ed:9e:b8:d7:d7:7d:ef:86:54:83:58:e5:41:33:c8:4a:78:57:
         42:51:60:f7:6d:c2:ab:2a:4d:93:b8:c7:f1:5d:12:ec:ee:8e:
         3e:89:0f:3e:c9:00:44:6f:4c:4c:7b:27:91:0a:4f:a9:0c:51:
         74:cc:2d:06:85:ad:1a:dc:39:f4:f3:a9:95:d7:80:80:9e:b1:
         1b:25:55:d1:df:ff:03:00:72:98:3f:4d:44:9f:34:1d:5b:b7:
         10:9e:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:17 2026 by rpki-client