Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/549457ed-0e32-34f5-863a-504a66fd0718.roa
File:                     549457ed-0e32-34f5-863a-504a66fd0718.roa (raw, json)
Hash identifier:          MLc7ip1SCSxOrq1j3a8Jg6/bOVnXH/vahwJrEhepGQI=
Subject key identifier:   75:6C:BF:9C:6A:A6:EF:4D:CA:20:A7:15:03:C6:81:E0:AC:1A:A1:49
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD4ED4C745C662D1A41B68
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/549457ed-0e32-34f5-863a-504a66fd0718.roa
Signing time:             Tue 07 Apr 2026 16:30:36 +0000
ROA not before:           Tue 07 Apr 2026 16:30:36 +0000
ROA not after:            Mon 06 Jul 2026 16:30:36 +0000
asID:                     398781
IP address blocks:        172.252.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:4e:d4:c7:45:c6:62:d1:a4:1b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:36 2026 GMT
            Not After : Jul  6 16:30:36 2026 GMT
        Subject: CN=1b271350-36c6-4146-ad4f-534cc9c3a665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:cc:3c:62:36:ca:3a:df:9e:08:52:41:ae:
                    5e:9a:ed:13:67:6f:38:13:20:fc:c0:c7:71:5b:de:
                    bb:b2:32:aa:0f:84:45:f8:cc:eb:81:b5:dd:e5:22:
                    ac:68:1d:7c:1e:51:67:5a:06:c9:f1:38:3e:a0:1e:
                    a8:4e:98:08:5a:47:29:be:7e:d2:ea:cb:65:3b:05:
                    fa:bf:5f:5c:47:19:3c:e2:33:aa:bf:42:2f:b4:3a:
                    ac:b2:38:77:37:2d:9c:da:87:f6:fb:13:46:ed:dc:
                    c2:27:76:17:1e:5b:1d:c6:9d:81:b7:0f:41:81:45:
                    3f:cc:bc:48:90:47:aa:a9:2e:d4:5f:8f:fd:47:90:
                    57:a5:f6:04:2c:ef:d9:d4:45:31:69:44:d3:eb:f3:
                    89:90:53:1b:cd:e6:51:4c:3d:bf:4a:04:65:5e:5e:
                    1d:ef:dd:4a:ee:8b:d8:02:f2:5a:5e:34:06:06:ba:
                    d9:02:98:db:d1:0f:06:fb:8d:a0:9e:5e:8d:12:f4:
                    53:63:b9:d0:fd:3f:f4:c1:cf:69:a8:97:8d:f4:4d:
                    14:c1:ec:dc:42:70:37:67:4b:e6:f9:8a:e6:31:00:
                    bc:f5:87:0b:9a:ee:0b:b8:c3:62:d2:e4:c5:40:2c:
                    93:78:7f:1e:73:08:22:c6:cb:db:8b:7a:3c:ed:01:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6C:BF:9C:6A:A6:EF:4D:CA:20:A7:15:03:C6:81:E0:AC:1A:A1:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/549457ed-0e32-34f5-863a-504a66fd0718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:44:ea:3a:34:20:b6:44:5b:e7:36:61:33:fd:68:32:5a:9b:
         7f:2c:9d:fd:0f:8d:84:42:47:d2:a5:be:36:48:4d:df:c2:36:
         55:e3:b3:9b:24:21:a4:4e:74:b7:45:b1:5b:df:d2:51:b9:73:
         fc:77:57:df:f4:ea:b3:b7:c5:b2:c9:00:71:e4:10:c3:bd:9f:
         1e:cb:5a:6f:cf:b3:31:c3:e3:7a:a3:e8:db:76:c1:b3:95:2a:
         30:ca:f5:a3:7f:27:c6:d5:57:5c:08:a5:1b:eb:0c:d2:9d:35:
         4a:a3:5b:69:ce:68:e7:a8:af:ef:4f:65:1b:c4:93:83:8f:7a:
         b6:ea:95:24:a1:8e:52:ca:72:d6:b9:e7:d9:43:06:36:b4:b7:
         ab:5e:dd:53:34:99:96:e6:74:e1:19:72:34:4a:5c:c6:5f:f1:
         0d:af:ba:14:85:39:5d:98:56:50:02:b7:49:90:01:20:0e:85:
         cd:4e:cd:d6:0b:33:d8:3b:4c:e2:90:ff:b7:33:a3:13:61:d2:
         82:a5:12:41:b4:ac:58:63:5a:00:b3:d7:a5:18:7c:be:c7:c7:
         1b:13:95:c1:9d:5c:30:e2:c1:01:15:6b:aa:09:43:71:11:a5:
         8e:e9:19:92:86:ed:f1:cc:49:9c:23:ae:f5:73:f1:f1:df:90:
         17:cd:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:43:56 2026 by rpki-client