Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5b6b24a3-b41a-3442-b04d-2c4df578e9fb.roa
File:                     5b6b24a3-b41a-3442-b04d-2c4df578e9fb.roa (raw, json)
Hash identifier:          /bCQqiu+gHDe00eb8wzfyg8EmvsoXBMmFq3L0/o3X/M=
Subject key identifier:   7E:18:12:8A:F3:DF:A2:7F:E4:C6:52:EB:8A:BF:16:07:EF:AE:E7:7B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDDD30E27202EAF508B0E80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5b6b24a3-b41a-3442-b04d-2c4df578e9fb.roa
Signing time:             Tue 07 Apr 2026 16:31:38 +0000
ROA not before:           Tue 07 Apr 2026 16:31:38 +0000
ROA not after:            Mon 06 Jul 2026 16:31:38 +0000
asID:                     5650
IP address blocks:        209.73.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:d3:0e:27:20:2e:af:50:8b:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:31:38 2026 GMT
            Not After : Jul  6 16:31:38 2026 GMT
        Subject: CN=4ba565da-5681-48c0-97c4-a620d18161a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:c9:7e:df:9c:9c:41:8c:00:da:9b:da:67:
                    b9:30:c6:d6:9a:7e:3a:b7:e7:ab:86:24:9a:28:99:
                    0b:10:65:d6:0b:37:fd:70:31:14:93:9d:3c:30:f5:
                    31:53:94:f1:6a:a5:77:78:b2:19:c3:b1:03:a8:e4:
                    ab:b7:9f:a0:0d:2e:f2:7b:65:18:86:52:06:c7:70:
                    8e:31:2d:18:0c:69:91:3c:1d:b5:3c:c4:07:df:b1:
                    3f:93:b7:4b:9b:ea:31:5f:d2:8f:2a:cd:bc:7d:fc:
                    f4:76:c0:d6:c8:97:69:b1:17:5c:f2:d9:7d:1f:06:
                    27:e4:6f:29:c9:ce:ce:b2:91:12:75:3b:bd:8f:d2:
                    51:e5:9e:42:a1:4e:2e:15:b9:d3:03:2b:1f:d5:93:
                    2d:24:d7:75:00:27:fa:58:8f:19:0d:3d:c7:9a:3a:
                    42:e4:f4:09:2f:7d:ab:4e:c6:cc:81:9e:21:f1:d8:
                    c1:d7:06:26:9c:e5:7b:f3:98:87:91:b2:f9:aa:d5:
                    e8:0a:fb:73:a8:e8:6d:8e:86:44:aa:1f:20:b6:5c:
                    47:27:33:62:65:d7:ee:45:c9:76:97:95:19:b5:86:
                    03:43:d0:8a:ac:d0:b3:e1:74:11:c8:13:3c:a1:6d:
                    c8:30:c0:85:e6:b1:65:bc:91:ae:83:fe:b6:28:f3:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:18:12:8A:F3:DF:A2:7F:E4:C6:52:EB:8A:BF:16:07:EF:AE:E7:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5b6b24a3-b41a-3442-b04d-2c4df578e9fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.73.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:21:16:0e:06:35:67:c1:ff:1d:36:a5:23:94:5d:98:53:23:
         70:6c:f0:a7:0e:f0:65:ba:ad:21:3e:f9:8f:86:6b:a9:5d:32:
         c9:b4:cb:5a:96:46:69:11:44:1c:fb:f2:49:ed:a8:bb:28:71:
         a7:4d:e9:3c:02:6b:a7:89:5d:ae:2c:fa:51:a4:96:b7:03:9e:
         2a:4d:c4:aa:1f:86:b1:d6:24:f4:ae:c5:5e:b5:22:77:7a:ad:
         e3:f9:94:8a:a6:5d:93:1d:6b:67:bf:b6:75:33:07:03:8c:0d:
         ef:de:61:84:d4:01:ba:d0:c2:6e:21:32:21:28:4e:ea:b4:f1:
         cc:6c:29:b0:32:fe:c3:97:5c:46:91:fc:35:18:51:97:e6:a3:
         0b:fa:ab:0a:92:4d:0b:a2:28:c7:f5:60:98:ec:0a:31:20:55:
         e3:9d:01:e7:95:f4:60:7b:b7:5d:e2:5f:93:3a:19:95:67:f0:
         b5:46:64:d3:cc:b7:78:c7:59:fc:80:fd:e9:f0:b4:01:f9:09:
         ab:6c:c7:3a:5f:e7:0b:77:3c:b9:9d:40:18:94:48:08:89:0a:
         d0:35:b7:1a:1d:b0:7a:d8:fe:dc:81:ba:94:67:f0:6a:3d:64:
         5c:df:6d:ff:84:2f:85:25:24:60:ac:a8:21:35:e7:52:0d:03:
         99:c8:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:28 2026 by rpki-client