Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/78781447-dd82-320a-b9fd-4bf8f4004844.roa
File:                     78781447-dd82-320a-b9fd-4bf8f4004844.roa (raw, json)
Hash identifier:          tX+/10+VaxMqL+NCzy7RGi5L7EY0Md8+lfmXyZQSgv0=
Subject key identifier:   BC:87:EF:1B:CA:92:99:6D:25:BF:11:3F:8E:9E:C7:54:A0:60:60:66
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD1171D2FB2CF1C877AD00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/78781447-dd82-320a-b9fd-4bf8f4004844.roa
Signing time:             Tue 07 Apr 2026 16:30:07 +0000
ROA not before:           Tue 07 Apr 2026 16:30:07 +0000
ROA not after:            Mon 06 Jul 2026 16:30:07 +0000
asID:                     18779
IP address blocks:        172.252.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:11:71:d2:fb:2c:f1:c8:77:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:07 2026 GMT
            Not After : Jul  6 16:30:07 2026 GMT
        Subject: CN=7ba3482b-995d-4935-a5d4-4ca6a7fc5135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:8f:2d:44:27:04:c8:a5:3c:0f:6d:f0:4a:
                    27:ee:72:03:7d:27:1d:99:d5:e3:a1:04:8f:18:58:
                    42:b5:ae:17:32:a6:37:8c:6a:6d:0f:49:d9:bf:96:
                    a0:e2:30:46:8e:48:5d:e1:f0:cf:01:2f:5c:68:7e:
                    bd:23:3e:c2:7d:47:de:13:4e:1b:8c:8f:4f:70:32:
                    02:63:b0:6c:58:90:25:37:b9:37:08:ea:d0:73:7b:
                    cc:46:2a:c3:82:ad:67:be:fd:47:36:39:49:6e:9c:
                    76:48:79:9c:1b:13:c4:54:b3:b8:8f:38:6c:ed:22:
                    ca:2c:56:89:54:5d:54:22:da:b0:72:2f:a9:21:e5:
                    f5:c3:c6:e4:17:5a:e4:5c:a1:a0:d2:90:c3:66:d3:
                    33:67:58:64:c7:f2:5a:89:fa:7a:41:7e:36:b8:d2:
                    9a:6e:b4:0c:55:fd:9a:a4:65:eb:ca:ef:ab:f0:f7:
                    6b:03:79:9c:13:9e:97:da:28:3f:c9:4d:91:26:dc:
                    2c:d0:63:ff:8e:0b:2e:5e:c1:81:ce:39:be:4c:13:
                    69:04:41:72:e7:57:b8:3a:19:a8:b6:aa:7a:c6:de:
                    9d:5d:0e:6b:de:7a:d8:0f:e5:93:f9:f5:82:de:da:
                    55:c3:28:b6:49:91:d6:97:e5:72:38:70:57:69:d1:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:87:EF:1B:CA:92:99:6D:25:BF:11:3F:8E:9E:C7:54:A0:60:60:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/78781447-dd82-320a-b9fd-4bf8f4004844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:bf:e7:38:0e:29:54:2c:ee:58:a7:a5:25:58:5f:af:0a:
         dd:a4:52:d5:0c:dc:e3:15:1a:02:c9:e8:19:17:cb:d3:30:4b:
         af:44:d5:94:00:db:d6:e9:52:d1:b0:4f:7a:e8:1e:78:4c:57:
         25:99:4b:ba:75:69:e2:3b:2e:24:cb:2d:c6:b8:bb:ec:57:d5:
         91:c0:15:41:e7:25:4f:25:22:37:44:1f:f8:99:c8:db:a2:b7:
         c6:01:c5:dd:12:c8:d0:16:18:3a:f4:ea:78:4c:87:1f:6d:15:
         cd:35:91:88:50:56:a4:cc:03:58:2f:de:4a:b6:db:44:71:df:
         53:cc:1c:75:3d:68:3e:b0:29:7a:d5:08:90:07:af:f7:76:e9:
         57:2c:ae:55:8e:8a:8a:e3:a0:b6:88:b2:fb:b8:72:5d:9f:18:
         87:1d:46:b0:da:27:dc:f2:4b:2b:75:da:43:ba:b3:54:a9:48:
         ad:cf:92:9c:33:fe:f5:50:87:07:2a:a5:9a:10:28:a1:0d:b4:
         a3:a1:16:9a:38:3b:a4:3b:13:23:d8:f8:3a:df:70:cc:0a:c0:
         ca:72:ec:1b:2d:84:a9:1c:6c:d9:f7:cb:f1:8d:c7:92:cf:f7:
         f0:ed:3c:35:35:0a:2e:23:e4:fd:e9:eb:5e:2f:4d:86:2b:f8:
         60:f8:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:44:02 2026 by rpki-client