Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/841ef99d-ccbd-306d-ae98-be4d10f3d253.roa
File:                     841ef99d-ccbd-306d-ae98-be4d10f3d253.roa (raw, json)
Hash identifier:          fv1Mmv8scJKZPXeQ4xdqWoasKWITsAeO6i864WEC660=
Subject key identifier:   B0:D8:53:96:C6:33:F2:17:BD:24:85:C7:ED:B4:A5:10:B0:9D:A9:85
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDCFEC50C6F469BE7F3CF80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/841ef99d-ccbd-306d-ae98-be4d10f3d253.roa
Signing time:             Tue 07 Apr 2026 16:29:58 +0000
ROA not before:           Tue 07 Apr 2026 16:29:58 +0000
ROA not after:            Mon 06 Jul 2026 16:29:58 +0000
asID:                     18779
IP address blocks:        172.252.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:fe:c5:0c:6f:46:9b:e7:f3:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:29:58 2026 GMT
            Not After : Jul  6 16:29:58 2026 GMT
        Subject: CN=b21b8fe5-a92e-48f8-8e4f-681e2f825129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:8f:93:20:ee:c6:1b:5c:86:ea:40:b7:0a:
                    47:3d:a5:44:b9:7f:56:52:47:2f:14:7a:99:33:a4:
                    9e:3a:0b:ca:d1:4c:e2:93:4b:d4:a4:de:96:c8:ef:
                    39:5f:d6:6d:a0:d8:11:bc:f9:84:c0:5d:f6:5b:5c:
                    4a:86:93:cb:bd:61:69:cc:91:1d:a3:5c:bc:c6:45:
                    23:26:73:20:97:a7:50:af:c9:84:b9:e7:0c:16:02:
                    68:0e:e7:32:24:33:55:f6:a0:10:27:fe:37:51:25:
                    49:d1:ba:e4:32:83:79:a3:31:5f:7f:29:0c:4a:da:
                    d8:6a:13:3f:b7:d4:e5:6a:1c:2b:47:de:93:3e:c0:
                    db:91:9b:6d:8c:ac:66:a9:be:cd:bc:ed:af:a4:c9:
                    83:98:52:c5:fd:68:cb:ee:a1:ef:ab:66:75:c4:ec:
                    22:86:9c:b5:fe:32:43:6f:eb:9b:b9:76:69:82:a6:
                    e1:bc:ff:b7:ba:30:45:e5:f7:19:88:b0:c0:1f:cd:
                    5b:c5:9a:4e:2c:22:83:b4:e2:58:3b:97:c7:d8:ec:
                    0d:ae:6e:2b:4e:2f:27:d6:9d:54:a7:4d:0e:d2:cd:
                    86:5c:99:61:ed:c2:7b:84:0d:cc:bf:1a:42:c6:7a:
                    88:bd:00:51:6c:c0:f1:26:b1:89:be:72:17:0e:76:
                    3b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D8:53:96:C6:33:F2:17:BD:24:85:C7:ED:B4:A5:10:B0:9D:A9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/841ef99d-ccbd-306d-ae98-be4d10f3d253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:08:a1:0b:2b:95:ca:ac:a1:db:72:57:d7:76:d0:8d:d8:
         f6:ce:38:14:eb:15:47:27:38:c7:f3:14:af:22:49:e0:f3:e8:
         6c:a5:65:4f:26:58:1e:ba:15:85:26:06:e5:31:63:5f:7e:66:
         77:ef:fc:3b:62:80:e2:57:97:26:70:7a:ac:04:90:62:3c:ce:
         86:5f:af:2d:86:e1:5f:a3:f7:43:c4:2d:89:39:fe:5b:75:01:
         28:f7:36:e9:5e:61:da:9d:ad:a9:77:0d:31:f0:e9:be:0e:ec:
         fe:e5:ea:42:e0:86:ed:01:c8:30:d6:c3:a9:d8:1c:d3:3f:21:
         45:02:a2:28:c8:65:c9:ed:09:c8:1d:54:80:f0:e7:75:46:e7:
         5e:a3:db:2b:89:c5:42:53:15:88:5a:1b:9d:dd:30:14:c5:76:
         e3:bb:eb:a7:34:f3:e2:c2:85:fa:d9:b1:5a:ad:da:fd:70:ad:
         1d:32:96:52:71:0f:07:9e:34:7e:35:4b:c3:27:28:1d:30:d9:
         64:c0:89:88:18:a3:cf:8b:dd:b6:9a:63:d3:eb:e8:38:4f:b9:
         3f:af:55:72:cd:88:dc:58:cd:2c:b3:e1:eb:45:85:70:9b:74:
         1f:d4:d1:d2:b6:6d:37:5f:b1:03:5d:fd:32:aa:8a:83:99:07:
         74:b4:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:25 2026 by rpki-client