Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/858bb7f8-b1a3-3fe4-be55-93c66287bd12.roa
File:                     858bb7f8-b1a3-3fe4-be55-93c66287bd12.roa (raw, json)
Hash identifier:          aHJLe/xa6nxmSHAJySMB9KnP2czSTS6aItA4jGp+elU=
Subject key identifier:   61:F7:8F:16:D2:3A:52:69:EE:A0:95:5B:D8:DD:D7:B3:43:76:F8:0E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD509E4FF84411F3BBB350
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/858bb7f8-b1a3-3fe4-be55-93c66287bd12.roa
Signing time:             Tue 07 Apr 2026 16:30:36 +0000
ROA not before:           Tue 07 Apr 2026 16:30:36 +0000
ROA not after:            Mon 06 Jul 2026 16:30:36 +0000
asID:                     398781
IP address blocks:        172.252.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:50:9e:4f:f8:44:11:f3:bb:b3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:36 2026 GMT
            Not After : Jul  6 16:30:36 2026 GMT
        Subject: CN=ee832059-320f-4ede-9b80-5b751d971cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:53:cf:0b:5b:cc:b0:6b:ce:87:13:f0:db:
                    79:75:ec:0b:60:18:eb:6a:8c:ed:6d:38:04:82:d2:
                    3f:d3:90:b8:64:a8:45:31:fb:62:5a:31:bd:be:72:
                    e1:b6:0d:37:7e:11:69:d6:92:54:b8:d6:84:18:78:
                    bc:42:ee:23:be:b5:27:93:1b:05:ca:63:37:73:31:
                    42:47:44:44:90:51:ac:9c:b3:fb:c6:1b:20:91:a0:
                    1f:a2:6d:07:18:b4:02:68:b9:11:d5:a4:62:e2:d1:
                    b2:77:62:e9:94:0c:9d:38:a1:54:7f:64:f8:53:7c:
                    ac:d6:62:2b:27:c9:de:c7:2d:59:4f:d0:b6:ed:a4:
                    6c:8b:93:85:98:1c:f9:a0:cf:bf:43:fb:3f:6d:aa:
                    0e:d6:d9:87:cb:06:f2:f7:70:52:d7:a2:c9:18:55:
                    ef:e9:87:59:6f:e9:ff:82:aa:8c:a7:20:44:46:81:
                    df:6f:19:a9:c1:6b:21:2b:d2:eb:11:81:70:3f:7f:
                    8b:fe:7a:2a:94:23:80:98:d1:6a:d5:16:bd:8c:f4:
                    7c:2a:7b:f8:b1:a7:6c:d6:a6:5a:77:b2:e5:d1:6c:
                    49:f7:db:c4:de:4a:a1:86:4d:52:ca:62:7a:e3:15:
                    0c:54:a1:60:1f:58:01:16:b1:7c:b5:03:fc:dc:95:
                    05:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F7:8F:16:D2:3A:52:69:EE:A0:95:5B:D8:DD:D7:B3:43:76:F8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/858bb7f8-b1a3-3fe4-be55-93c66287bd12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:db:96:cc:76:b7:94:82:45:1f:38:29:03:91:ef:81:9d:4e:
         42:34:d4:f3:0c:df:4e:19:76:69:8d:f6:01:9f:00:d6:c5:be:
         82:df:b0:87:da:4c:5e:f1:76:16:a2:84:96:13:00:81:7f:66:
         f2:10:6f:fa:50:72:a0:6e:71:4a:da:ec:b3:36:c7:d3:ef:57:
         7c:84:5f:8d:bb:44:ba:c2:4e:d4:dd:bd:7a:28:ad:9c:37:b6:
         9d:4f:22:19:42:d9:d5:9b:a5:c8:16:ca:b3:09:8c:73:46:db:
         33:11:c0:e8:40:ba:b3:8b:4a:d4:c1:4e:8a:38:7a:a0:a4:1d:
         ce:67:57:72:1a:dc:db:24:0d:47:b7:77:1e:85:e3:36:0c:7d:
         c3:91:f7:54:8c:1d:7e:c9:60:db:0a:ba:34:c1:88:91:d9:bd:
         53:ee:19:88:a1:2d:a3:ae:c5:f2:4c:f5:71:ae:1e:0e:a0:cd:
         9c:36:0c:fa:01:a1:46:7f:95:0c:cf:8a:d8:ba:45:22:82:99:
         04:bc:a0:e8:49:d0:1b:be:77:e5:7e:a8:ef:91:59:ad:a4:33:
         14:06:26:bb:a9:05:57:e5:d5:18:94:16:f6:ed:30:8d:1f:11:
         b1:30:7d:4a:8e:fa:51:b4:45:53:9d:b7:b9:f6:19:f0:3e:f2:
         83:5a:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:15 2026 by rpki-client