Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/87685c54-b552-3387-b573-50848c8739cc.roa
File:                     87685c54-b552-3387-b573-50848c8739cc.roa (raw, json)
Hash identifier:          bOjJD0UUkhA4mjKILdb8rx8TYhW9scwcO5mmeKwj4eY=
Subject key identifier:   65:58:02:DC:CE:44:7F:E4:04:EE:B8:76:58:39:87:0E:0A:DB:F7:8B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DE35E9C43E94D9EE0EE02C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/87685c54-b552-3387-b573-50848c8739cc.roa
Signing time:             Tue 07 Apr 2026 16:42:48 +0000
ROA not before:           Tue 07 Apr 2026 16:42:48 +0000
ROA not after:            Mon 06 Jul 2026 16:42:48 +0000
asID:                     174
IP address blocks:        172.252.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:e3:5e:9c:43:e9:4d:9e:e0:ee:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:42:48 2026 GMT
            Not After : Jul  6 16:42:48 2026 GMT
        Subject: CN=270c7612-fdc1-4ef6-a4ef-0e0085d20960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:df:78:1f:bf:53:90:f6:2b:62:20:cd:0a:
                    15:81:fd:cf:71:5d:b1:dc:9e:89:55:8f:de:48:5f:
                    61:d8:03:91:48:bc:8e:4d:7b:3f:2e:65:16:a3:57:
                    23:00:84:6e:cd:07:fe:8a:8a:7f:71:15:77:ca:3b:
                    cd:41:ab:61:97:62:ec:86:0e:55:cb:cb:eb:dc:7c:
                    59:90:52:0f:cf:55:b3:fb:58:ef:d1:0e:c9:04:66:
                    02:a7:3b:3e:04:18:67:99:0c:82:4c:ca:82:58:97:
                    bc:33:4e:de:8f:78:30:db:09:36:d2:5b:36:20:b0:
                    18:ff:e7:59:d1:66:0d:05:d5:ea:f1:62:9b:6b:f3:
                    52:19:a9:7d:7c:57:dc:86:dd:d9:3a:6c:3c:36:30:
                    ff:20:cd:50:cf:f5:22:79:82:58:fb:ec:b7:e8:88:
                    3f:b5:bb:3b:38:ad:31:8b:6f:c3:e1:a9:a4:99:78:
                    1d:02:52:48:85:32:39:f7:b7:70:17:03:cb:01:7f:
                    87:06:a0:f1:cf:5b:d0:57:02:59:91:49:50:c4:99:
                    4e:a5:ba:00:77:01:bc:2e:45:3a:58:2c:23:9d:43:
                    01:56:46:eb:06:02:7e:a2:94:54:33:02:53:5d:3f:
                    ba:f0:15:f0:c9:bc:71:fd:fb:c7:54:29:cb:49:83:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:58:02:DC:CE:44:7F:E4:04:EE:B8:76:58:39:87:0E:0A:DB:F7:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/87685c54-b552-3387-b573-50848c8739cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:c5:22:a4:04:12:10:29:fb:fc:8a:76:46:31:95:3a:bb:
         e1:a7:ea:d0:c6:d8:33:a2:7d:a4:0c:0a:6f:d7:dd:31:2c:58:
         f6:33:96:6f:39:86:56:12:1d:00:18:f0:44:47:ca:16:d0:7a:
         ed:87:bc:25:de:0b:2e:ff:2c:37:27:54:78:f5:30:18:28:3a:
         dd:e3:49:69:bc:17:01:bf:34:83:a1:55:b1:76:72:10:f1:51:
         62:96:a3:7d:83:3f:f1:a5:e9:5c:27:e1:1d:1a:e2:89:a9:40:
         39:9f:53:65:c8:a8:c9:60:ed:70:bb:65:b0:db:c9:f8:30:b7:
         fa:9c:c6:a3:07:d7:18:82:d0:32:f3:0d:17:05:33:31:4a:59:
         e4:8d:14:22:3c:3a:c6:85:f9:0e:88:71:88:4b:b8:84:63:49:
         26:d9:3c:94:9d:10:af:e5:f9:17:29:00:be:64:74:d8:5b:25:
         45:7d:1a:11:87:f2:68:b0:c6:1c:19:35:96:34:97:87:6b:30:
         a4:72:d5:3f:68:0a:f2:d4:73:3e:b6:d3:c0:a7:02:e3:87:5e:
         79:f9:dc:da:3b:9e:88:1c:79:fb:1f:e9:44:ca:a1:1a:99:3d:
         e1:a4:86:95:ed:67:59:b4:0d:0a:41:d8:d8:7a:d7:60:44:2a:
         5b:23:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:44:10 2026 by rpki-client