Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8fc5d2b9-34b2-3f0d-9bca-2310484d0181.roa
File:                     8fc5d2b9-34b2-3f0d-9bca-2310484d0181.roa (raw, json)
Hash identifier:          GkPUjaBp8RFestVPZKBFMVmcQNcVWMjI8iDeWua58+Y=
Subject key identifier:   AC:28:92:5D:A8:43:C2:57:03:C7:64:A6:38:8F:01:F1:88:70:16:45
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD5108078B05A5D3FB3E40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8fc5d2b9-34b2-3f0d-9bca-2310484d0181.roa
Signing time:             Tue 07 Apr 2026 16:30:37 +0000
ROA not before:           Tue 07 Apr 2026 16:30:37 +0000
ROA not after:            Mon 06 Jul 2026 16:30:37 +0000
asID:                     398781
IP address blocks:        172.252.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:51:08:07:8b:05:a5:d3:fb:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:37 2026 GMT
            Not After : Jul  6 16:30:37 2026 GMT
        Subject: CN=593aeef7-253b-4e6a-bfca-bc13edf956ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:7a:c8:91:c4:e5:af:15:40:3f:64:0d:3a:
                    7b:92:1a:2a:81:2f:e5:88:93:fe:80:d0:78:f8:2c:
                    85:47:31:15:e4:69:a6:a2:b2:ac:88:ca:a8:03:61:
                    21:18:7e:5c:91:8c:20:93:b2:9d:af:18:4b:6a:ce:
                    5d:68:01:83:f9:f2:c7:d0:84:85:4a:e4:26:4f:87:
                    44:de:1b:ff:0e:48:5b:0f:44:5b:8e:79:9d:3a:9f:
                    da:9b:36:be:8f:d4:8a:1a:80:17:08:fc:50:fa:81:
                    31:f0:1c:75:61:24:58:ec:45:6a:ee:4e:12:76:db:
                    42:2c:72:71:49:c3:34:39:a0:f8:34:ae:7e:b7:eb:
                    6f:6a:98:df:24:90:c5:72:db:fb:2d:76:b1:65:49:
                    2e:7f:74:d8:34:f3:be:37:27:49:45:c0:e4:6d:1a:
                    3f:01:47:7d:92:de:bb:8a:e5:86:bb:73:96:56:fc:
                    46:b8:20:bd:ef:d8:11:ef:81:43:2b:32:94:d2:cf:
                    83:7e:51:c2:39:d9:77:a6:66:98:e7:25:e4:0b:43:
                    e5:ce:39:c7:21:4c:48:6b:ed:72:6a:7c:95:4d:ac:
                    87:0b:80:43:a7:ad:fa:52:d1:67:5b:96:9d:b3:9e:
                    e0:ab:3e:a8:ea:47:57:4e:ae:55:7a:9b:d6:ac:70:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:28:92:5D:A8:43:C2:57:03:C7:64:A6:38:8F:01:F1:88:70:16:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8fc5d2b9-34b2-3f0d-9bca-2310484d0181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:95:98:68:50:67:cc:f7:54:b4:5f:b9:70:3d:19:e4:aa:
         b1:9a:38:e9:8c:af:be:a8:53:ed:62:a3:4a:94:5e:b0:a8:5b:
         a8:72:8f:c6:9f:d8:9f:c8:d3:6a:89:f5:e5:e0:3d:a5:b4:3a:
         04:4d:aa:9f:f1:23:5d:16:b5:15:3b:31:a3:1c:c8:49:c1:7c:
         33:6c:f5:a5:a2:1f:f8:52:2e:af:bf:c8:ae:89:c3:6d:fb:43:
         2c:a3:71:1d:6f:8e:75:b6:ca:68:35:1e:54:bf:d1:0f:be:d5:
         1c:83:1f:4d:56:b6:bf:87:5a:e5:6b:41:07:26:26:27:12:53:
         ea:f3:f8:0b:b8:1c:26:3c:34:6c:e3:1c:47:68:b3:f7:fa:c7:
         44:dc:06:d5:bd:1c:14:94:9b:f6:85:de:7e:ee:24:52:70:5f:
         a3:71:bd:80:3d:ec:35:98:2f:31:95:ef:8d:a8:55:7c:51:3c:
         1d:35:39:99:d7:6a:71:2e:90:ec:ac:c5:ba:fa:f3:0f:5d:07:
         ea:3e:5d:2a:2e:6b:23:81:9b:5a:06:77:cc:85:5a:fb:8e:5e:
         ec:44:78:44:63:ad:6b:4f:c3:86:9d:ca:9e:47:39:61:5d:89:
         de:1b:fd:c4:18:29:9f:fe:7f:ba:b4:eb:1b:dc:f1:fd:fe:76:
         e1:b0:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:35 2026 by rpki-client