Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf432dab-122e-3522-abf9-9fc6d25b3da0.roa
File:                     bf432dab-122e-3522-abf9-9fc6d25b3da0.roa (raw, json)
Hash identifier:          I0qX6bpHvZoz1unLLG8azeaK9OeriF9dc/JpAP8snJY=
Subject key identifier:   39:38:F0:3A:0E:E6:51:CE:C3:67:3D:44:8B:AE:5B:6A:32:74:01:BD
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD50FB0CA91663D8866B00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf432dab-122e-3522-abf9-9fc6d25b3da0.roa
Signing time:             Tue 07 Apr 2026 16:30:37 +0000
ROA not before:           Tue 07 Apr 2026 16:30:37 +0000
ROA not after:            Mon 06 Jul 2026 16:30:37 +0000
asID:                     398781
IP address blocks:        172.252.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:50:fb:0c:a9:16:63:d8:86:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:37 2026 GMT
            Not After : Jul  6 16:30:37 2026 GMT
        Subject: CN=eab0c502-85ec-4b17-a306-2b1f2989086d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:89:ca:a5:bb:65:af:4a:c0:4d:e8:61:bc:3e:
                    fa:14:58:74:5c:e7:de:76:2f:94:8f:c3:02:76:40:
                    70:c4:fb:9e:f7:a9:db:88:db:db:a1:f9:c0:1a:9a:
                    ec:6b:41:20:36:a8:19:8e:2f:3f:75:96:ed:c7:90:
                    5b:e3:26:f9:6b:32:86:86:73:d4:68:02:1b:84:b5:
                    9d:0e:06:f7:59:ee:89:e4:d9:8b:40:51:cb:11:60:
                    6b:11:cb:49:47:2b:82:29:d3:2f:b9:21:02:14:a9:
                    e3:f9:4c:56:23:c5:16:ca:b5:d6:b2:cc:64:56:de:
                    5e:c5:7c:26:22:e5:3a:ef:3f:64:3b:9c:65:f2:bf:
                    e0:b6:4f:af:59:66:0a:04:ea:34:a7:3d:c7:65:28:
                    ae:71:94:4a:ca:22:25:48:cb:8c:d5:9f:91:03:7f:
                    79:b1:ce:67:8a:be:64:b9:e5:84:0c:1e:7b:c8:74:
                    65:18:c3:7d:77:d1:d5:74:8e:38:f0:94:2b:73:dc:
                    bd:d3:6a:40:ea:f4:03:cd:00:7e:da:7b:03:34:9a:
                    b6:19:f8:c5:a7:1f:7c:5e:eb:f8:7d:bf:49:ee:7d:
                    76:d7:a2:fc:00:b5:af:8a:9a:bf:22:e0:76:9f:87:
                    62:e3:11:d5:d2:6a:95:c8:3b:10:cc:b0:3f:47:02:
                    0c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:38:F0:3A:0E:E6:51:CE:C3:67:3D:44:8B:AE:5B:6A:32:74:01:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf432dab-122e-3522-abf9-9fc6d25b3da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:e4:f5:3f:a7:50:8b:7e:ff:97:76:7a:10:b0:28:bb:f2:
         a0:6c:03:a8:d1:8a:3c:1d:a8:e3:29:de:83:53:5e:0b:7f:57:
         b6:1b:a7:bc:8c:5a:c4:38:b7:62:8f:f6:2e:d0:24:7c:53:3a:
         98:b3:8b:dd:b3:75:0a:5a:7a:6f:7e:a7:ca:77:e3:1a:44:9f:
         9e:b3:b0:4d:a0:42:f2:3a:6e:81:8e:a4:0a:0c:84:ba:61:e7:
         93:74:33:0c:2f:37:55:83:ca:49:7f:f2:3d:4d:62:34:66:63:
         ab:5d:35:ea:b5:60:a2:ee:ca:bf:29:65:ee:05:7d:1f:e9:ec:
         c9:80:da:4a:68:0d:7b:92:32:24:44:31:6c:5e:3e:d0:70:18:
         c7:2b:29:a0:e0:c2:05:58:27:2f:b6:6f:19:0f:6e:98:83:6a:
         fc:66:1c:5f:56:eb:db:1e:a7:bf:db:17:2f:b7:69:17:f6:c5:
         7e:b0:f9:da:cd:f8:b0:56:a5:0c:bc:a6:46:24:c9:0b:b1:b2:
         16:04:16:12:dd:1f:1c:49:fa:6e:1d:51:b4:bc:14:5b:82:38:
         ab:af:12:62:81:d6:82:82:c6:b4:bc:a8:f6:75:6b:3b:fd:d0:
         cd:5d:11:e2:ed:3c:d2:d7:42:89:85:67:b2:87:33:d8:3f:d7:
         e1:34:f0:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3VD7DKkWY9iGawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MzAzN1oXDTI2MDcwNjE2MzAzN1owLzEtMCsGA1UEAxMk
ZWFiMGM1MDItODVlYy00YjE3LWEzMDYtMmIxZjI5ODkwODZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4InKpbtlr0rATehhvD76FFh0XOfedi+Uj8MC
dkBwxPue96nbiNvbofnAGprsa0EgNqgZji8/dZbtx5Bb4yb5azKGhnPUaAIbhLWd
Dgb3We6J5NmLQFHLEWBrEctJRyuCKdMvuSECFKnj+UxWI8UWyrXWssxkVt5exXwm
IuU67z9kO5xl8r/gtk+vWWYKBOo0pz3HZSiucZRKyiIlSMuM1Z+RA395sc5nir5k
ueWEDB57yHRlGMN9d9HVdI448JQrc9y902pA6vQDzQB+2nsDNJq2GfjFpx98Xuv4
fb9J7n1216L8ALWvipq/IuB2n4di4xHV0mqVyDsQzLA/RwIMmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDk48DoO5lHOw2c9RIuuW2oydAG9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYmY0MzJkYWItMTIyZS0z
NTIyLWFiZjktOWZjNmQyNWIzZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPz2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGa5PU/p1CLfv+XdnoQsCi78qBsA6jRijwdqOMp3oNTXgt/V7Ybp7yM
WsQ4t2KP9i7QJHxTOpizi92zdQpaem9+p8p34xpEn56zsE2gQvI6boGOpAoMhLph
55N0MwwvN1WDykl/8j1NYjRmY6tdNeq1YKLuyr8pZe4FfR/p7MmA2kpoDXuSMiRE
MWxePtBwGMcrKaDgwgVYJy+2bxkPbpiDavxmHF9W69sep7/bFy+3aRf2xX6w+drN
+LBWpQy8pkYkyQuxshYEFhLdHxxJ+m4dUbS8FFuCOKuvEmKB1oKCxrS8qPZ1azv9
0M1dEeLtPNLXQomFZ7KHM9g/1+E08Jc=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:07 2026 by rpki-client