Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cc89f410-b2dc-3e4e-96ac-2799f2d3338f.roa
File:                     cc89f410-b2dc-3e4e-96ac-2799f2d3338f.roa (raw, json)
Hash identifier:          Y9sN7mzs4kRcOGKke1BDlc033HBWchZf7JTlGQdJ+SU=
Subject key identifier:   90:8C:58:2B:7C:43:F7:7B:98:85:4B:9E:2E:5C:DD:3D:23:3B:91:78
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD28E8DA396532CFA6C8C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cc89f410-b2dc-3e4e-96ac-2799f2d3338f.roa
Signing time:             Tue 07 Apr 2026 16:30:18 +0000
ROA not before:           Tue 07 Apr 2026 16:30:18 +0000
ROA not after:            Mon 06 Jul 2026 16:30:18 +0000
asID:                     398781
IP address blocks:        172.252.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:28:e8:da:39:65:32:cf:a6:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:18 2026 GMT
            Not After : Jul  6 16:30:18 2026 GMT
        Subject: CN=b97af305-24c5-4220-ab63-43522385942b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:bb:32:2e:64:ac:6e:26:64:e3:08:1f:72:
                    30:ae:e1:25:6c:28:e3:96:0c:be:14:64:89:19:03:
                    cc:4e:10:ca:cb:bd:e9:18:3c:9f:73:ec:3d:38:e2:
                    d7:68:03:dd:d7:1e:81:b3:d2:7d:20:48:cf:82:e7:
                    c1:12:f4:85:10:49:95:00:91:70:57:2f:ca:83:7d:
                    2c:13:6c:58:af:27:66:f9:2b:c3:13:e7:9d:8c:c8:
                    c8:d8:52:3d:45:dc:32:5d:cc:e6:5f:25:89:b3:69:
                    b7:e7:2e:36:92:29:02:db:22:97:2e:70:e4:4e:fe:
                    e7:fa:c2:a8:89:47:ba:55:63:aa:7c:4b:69:77:92:
                    f6:a7:e8:09:01:e0:f1:71:31:11:5a:37:af:8c:27:
                    25:ea:53:7e:58:39:c5:ef:2e:5b:7e:fc:af:dd:b4:
                    4e:52:d8:c8:40:fc:73:51:84:d5:09:63:66:61:ab:
                    fe:78:2f:1f:5a:ba:ed:80:89:2a:b3:42:25:d9:25:
                    1a:c0:79:24:e3:47:9d:be:b9:81:b5:44:43:97:b3:
                    4c:c6:14:04:fc:f3:de:e9:42:57:59:77:1a:a5:eb:
                    3f:2e:a5:aa:b1:44:78:d3:ab:fb:4f:ea:d2:d5:7a:
                    da:c0:69:80:63:f3:33:0a:81:c0:46:2c:5b:ca:bf:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8C:58:2B:7C:43:F7:7B:98:85:4B:9E:2E:5C:DD:3D:23:3B:91:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cc89f410-b2dc-3e4e-96ac-2799f2d3338f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0d:d9:96:e1:83:90:b1:b4:11:ad:0d:df:b4:6f:8d:64:58:
         f8:86:cb:db:73:0e:10:28:bb:5e:03:53:45:e7:a6:fa:24:e8:
         bc:3a:84:a2:6c:b5:54:6c:69:85:82:3a:5d:24:b1:28:18:00:
         30:6c:a2:ba:55:66:08:7a:42:f6:57:2b:29:d9:bd:b6:07:53:
         3c:42:8d:c1:73:1f:57:0e:82:cd:99:25:64:3c:2d:53:2c:f9:
         2d:74:11:86:17:6b:de:a3:a3:66:34:4a:fa:47:9a:3d:be:cc:
         9b:49:0f:2b:32:51:95:7f:a6:2d:1a:72:37:60:40:7c:c7:9a:
         d3:f9:de:48:15:22:89:1c:bd:12:63:46:5c:06:43:52:6d:bc:
         fa:f0:c6:90:0a:38:4a:8d:c0:bf:77:19:fb:8d:5c:0c:0d:2f:
         ec:53:42:3a:40:a0:9f:41:b3:f2:29:c1:c1:fb:2b:8c:7c:a5:
         0a:7e:8d:cd:2c:d8:3a:a7:c4:66:e1:ad:94:91:9a:36:b1:c3:
         82:70:69:fd:b9:64:61:d2:e8:b6:db:66:a2:60:14:79:7c:6a:
         56:a8:c6:0d:a1:c8:69:c9:b0:e5:6f:4a:f4:6d:2c:1f:bb:9e:
         6c:93:5e:7b:ec:4b:be:17:e1:93:d0:3f:1f:73:8c:f9:ba:57:
         1f:4c:1a:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3Sjo2jllMs+myMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MzAxOFoXDTI2MDcwNjE2MzAxOFowLzEtMCsGA1UEAxMk
Yjk3YWYzMDUtMjRjNS00MjIwLWFiNjMtNDM1MjIzODU5NDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjC7Mi5krG4mZOMIH3IwruElbCjjlgy+FGSJ
GQPMThDKy73pGDyfc+w9OOLXaAPd1x6Bs9J9IEjPgufBEvSFEEmVAJFwVy/Kg30s
E2xYrydm+SvDE+edjMjI2FI9RdwyXczmXyWJs2m35y42kikC2yKXLnDkTv7n+sKo
iUe6VWOqfEtpd5L2p+gJAeDxcTERWjevjCcl6lN+WDnF7y5bfvyv3bROUtjIQPxz
UYTVCWNmYav+eC8fWrrtgIkqs0Il2SUawHkk40edvrmBtURDl7NMxhQE/PPe6UJX
WXcapes/LqWqsUR406v7T+rS1XrawGmAY/MzCoHARixbyr/U4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCMWCt8Q/d7mIVLni5c3T0jO5F4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvY2M4OWY0MTAtYjJkYy0z
ZTRlLTk2YWMtMjc5OWYyZDMzMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcN2Zbhg5CxtBGtDd+0b41kWPiGy9tzDhAou14DU0Xnpvok6Lw6hKJs
tVRsaYWCOl0ksSgYADBsorpVZgh6QvZXKynZvbYHUzxCjcFzH1cOgs2ZJWQ8LVMs
+S10EYYXa96jo2Y0SvpHmj2+zJtJDysyUZV/pi0acjdgQHzHmtP53kgVIokcvRJj
RlwGQ1JtvPrwxpAKOEqNwL93GfuNXAwNL+xTQjpAoJ9Bs/IpwcH7K4x8pQp+jc0s
2DqnxGbhrZSRmjaxw4Jwaf25ZGHS6LbbZqJgFHl8alaoxg2hyGnJsOVvSvRtLB+7
nmyTXnvsS74X4ZPQPx9zjPm6Vx9MGmo=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:21 2026 by rpki-client