Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dbac7699-0df1-31de-9c00-c0bca4d70fe5.roa
File:                     dbac7699-0df1-31de-9c00-c0bca4d70fe5.roa (raw, json)
Hash identifier:          wtiVMUnws0UlnQR3985QD9gzO9gFnflLOFolbEOHBg8=
Subject key identifier:   1A:9F:25:8C:57:CC:91:A3:87:D9:DF:F7:85:D0:49:F2:BD:00:E4:3C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD28322568F36E862EDD90
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dbac7699-0df1-31de-9c00-c0bca4d70fe5.roa
Signing time:             Tue 07 Apr 2026 16:30:17 +0000
ROA not before:           Tue 07 Apr 2026 16:30:17 +0000
ROA not after:            Mon 06 Jul 2026 16:30:17 +0000
asID:                     398781
IP address blocks:        172.252.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:28:32:25:68:f3:6e:86:2e:dd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:17 2026 GMT
            Not After : Jul  6 16:30:17 2026 GMT
        Subject: CN=1ec16a6d-411c-4b34-bb4c-4c01033eb1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:88:4b:32:96:fc:79:86:b5:85:87:01:84:
                    21:8f:12:34:2a:a1:77:a9:4e:44:8b:c7:b2:4c:5e:
                    d0:41:4b:2a:1b:45:15:33:e1:53:f5:00:89:95:eb:
                    cc:05:41:44:d0:2e:2c:33:bc:7e:58:82:73:ed:6c:
                    d1:55:a0:42:c4:02:9f:52:c4:64:3d:f0:47:cf:b0:
                    b9:e8:81:c0:31:47:a3:20:f1:a5:29:10:04:ce:98:
                    41:d6:40:db:19:83:33:33:52:e3:4e:7a:e2:ff:68:
                    7d:a4:d6:51:9d:29:e8:21:f4:25:fe:54:81:4b:bc:
                    32:0a:61:d7:68:06:1e:bd:13:3c:11:88:20:e1:7a:
                    41:07:4b:7f:d0:3d:23:91:3e:ee:6d:69:53:7e:50:
                    d6:05:01:a9:4e:8e:52:4e:0c:52:11:f5:00:bb:de:
                    f1:3f:96:38:cb:46:0f:07:cd:ce:63:9c:c1:83:d5:
                    f3:bf:85:41:5b:a8:02:00:6e:1b:54:77:b4:e4:33:
                    a7:fb:59:d9:9e:3c:e0:44:fc:a4:ea:0c:84:d8:e1:
                    bf:2d:c5:17:8d:fa:30:23:ea:52:3f:5f:e4:12:86:
                    1c:bf:0c:45:27:4f:87:f9:30:9f:1d:f2:e6:c9:e3:
                    7b:d9:92:7d:73:28:c8:46:ef:de:e6:26:0c:53:ba:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9F:25:8C:57:CC:91:A3:87:D9:DF:F7:85:D0:49:F2:BD:00:E4:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dbac7699-0df1-31de-9c00-c0bca4d70fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:a2:1b:0f:b7:3f:b1:4a:97:b9:f8:93:8b:2a:8d:b0:5d:
         ef:c5:2d:51:c9:e4:59:4a:cc:ab:e4:d8:ef:a0:c5:ca:55:2e:
         8e:b4:c4:1b:2e:11:48:80:c8:5b:f9:ac:d6:5f:f7:7f:4c:41:
         f0:ac:ce:f0:fd:dc:64:4d:93:af:57:d0:a6:38:34:58:6f:c2:
         71:0c:f2:8e:d1:f7:76:00:51:53:2e:83:89:62:27:e8:19:a9:
         b8:43:49:fa:55:16:ae:4a:81:f4:b4:06:e1:09:fb:03:5c:f0:
         3c:cd:2b:80:88:fd:57:59:fe:6a:c0:45:b3:cc:cd:6c:27:44:
         9f:61:05:34:ba:05:37:11:05:b9:20:46:2f:ce:36:c3:31:3f:
         4c:47:38:db:13:9c:87:e8:df:f9:0c:0d:18:0b:00:27:1b:d5:
         ab:4d:95:f5:b2:91:b5:17:06:a1:37:9f:9a:d4:52:db:ff:28:
         bf:17:34:48:86:06:2c:23:ea:1f:c1:ff:15:10:5b:fd:ae:6a:
         f5:63:95:74:69:ef:ef:7e:99:80:ec:e6:46:fc:ee:a2:52:12:
         2d:87:bc:9d:bc:18:23:52:21:9f:d2:60:1e:51:63:dd:a7:7d:
         b2:ad:5c:0e:6a:9a:a8:83:a9:54:61:1a:c6:b1:ca:f2:74:75:
         99:75:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:32 2026 by rpki-client