Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f0ba83a0-535c-39d5-b40e-1e2d08630fd7.roa
File:                     f0ba83a0-535c-39d5-b40e-1e2d08630fd7.roa (raw, json)
Hash identifier:          ETUL2kfQvKz4J6/be7cZIcGv7dRbN0oKX2uPxsVFiAc=
Subject key identifier:   80:E6:F6:42:8D:F2:B2:B0:69:89:6A:27:84:21:8E:4E:E4:49:D7:B0
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD28F5E41BD81C0B5BD080
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f0ba83a0-535c-39d5-b40e-1e2d08630fd7.roa
Signing time:             Tue 07 Apr 2026 16:30:18 +0000
ROA not before:           Tue 07 Apr 2026 16:30:18 +0000
ROA not after:            Mon 06 Jul 2026 16:30:18 +0000
asID:                     398781
IP address blocks:        172.252.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:28:f5:e4:1b:d8:1c:0b:5b:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:18 2026 GMT
            Not After : Jul  6 16:30:18 2026 GMT
        Subject: CN=cb5035b7-ee01-44bd-836c-e83c26f43a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:19:23:8f:7f:b0:26:07:22:a7:cf:bb:7d:d8:
                    71:d4:8f:7e:4e:66:6c:18:b4:fa:3c:5f:96:44:3d:
                    6d:c4:fc:ff:4b:df:47:a4:f1:aa:2a:44:83:e6:03:
                    17:27:6f:15:d9:48:e8:dd:01:ad:1f:11:30:68:c3:
                    f0:f7:de:fe:ed:73:e3:96:83:ac:d4:3f:c6:07:2f:
                    72:1e:56:8a:4a:37:70:35:d9:6a:33:74:03:af:f0:
                    fb:b7:af:12:78:47:c4:ae:f3:d7:af:33:d1:7b:0b:
                    fc:b0:e3:ac:09:0e:0e:43:7c:91:f0:b4:c2:88:9c:
                    d0:4a:8b:73:9c:1c:8e:2b:ed:82:b0:9a:40:67:10:
                    24:d2:ad:39:4c:b1:f9:ee:b7:26:c7:40:e4:b4:45:
                    56:dc:6b:4d:69:19:c0:21:2a:62:99:18:f5:24:c6:
                    8c:a3:97:4b:03:99:d3:ff:6a:11:3a:71:6d:1a:72:
                    39:62:c0:a3:47:2a:8e:81:1f:82:45:46:93:bb:0e:
                    fd:11:5a:63:59:40:72:8d:ab:b6:47:a6:75:df:32:
                    36:72:ee:34:ab:6d:7f:c1:fd:05:62:11:2d:e2:cf:
                    df:f6:a9:fe:c3:60:9e:76:7b:bc:e0:d7:eb:76:3d:
                    5f:73:59:09:0f:42:c7:45:9f:fc:9c:5f:c1:38:7d:
                    30:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E6:F6:42:8D:F2:B2:B0:69:89:6A:27:84:21:8E:4E:E4:49:D7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f0ba83a0-535c-39d5-b40e-1e2d08630fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:04:1d:61:72:d8:98:10:31:37:6d:1a:a0:b3:75:16:74:45:
         78:b7:12:1d:e1:fb:ce:fd:05:24:50:28:8a:0d:be:b5:39:84:
         aa:10:20:3e:1e:33:03:bf:24:3d:3e:e9:34:55:92:fd:a2:20:
         7b:b0:5d:56:53:f5:37:b8:7d:06:5f:78:56:d5:4a:6c:a8:79:
         88:78:d3:33:db:d7:4d:c8:28:09:73:6a:1a:21:7b:7e:d9:d8:
         be:19:af:d3:ec:68:40:3d:08:09:ea:c8:e3:18:01:9e:ea:76:
         32:84:d0:22:ee:af:16:5b:03:68:f2:09:bb:54:7a:00:4d:b0:
         72:98:e5:d4:5d:06:6b:e6:58:b4:18:71:9d:3b:81:b1:2e:b9:
         db:04:03:a9:c9:54:73:88:35:50:41:d2:63:14:84:2b:33:f6:
         8b:48:eb:71:f8:47:6a:42:62:8e:63:fb:29:80:7a:32:85:3d:
         0b:29:d0:1c:28:3c:6e:de:1e:e3:04:59:5c:66:fd:83:2e:de:
         dd:4b:6f:d4:35:16:34:91:a0:f7:0e:19:6e:3b:84:cc:d0:51:
         da:d0:a1:a0:7d:2c:af:c4:fa:05:08:71:d3:5b:ac:bb:00:2a:
         c7:0a:b9:20:86:b0:02:b7:8f:1c:f2:ff:ad:72:02:41:54:a7:
         98:c7:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:20 2026 by rpki-client