Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f335df96-830a-3729-85c8-08ee69efb62f.roa
File:                     f335df96-830a-3729-85c8-08ee69efb62f.roa (raw, json)
Hash identifier:          cwpipLcuY0BMYlJ3mEwhk3ygLR2CVwuVBc18Xfxzxb4=
Subject key identifier:   B1:A9:11:29:38:72:17:41:ED:0E:00:CC:33:4B:23:D3:B4:A1:A1:9B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD28B5E4FF13264A919880
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f335df96-830a-3729-85c8-08ee69efb62f.roa
Signing time:             Tue 07 Apr 2026 16:30:18 +0000
ROA not before:           Tue 07 Apr 2026 16:30:18 +0000
ROA not after:            Mon 06 Jul 2026 16:30:18 +0000
asID:                     398781
IP address blocks:        172.252.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:28:b5:e4:ff:13:26:4a:91:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:18 2026 GMT
            Not After : Jul  6 16:30:18 2026 GMT
        Subject: CN=6f4a6a47-1dcc-4975-ad37-932aa9d04c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:89:c4:ad:1a:19:3e:aa:b0:6e:8f:9b:1a:
                    8e:9c:f5:ea:07:96:0b:6f:28:e1:da:b5:6b:fb:ed:
                    b3:ba:df:08:87:e5:1c:27:ac:8f:19:ec:1c:ca:f7:
                    f1:63:64:e2:b8:10:d1:26:11:d0:f5:53:37:ec:c6:
                    9c:fa:a0:64:8e:2f:fd:db:81:65:b8:66:82:57:a1:
                    73:40:8c:78:b4:9b:dc:f4:79:76:78:d4:2d:5c:a9:
                    ad:f7:03:42:0b:23:5e:fe:d1:d4:25:1b:db:c6:74:
                    44:c2:61:91:48:9d:72:ae:c7:df:1d:6a:09:4c:86:
                    fe:ec:6b:74:79:bc:e5:c7:45:d2:04:89:08:b5:d3:
                    c1:b2:96:f7:a2:0f:b6:b4:e1:35:8e:6f:ba:0e:59:
                    5d:0b:2f:c3:44:5f:57:3d:4c:04:cd:eb:14:32:fb:
                    55:7f:cf:1a:b1:1a:04:40:85:60:21:90:b5:43:7a:
                    09:1e:0f:6f:c5:5c:4d:31:d4:50:1d:b0:02:42:f3:
                    d4:a9:d0:96:34:9a:0d:70:49:5c:0f:02:fd:f4:0d:
                    23:8e:3f:25:12:08:50:26:43:2e:fc:ac:5d:e7:f8:
                    c8:f0:f4:57:d0:7a:8b:8f:16:dd:62:bc:a1:48:7c:
                    20:78:b9:60:08:99:1c:62:ff:91:4a:84:6e:b2:35:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A9:11:29:38:72:17:41:ED:0E:00:CC:33:4B:23:D3:B4:A1:A1:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f335df96-830a-3729-85c8-08ee69efb62f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:c7:59:6c:d7:0f:f5:ee:09:33:72:ca:d2:7c:80:34:14:
         69:3f:a2:15:48:13:6b:5d:d6:84:9f:06:c5:31:29:d8:d9:15:
         1c:b5:c3:c9:14:73:26:14:e5:91:c0:96:bd:d2:9c:02:b5:03:
         69:5b:25:ca:f2:46:9c:87:e4:73:8c:46:fb:be:b4:5a:c6:a8:
         64:11:d8:88:3b:36:5d:57:fa:13:ca:b9:c2:d6:68:88:e7:47:
         92:0a:ca:37:6e:01:1f:e4:97:86:84:d6:9f:35:7b:e4:3f:7c:
         0c:ae:61:d7:9c:7d:64:af:71:f5:27:2c:49:cb:05:08:e0:2b:
         d4:f1:ab:10:29:9e:1e:43:6a:7d:13:c0:0b:8e:8f:fa:48:00:
         d5:38:12:ff:9f:4f:9f:ba:ea:00:62:ed:6b:0a:59:e4:5c:3f:
         dd:85:ad:04:88:92:85:a5:2e:60:98:8d:4d:20:50:55:e8:bf:
         76:ef:a4:4b:bc:cb:f0:71:a6:eb:ae:a0:db:9f:50:71:67:aa:
         0d:50:ff:e5:00:e2:86:f1:34:aa:a7:38:55:9c:96:a3:c9:41:
         80:c7:42:7f:ea:1c:c6:03:23:62:29:f4:6e:66:86:e9:2d:81:
         dc:c9:cd:3c:c6:b3:93:7d:fb:e2:c9:c2:1a:b4:bd:19:c5:fc:
         c0:ed:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:52 2026 by rpki-client