Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f5c67196-b58b-340a-b7c5-7775a7367dba.roa
File:                     f5c67196-b58b-340a-b7c5-7775a7367dba.roa (raw, json)
Hash identifier:          +atyy4v10gJwPoAkyYOdPwCstl772iCKq1hm6CwjRSU=
Subject key identifier:   6A:1D:C6:1A:9E:9E:38:E6:CC:93:04:43:6A:B1:DF:6D:81:3B:2C:5D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DF36EE81A43639C7F6BACC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f5c67196-b58b-340a-b7c5-7775a7367dba.roa
Signing time:             Tue 07 Apr 2026 17:15:10 +0000
ROA not before:           Tue 07 Apr 2026 17:15:10 +0000
ROA not after:            Mon 06 Jul 2026 17:15:10 +0000
asID:                     834
IP address blocks:        172.252.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:f3:6e:e8:1a:43:63:9c:7f:6b:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 17:15:10 2026 GMT
            Not After : Jul  6 17:15:10 2026 GMT
        Subject: CN=3287a320-6586-45e1-8b40-36c4bf3a840e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:74:97:f2:31:49:aa:3e:43:7e:81:11:bc:54:
                    b6:ef:c6:f2:39:73:80:2d:a2:b9:66:82:ea:ff:52:
                    69:ff:e5:39:84:d3:44:a0:b4:d0:1b:3c:59:ef:55:
                    85:1e:17:d9:77:c1:ff:29:48:64:e7:8d:b9:09:9a:
                    37:68:5f:30:33:42:c7:e2:b3:e5:5d:b0:f1:07:9a:
                    f2:0d:c7:4d:09:a3:fa:67:d7:f8:65:34:02:b0:33:
                    dc:1e:32:fd:74:28:b5:e8:d6:a4:df:22:05:cf:ef:
                    36:e5:5a:32:9c:da:81:bb:3e:23:42:28:79:40:05:
                    6d:3f:61:a7:8f:13:fb:ae:c3:aa:08:c0:0e:4d:4f:
                    55:b1:60:5c:b9:57:e7:2e:a4:2d:8a:ed:1c:1a:e9:
                    c3:c5:60:3e:d9:18:23:02:ed:53:37:6e:e6:97:57:
                    3c:02:a9:bb:cf:c7:b0:90:70:48:df:b3:77:67:f8:
                    53:c9:5d:a1:c2:8d:22:66:fa:93:a5:b5:d5:cc:26:
                    ff:12:f8:6f:21:2a:b6:ce:fd:fe:a6:2c:ac:37:4a:
                    d3:9f:0b:75:ac:fd:6b:97:ac:58:6d:35:20:0a:02:
                    e8:65:23:90:72:68:1f:16:0c:bb:8f:e4:2e:e8:10:
                    49:f6:59:2d:f3:33:0b:38:ed:31:0a:b5:51:00:1a:
                    35:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1D:C6:1A:9E:9E:38:E6:CC:93:04:43:6A:B1:DF:6D:81:3B:2C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f5c67196-b58b-340a-b7c5-7775a7367dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e3:6f:1f:1b:aa:87:1e:f8:8c:d3:29:d6:16:ab:24:af:a6:
         bd:d2:a4:e0:c5:ab:a7:ee:2a:96:0d:42:72:40:4b:54:a9:75:
         68:0f:36:92:c5:cd:0f:29:80:d6:30:9b:b7:90:7c:a2:5e:a7:
         7c:45:34:29:59:97:61:e1:65:6e:3a:be:92:e4:69:74:37:9b:
         2c:3c:cf:71:e7:9c:24:da:d6:4c:08:da:bd:c6:6f:91:18:24:
         b8:89:03:c2:49:51:ac:6d:6d:42:f9:ad:b9:3c:f1:19:09:39:
         d2:67:20:c9:bd:c3:13:88:4c:38:32:52:d4:5d:a0:87:df:9f:
         9e:f1:2c:89:c7:f0:57:31:af:73:18:01:ff:53:c8:89:55:d8:
         06:f1:54:c6:74:0d:18:aa:c7:b4:1f:ca:fa:e8:cc:da:ef:db:
         29:65:8e:fe:e2:b6:46:d3:07:6f:68:94:65:6b:92:d9:5b:2b:
         00:75:88:14:66:f0:94:03:90:66:52:0a:54:90:57:4d:72:b3:
         55:6b:96:75:f5:a3:fe:64:8a:2d:72:fd:d0:f6:72:cb:9a:0f:
         cb:30:dc:ff:2b:77:ba:37:f2:27:02:b0:27:8b:90:05:64:43:
         c8:55:3b:18:cf:d0:97:63:b4:b9:df:a1:4e:85:36:7d:cc:82:
         e5:63:e0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:06 2026 by rpki-client