Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/02d52241-3376-3f76-a685-37d1c4b0dc49.roa
File:                     02d52241-3376-3f76-a685-37d1c4b0dc49.roa (raw, json)
Hash identifier:          3ghNaFxr4CtdOrxXVZ3gBJBOHjF8BIObvuhv9XIl0wU=
Subject key identifier:   10:16:4D:51:41:AD:64:F9:80:2B:6E:68:84:FA:E8:93:A6:75:09:B9
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1F526806A2069D142840
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/02d52241-3376-3f76-a685-37d1c4b0dc49.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        172.252.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1f:52:68:06:a2:06:9d:14:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=05edf871-f850-46d1-854c-c9b6d606cc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:e6:f8:8d:7e:29:4a:b3:b4:45:e4:c1:d7:
                    8e:fc:60:c0:ce:c1:eb:f1:da:3f:d2:13:49:c0:62:
                    cf:c9:49:63:72:48:b3:3f:89:28:18:7a:b6:90:7b:
                    6d:4f:c1:c4:3b:37:c8:0b:33:fd:0f:23:96:2b:5b:
                    bd:53:b2:77:85:58:59:4a:89:c0:3d:bd:ab:ad:9b:
                    0a:6a:67:e2:5d:69:1b:99:67:0a:b2:38:5a:bb:72:
                    4c:ce:ff:01:b6:2e:fd:75:1c:c5:61:56:c1:68:fe:
                    0d:3c:0c:fd:8e:4f:87:f8:5b:ae:6c:a9:ce:1a:e1:
                    00:b7:b1:34:59:46:82:ec:08:63:fb:65:54:00:4d:
                    65:ba:b2:3a:89:79:27:c2:bf:e0:10:46:ce:b5:89:
                    97:0b:0c:c5:9f:e5:5b:a9:6e:cb:1e:90:d2:59:f5:
                    dd:3b:b8:37:66:bc:58:5b:39:18:19:e3:d4:33:65:
                    1f:fe:27:71:28:25:2b:41:48:70:85:ec:d5:35:5e:
                    c1:f5:8b:fa:5b:cc:5c:98:f8:7a:03:e8:33:04:c1:
                    59:17:dc:92:d1:8f:db:29:05:34:6e:71:67:29:6e:
                    d0:37:f7:85:1b:9d:9b:61:67:27:32:2e:fb:87:b7:
                    4f:68:3d:ee:6f:8f:13:d3:9e:48:1c:74:e6:4b:a6:
                    61:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:16:4D:51:41:AD:64:F9:80:2B:6E:68:84:FA:E8:93:A6:75:09:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/02d52241-3376-3f76-a685-37d1c4b0dc49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fb:f2:fb:60:9f:1e:0c:b6:14:5e:96:22:fd:e0:84:f6:55:
         8c:4e:7c:df:9d:f3:c2:30:f6:7c:97:76:4e:aa:29:8e:23:1c:
         64:76:ca:60:3d:35:65:ff:ba:f8:fe:29:1c:be:57:e4:66:18:
         ab:91:5f:96:26:12:87:dc:5e:e7:d2:99:b9:44:8d:c7:a9:1e:
         f6:49:ae:77:ff:67:6d:5f:32:bb:00:07:f9:73:a1:1e:aa:ee:
         fc:ca:0c:02:c0:cc:8e:53:22:d8:3e:40:0d:4a:ef:a5:29:07:
         46:aa:29:b3:94:85:72:1e:7f:f2:e0:8b:85:3e:f8:2b:66:e8:
         71:a9:fe:c1:b3:13:ee:8f:1d:3e:5a:52:6b:bd:95:cd:1b:d8:
         9c:02:57:f7:a5:3e:c7:95:68:1f:fd:79:d4:45:00:25:d9:69:
         ce:d6:66:9c:67:7a:78:ca:3a:9d:3f:fe:83:5c:67:f6:a7:88:
         1e:11:ae:86:57:96:86:2d:b2:f4:b3:2e:ce:30:66:33:89:c9:
         4f:67:2a:cd:8b:31:9e:98:be:ae:d6:55:8f:9a:cc:d5:34:17:
         a7:fc:80:54:d7:44:db:98:db:6d:a6:a3:f8:c0:c0:dc:ba:7e:
         1b:07:a4:ed:8d:6c:ee:6e:5f:04:62:72:f9:9a:48:91:d0:68:
         cd:58:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:56:23 2026 by rpki-client