Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/16f3fbf1-057a-3c77-a120-3e4447b5df1c.roa
File:                     16f3fbf1-057a-3c77-a120-3e4447b5df1c.roa (raw, json)
Hash identifier:          eSkW1k+j4fGXQwxWb3LLKosA7uiJd/qeRX7EJQFvRZs=
Subject key identifier:   71:10:F4:EE:58:63:CA:AE:72:40:76:72:4C:F4:66:3D:35:6B:10:93
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA28654DC2E77A25EBB8C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/16f3fbf1-057a-3c77-a120-3e4447b5df1c.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     6939
IP address blocks:        172.252.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:28:65:4d:c2:e7:7a:25:eb:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=8e288698-6a05-43c8-8153-33030d6a8e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:ab:26:1c:be:93:75:d4:4f:14:de:e4:dc:
                    39:b6:9b:16:9c:46:8e:a5:dc:52:ca:64:81:2c:7a:
                    d4:40:e9:09:fd:24:9d:80:7a:e4:a7:9b:cc:d9:c6:
                    fb:42:fc:80:59:27:90:77:83:9a:81:6c:39:d8:6d:
                    43:c2:86:9e:3e:1f:98:cd:54:bf:11:67:db:b5:83:
                    0d:d1:a3:8a:54:81:8c:7a:92:32:b9:de:d6:d0:47:
                    62:6e:66:53:e6:38:ea:d4:b0:47:41:47:d5:e7:17:
                    07:ae:e4:94:e6:5e:73:21:10:2b:b1:d5:8f:33:c4:
                    38:27:51:8b:bd:62:fb:70:2f:6f:ad:be:dd:13:cd:
                    07:7c:da:a6:62:6e:f6:7f:2e:48:61:31:ac:f3:48:
                    e8:0a:39:bb:4b:44:b9:28:3e:fa:4d:35:8d:2b:c3:
                    29:2d:36:44:3c:47:7c:fc:da:39:49:d8:4e:22:45:
                    cb:21:e2:b4:31:be:f7:d8:ae:fe:76:10:85:fa:ef:
                    15:29:35:63:f1:ac:b4:24:54:5b:ca:ec:02:90:07:
                    f5:50:e4:57:23:a5:e3:2e:71:75:43:e6:90:23:37:
                    e6:32:3c:53:95:0b:bc:f3:a3:3f:67:cc:99:ee:79:
                    17:71:03:5a:29:4c:49:1a:d3:85:e0:62:57:32:be:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:10:F4:EE:58:63:CA:AE:72:40:76:72:4C:F4:66:3D:35:6B:10:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/16f3fbf1-057a-3c77-a120-3e4447b5df1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:49:0c:77:6a:62:2f:58:89:ef:c9:e1:4a:29:5a:73:8b:
         12:d1:d9:fa:9a:7c:7c:80:e5:5e:cf:78:32:8d:9f:eb:4c:71:
         86:f7:90:06:48:1c:3c:f3:15:f9:bf:36:03:a8:74:80:7f:e0:
         8a:3c:89:75:c2:b8:8d:b6:a6:0c:84:97:5a:a7:a9:dc:73:28:
         3c:93:dd:69:0a:a1:89:7c:96:db:28:a6:2f:33:9d:45:42:ab:
         f6:fd:2e:6a:e5:55:e3:2d:f4:32:1e:d4:9a:fe:40:df:fe:59:
         82:ce:bb:20:88:00:ec:fd:63:ce:3d:26:0b:ea:44:be:81:5e:
         b8:5a:42:d5:8a:03:4b:30:8d:a6:de:97:0e:c8:ac:b5:08:ca:
         40:71:7e:88:4a:67:8a:bd:aa:61:0a:cc:51:45:e3:ad:18:ec:
         9c:4b:16:51:32:4d:71:8d:7d:b3:6d:39:8d:e7:7f:59:12:2e:
         93:4e:36:62:43:50:6f:c8:87:82:e9:02:e4:bb:df:94:b2:63:
         da:4f:ff:e3:83:75:0c:88:ac:60:56:10:28:79:0a:2b:ac:29:
         d4:21:61:e0:11:fa:13:fd:d6:96:cc:2d:04:eb:9b:66:9e:bf:
         b6:e0:9b:42:61:5b:14:4a:a8:38:f2:fd:ae:a5:6d:c5:c5:c2:
         e3:7f:98:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:59 2026 by rpki-client