Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1a40aea3-2635-3035-9d09-61e51708f9a8.roa
File:                     1a40aea3-2635-3035-9d09-61e51708f9a8.roa (raw, json)
Hash identifier:          SGPV8KpkASm8+0y5zChFFS9ML2YIh+aQzgjul9OPtI0=
Subject key identifier:   F3:FC:E7:80:E7:1C:50:B7:71:A1:28:35:B0:18:EB:BE:21:A1:B5:28
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1F478E45B63E360537D4
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1a40aea3-2635-3035-9d09-61e51708f9a8.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        172.252.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1f:47:8e:45:b6:3e:36:05:37:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=d1e8650f-e644-4d55-937d-c758bc02c497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:17:f1:4c:63:bb:c5:b7:16:12:11:a4:88:
                    8c:1a:84:9b:09:36:3f:24:3f:14:ef:49:69:82:85:
                    8f:32:70:e8:80:c8:07:f9:1e:84:d3:1f:6c:fc:ab:
                    ce:52:b8:e0:67:0d:3e:48:02:39:84:24:3a:f8:4f:
                    60:36:59:c0:e5:e5:79:8f:03:5f:dc:ac:76:32:2e:
                    03:1a:ba:c0:31:9e:8a:ee:3c:70:a0:39:28:e2:27:
                    ad:4c:57:f0:7e:09:3c:81:d7:70:ea:bf:81:a1:68:
                    85:8f:e4:c9:15:43:eb:8d:1e:29:3d:12:a1:9f:23:
                    cb:f3:e2:29:08:89:00:a5:ab:7c:12:b2:90:b1:90:
                    8e:57:b3:a7:3d:fd:0c:54:af:04:f2:fc:47:f7:a6:
                    16:b4:ad:bc:30:da:90:1b:f5:0f:73:de:e1:bf:cb:
                    a8:97:69:74:eb:13:f3:d7:ae:09:bc:8f:fc:07:c2:
                    f2:68:53:46:5c:24:63:a5:94:b5:42:e0:a2:d9:a3:
                    50:7a:18:fc:6e:64:27:f1:08:e8:29:96:92:0b:20:
                    a4:23:25:f3:42:71:23:2a:9e:92:f2:8d:d8:a3:49:
                    8f:b0:b3:87:ed:44:71:32:74:74:fe:bc:63:a5:8c:
                    55:f5:1d:c6:a9:f4:3a:f2:df:32:f8:24:db:b4:16:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:E7:80:E7:1C:50:B7:71:A1:28:35:B0:18:EB:BE:21:A1:B5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1a40aea3-2635-3035-9d09-61e51708f9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:24:4c:41:c8:9b:fc:63:5f:97:78:55:1c:a9:9f:07:81:
         ad:e4:b1:14:0a:59:bd:d4:86:59:49:55:0f:28:99:f3:7b:a6:
         46:89:82:ae:c0:92:6f:0b:36:9c:5b:a1:d8:98:40:8b:08:77:
         8c:8e:e0:e4:f6:ca:5b:94:1f:6d:0b:a9:80:b8:4e:83:bf:1c:
         c3:72:42:b8:3e:58:8a:08:48:c5:1e:04:13:86:e7:9d:27:da:
         ca:ab:12:7c:8d:95:49:dc:8f:c6:e4:53:b4:a7:b0:f5:89:a7:
         fc:b1:95:c6:a5:b2:10:c5:07:f9:2c:e6:66:a0:ee:27:02:0b:
         b6:47:38:b8:78:46:47:1d:82:97:59:7f:62:a4:48:2f:4c:75:
         17:26:c5:42:b1:4c:e4:28:97:72:7f:9a:86:21:62:4b:0e:04:
         2a:bf:8c:f1:35:91:80:be:de:f6:f7:9e:f3:7f:b7:46:34:ce:
         8b:2e:bc:7a:31:5d:3b:1e:d2:ce:9b:63:22:6e:f9:c3:16:14:
         db:88:1b:52:3e:11:3a:ea:0b:83:90:9e:04:b3:85:14:a7:3c:
         2a:c6:6e:d0:27:2a:e3:ea:f1:a2:a5:dd:fb:b8:69:13:e9:a2:
         fc:e3:99:9e:02:16:38:bf:26:6f:43:45:a8:70:2e:3d:84:ea:
         8a:ef:7b:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Nuh9HjkW2PjYFN9QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
ZDFlODY1MGYtZTY0NC00ZDU1LTkzN2QtYzc1OGJjMDJjNDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKYX8Uxju8W3FhIRpIiMGoSbCTY/JD8U70lp
goWPMnDogMgH+R6E0x9s/KvOUrjgZw0+SAI5hCQ6+E9gNlnA5eV5jwNf3Kx2Mi4D
GrrAMZ6K7jxwoDko4ietTFfwfgk8gddw6r+BoWiFj+TJFUPrjR4pPRKhnyPL8+Ip
CIkApat8ErKQsZCOV7OnPf0MVK8E8vxH96YWtK28MNqQG/UPc97hv8uol2l06xPz
164JvI/8B8LyaFNGXCRjpZS1QuCi2aNQehj8bmQn8QjoKZaSCyCkIyXzQnEjKp6S
8o3Yo0mPsLOH7URxMnR0/rxjpYxV9R3GqfQ68t8y+CTbtBaM1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPP854DnHFC3caEoNbAY674hobUoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMWE0MGFlYTMtMjYzNS0z
MDM1LTlkMDktNjFlNTE3MDhmOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuqJExByJv8Y1+XeFUcqZ8Hga3ksRQKWb3UhllJVQ8omfN7pkaJgq7A
km8LNpxbodiYQIsId4yO4OT2yluUH20LqYC4ToO/HMNyQrg+WIoISMUeBBOG550n
2sqrEnyNlUncj8bkU7SnsPWJp/yxlcalshDFB/ks5mag7icCC7ZHOLh4RkcdgpdZ
f2KkSC9MdRcmxUKxTOQol3J/moYhYksOBCq/jPE1kYC+3vb3nvN/t0Y0zosuvHox
XTse0s6bYyJu+cMWFNuIG1I+ETrqC4OQngSzhRSnPCrGbtAnKuPq8aKl3fu4aRPp
ovzjmZ4CFji/Jm9DRahwLj2E6orve5Y=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:56:23 2026 by rpki-client