Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/27ae7b48-a017-345f-92fc-f8ab07c5dc38.roa
File:                     27ae7b48-a017-345f-92fc-f8ab07c5dc38.roa (raw, json)
Hash identifier:          hJWM5QbGIxiO2ZPxVzeWy42+mCrRuBfaFowWJS1KobU=
Subject key identifier:   4B:1D:15:4D:AC:38:C1:05:A8:C8:3A:DB:9E:58:69:7F:75:5B:0D:A3
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CF0A733E0C7023EF37A80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/27ae7b48-a017-345f-92fc-f8ab07c5dc38.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        172.252.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f0:a7:33:e0:c7:02:3e:f3:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=1e00301b-9b9a-4a20-a9ec-ca04dbc5fabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:84:eb:8a:35:10:b0:24:37:e5:ed:21:55:
                    05:e7:56:0a:f7:4d:71:e9:7d:f7:06:b8:98:08:a2:
                    56:0e:bd:f1:fc:6a:43:63:36:70:0f:12:b9:a5:2b:
                    c1:ec:7d:9f:8b:b7:ca:fb:ab:ef:97:42:b5:bd:ce:
                    61:61:d7:5d:28:4c:cb:e8:df:b6:a0:c3:e9:e0:02:
                    6f:20:20:fb:b3:72:ca:8e:05:25:67:0a:a7:ae:80:
                    d2:3c:d1:84:32:9b:1b:73:bc:76:98:1a:fc:95:e6:
                    46:cd:ae:ec:ba:18:bf:2e:ae:06:9b:f0:6a:7a:69:
                    ea:f0:3f:21:08:e3:57:27:79:11:6d:33:d6:d7:80:
                    c4:53:c8:fd:5d:06:0a:46:39:ce:6b:ec:3c:a8:87:
                    ee:6a:e3:06:c3:ba:7e:6e:7b:34:64:2c:7a:8b:50:
                    c7:a3:87:16:71:a8:7a:a9:6e:bb:17:4e:da:a5:e1:
                    5b:00:81:64:e3:46:45:0d:8b:f1:de:6d:f7:78:62:
                    77:8e:83:01:7f:d1:da:13:16:18:89:af:ba:35:07:
                    07:29:d9:93:a7:25:f4:1d:b7:81:73:11:e8:94:db:
                    fe:24:9d:b2:49:ea:67:4c:c0:e3:ac:22:4d:87:bd:
                    b3:0b:9a:97:ad:dc:23:67:ea:1f:67:c3:df:12:2d:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1D:15:4D:AC:38:C1:05:A8:C8:3A:DB:9E:58:69:7F:75:5B:0D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/27ae7b48-a017-345f-92fc-f8ab07c5dc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:f4:31:72:09:76:3d:ca:f2:90:5c:c6:59:11:27:dc:3c:
         42:2d:b5:fe:b4:37:5d:b2:c8:ec:1c:d4:49:f6:ae:87:f7:2b:
         83:fb:e8:08:de:39:83:29:87:11:0a:8f:8a:1b:81:f6:a8:de:
         2e:59:8e:3f:be:35:cb:d6:62:33:ea:59:2b:4c:5d:ef:4a:a8:
         3c:fc:4b:c7:08:16:e9:0c:cc:fb:2f:77:3b:94:12:a3:2b:d3:
         65:11:50:f5:0b:6f:c6:c2:8c:96:e3:13:9f:22:98:ae:78:95:
         43:7c:b8:b7:32:64:66:34:58:28:c0:58:67:80:a4:d4:dd:ae:
         4e:2c:eb:69:9f:c8:e1:fd:97:bc:1e:02:24:6a:1e:6d:23:ef:
         88:a3:5f:a6:32:33:4f:f2:26:be:01:2c:ec:1e:b7:ee:7a:f0:
         50:e9:95:d7:fb:86:fd:02:0b:6d:2a:09:64:c4:2c:6b:80:0d:
         79:46:05:96:7f:e8:9d:0f:92:cf:e1:f2:30:aa:8a:94:20:ee:
         aa:7d:fa:54:52:7a:20:9d:e5:93:1f:95:f4:78:dd:01:7e:a8:
         65:5d:d1:84:cf:59:22:9d:1d:a9:a2:34:6a:8f:a8:a4:56:ce:
         bb:3a:3c:16:da:fd:f9:8d:c7:da:4e:08:af:96:17:15:c6:80:
         d7:a4:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:40:23 2026 by rpki-client