Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2bb36a6a-c8bf-393c-8825-653a1e5ba836.roa
File:                     2bb36a6a-c8bf-393c-8825-653a1e5ba836.roa (raw, json)
Hash identifier:          vnIEEXFe/XXjayaellKHsafywMAZPHM7Ljb3AsqHFuk=
Subject key identifier:   E0:57:80:DD:FA:2D:E8:5B:07:0A:51:55:EA:C4:9B:90:D4:07:43:50
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1B689C94A6B5E3DF7B40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2bb36a6a-c8bf-393c-8825-653a1e5ba836.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     25893
IP address blocks:        172.252.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1b:68:9c:94:a6:b5:e3:df:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=f966d097-2fbf-4190-b4db-611aa68f68c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9b:37:28:c5:e2:96:73:01:1f:ec:76:ae:21:
                    11:1a:f2:2a:38:cd:d5:e7:3f:b1:5e:78:c9:c9:03:
                    c7:31:03:a0:3c:27:06:b6:02:fa:2d:08:12:95:fb:
                    48:c4:f2:da:21:b2:bb:e6:56:38:08:cc:35:35:44:
                    bd:8c:fa:d5:16:06:72:4b:a2:de:b8:69:b9:d5:0d:
                    5d:ec:61:17:73:60:4c:90:fc:08:0b:2e:ad:86:9e:
                    ea:72:1b:fd:05:19:42:c6:69:f6:62:7e:d9:81:7c:
                    79:51:03:a8:b0:f4:e8:1d:8f:7a:c3:ad:f9:a2:39:
                    3d:8f:96:42:b9:84:83:ec:8d:b4:bd:0d:47:97:3f:
                    6a:68:6b:86:2a:66:4a:c4:1b:ec:92:e7:bf:a8:f1:
                    8a:26:3d:d4:20:b8:90:62:83:8d:f0:bb:12:89:0b:
                    23:ef:88:d4:4f:fa:f0:3e:fa:93:1e:34:8b:b1:ae:
                    f4:5f:64:fd:be:75:aa:62:fa:d6:bd:69:82:f9:c2:
                    0a:8c:21:75:4d:0d:55:1a:1e:de:47:8b:f3:17:50:
                    a9:c3:32:80:90:85:f2:0f:e9:dd:ab:4b:8c:f9:27:
                    b2:e0:7c:66:fc:08:6b:ed:31:b9:13:8c:c7:2b:8a:
                    5f:ef:99:b5:08:f2:fe:4e:e1:35:8e:37:fb:c2:93:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:57:80:DD:FA:2D:E8:5B:07:0A:51:55:EA:C4:9B:90:D4:07:43:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2bb36a6a-c8bf-393c-8825-653a1e5ba836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5e:6b:0f:53:4e:e9:d1:1a:1a:43:7f:10:37:f2:19:d0:b3:
         58:34:1a:fb:ad:65:81:c6:03:97:e1:cc:73:60:71:5d:8e:a0:
         7a:1f:14:88:1f:4d:c1:f1:5c:f8:ea:f9:86:a1:49:d6:83:0c:
         ee:31:38:27:5d:f7:21:ed:7b:22:2e:fb:c9:84:a9:0e:a5:a8:
         7b:05:ae:53:78:70:7e:1f:99:a6:11:11:39:22:2d:55:5a:be:
         07:9f:a6:91:87:1f:70:7e:76:f2:a7:c7:42:10:60:36:39:32:
         4c:18:c7:10:e0:bf:76:c0:55:a2:ea:2a:33:ed:17:bf:1a:6b:
         3d:1b:06:d9:06:30:1f:60:87:b9:8f:f0:f3:b5:cc:29:2a:fa:
         48:80:00:df:26:2c:a0:8a:e9:75:e6:d7:68:0e:c7:19:54:11:
         ee:dc:73:2f:fe:95:1a:40:5c:6e:8e:62:d1:65:08:70:d8:73:
         dd:54:38:e5:5c:3b:7f:99:2c:24:64:69:5c:02:17:a5:43:8b:
         a8:6e:92:a9:da:09:8e:ea:c3:a5:21:e0:be:14:68:27:70:11:
         1a:d6:42:7f:b7:2f:d4:20:75:ae:ca:65:e4:af:a0:90:1f:2f:
         1b:d2:08:05:df:26:23:4d:09:67:b0:cf:b5:e3:60:c1:e4:9c:
         71:46:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:15 2026 by rpki-client