Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2e3044ce-2aba-3822-bb24-7c18cd3f253f.roa
File:                     2e3044ce-2aba-3822-bb24-7c18cd3f253f.roa (raw, json)
Hash identifier:          sCDifkIjYtq3GKQoqSlB7SinRvmAtWLStj3IIxzy3JM=
Subject key identifier:   0D:D9:37:7F:AE:96:B3:B7:75:1E:92:DD:F6:DC:75:5B:D2:AE:6B:57
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA21D4442435FCAFC28740
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2e3044ce-2aba-3822-bb24-7c18cd3f253f.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     6939
IP address blocks:        172.252.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:21:d4:44:24:35:fc:af:c2:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=72d0b474-6b80-4b76-b400-4a804cb8c029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c2:4f:16:6b:95:62:56:17:38:60:19:d3:ec:
                    03:4b:18:4a:2c:71:54:6d:2b:30:e4:91:fb:60:35:
                    26:f5:61:c1:28:80:33:d1:a6:5e:5e:78:3e:1a:7f:
                    7c:d2:ec:b7:97:f3:62:d1:a9:43:5a:23:f9:5a:9f:
                    1a:2e:31:8e:ad:ee:95:36:f3:00:99:62:84:9b:3f:
                    3c:4e:29:05:84:8f:0b:ae:6d:cb:ec:07:05:b3:01:
                    40:b0:56:aa:4a:f4:c8:f8:ef:7d:09:57:a2:60:be:
                    5a:8b:7a:9a:13:89:80:55:76:d2:c3:78:02:19:0c:
                    7d:fd:5d:41:e5:84:bb:e8:b3:42:0f:eb:60:cd:74:
                    0d:dd:89:ad:99:b2:19:63:5a:5d:d3:7f:ed:2e:98:
                    46:63:05:d6:34:b8:8a:3e:70:93:bc:17:26:fe:5d:
                    d3:b6:61:aa:f7:6b:7e:15:1b:83:ad:54:31:54:07:
                    c6:40:2b:6e:f7:dd:7e:79:05:4d:18:b3:ee:ca:f6:
                    0a:94:da:a3:ae:04:e8:4f:6e:8c:e6:a2:43:cc:1a:
                    a2:40:a1:0e:10:3f:32:dc:9e:ff:74:a7:7c:2c:3b:
                    59:d2:92:cb:84:83:aa:4c:18:10:5d:bc:97:26:dd:
                    2a:fe:50:4a:06:94:d7:20:a3:8c:43:54:df:94:e7:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D9:37:7F:AE:96:B3:B7:75:1E:92:DD:F6:DC:75:5B:D2:AE:6B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2e3044ce-2aba-3822-bb24-7c18cd3f253f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:85:e1:22:6e:7a:b8:0a:f9:62:dd:5a:4e:52:12:ee:65:
         85:0c:74:97:81:23:a8:a5:5f:55:d7:9b:4b:0c:db:5c:ad:1f:
         5e:52:df:a8:e8:f6:e0:c3:b9:e6:f1:e4:5b:5f:68:ea:bf:68:
         ac:77:c2:88:69:10:35:ff:0d:d7:00:09:be:64:ba:b6:28:3d:
         a4:dc:a1:7f:a0:83:67:3d:3a:da:84:7e:14:71:39:89:00:f9:
         47:e8:ca:6d:ce:ec:17:11:91:19:a1:da:88:8b:7b:f0:bd:32:
         08:fb:e2:d3:87:59:21:1b:cc:6e:5b:f9:2c:d8:a1:4b:4e:47:
         1f:0e:b7:ac:d5:ce:5f:b8:1d:51:58:ae:61:e3:1d:ac:cb:81:
         95:83:ae:45:a7:6a:32:2b:b8:7d:ef:36:59:69:80:aa:60:ee:
         ac:4f:76:51:9a:ee:59:41:1e:6b:0e:14:82:7d:f5:e6:cb:7a:
         51:71:78:15:dc:e7:ef:a9:b7:8d:ab:06:e5:2a:c8:3e:2a:4e:
         75:80:a8:8c:93:4f:df:6c:f6:2d:3b:b3:03:7a:89:29:cb:f1:
         b3:e8:0a:ed:00:20:c7:ec:a2:80:f3:43:4f:8a:97:02:ae:a0:
         de:a3:89:eb:a1:7b:f3:22:a7:3b:3f:c2:2c:ca:3b:76:f1:ca:
         33:5a:2f:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NuiHURCQ1/K/Ch0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
NzJkMGI0NzQtNmI4MC00Yjc2LWI0MDAtNGE4MDRjYjhjMDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8JPFmuVYlYXOGAZ0+wDSxhKLHFUbSsw5JH7
YDUm9WHBKIAz0aZeXng+Gn980uy3l/Ni0alDWiP5Wp8aLjGOre6VNvMAmWKEmz88
TikFhI8Lrm3L7AcFswFAsFaqSvTI+O99CVeiYL5ai3qaE4mAVXbSw3gCGQx9/V1B
5YS76LNCD+tgzXQN3YmtmbIZY1pd03/tLphGYwXWNLiKPnCTvBcm/l3TtmGq92t+
FRuDrVQxVAfGQCtu991+eQVNGLPuyvYKlNqjrgToT26M5qJDzBqiQKEOED8y3J7/
dKd8LDtZ0pLLhIOqTBgQXbyXJt0q/lBKBpTXIKOMQ1TflOeKOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3ZN3+ulrO3dR6S3fbcdVvSrmtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMmUzMDQ0Y2UtMmFiYS0z
ODIyLWJiMjQtN2MxOGNkM2YyNTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABW3heEibnq4Cvli3VpOUhLuZYUMdJeBI6ilX1XXm0sM21ytH15S36jo
9uDDuebx5FtfaOq/aKx3wohpEDX/DdcACb5kurYoPaTcoX+gg2c9OtqEfhRxOYkA
+Ufoym3O7BcRkRmh2oiLe/C9Mgj74tOHWSEbzG5b+SzYoUtORx8Ot6zVzl+4HVFY
rmHjHazLgZWDrkWnajIruH3vNllpgKpg7qxPdlGa7llBHmsOFIJ99ebLelFxeBXc
5++pt42rBuUqyD4qTnWAqIyTT99s9i07swN6iSnL8bPoCu0AIMfsooDzQ0+KlwKu
oN6jieuhe/Mipzs/wizKO3bxyjNaLws=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:51:52 2026 by rpki-client