Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/36b7f306-8d05-3b72-abaf-0d040e31c608.roa
File:                     36b7f306-8d05-3b72-abaf-0d040e31c608.roa (raw, json)
Hash identifier:          it4WaLONiKx2ERqBRyoZQusyQUxZnp72rgWCtfdXRrE=
Subject key identifier:   19:41:1D:36:E8:3F:4F:23:99:A1:EF:2E:44:FA:37:17:58:DB:5D:5B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA25C1E043814595043A00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/36b7f306-8d05-3b72-abaf-0d040e31c608.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        216.172.154.248/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:25:c1:e0:43:81:45:95:04:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=9cbacc95-2c75-4838-8ff4-351fc3de6c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:c0:61:60:eb:36:7a:17:d7:4b:1b:8b:ef:
                    26:0f:05:98:28:06:d7:b2:10:16:dc:b7:b0:34:06:
                    d5:ed:cd:8d:33:c3:a0:d7:50:f0:7a:db:39:66:9a:
                    c0:17:93:b6:d8:0a:90:32:1b:64:de:c4:a7:66:c2:
                    76:5d:76:25:fe:d0:af:ae:c7:71:b8:c6:ce:39:b1:
                    2d:b9:f2:1d:47:c0:a2:8a:a7:33:51:0f:50:f4:92:
                    23:ea:5a:3f:8a:21:e5:d1:eb:7e:73:ed:8c:24:3d:
                    3c:8a:fd:df:71:d5:8c:69:49:21:e6:a5:eb:95:cf:
                    b6:54:18:89:a8:b9:18:46:20:49:2c:dd:7f:9e:26:
                    0c:08:83:89:17:34:67:25:71:71:7d:16:56:59:a8:
                    5d:b9:ce:e3:62:83:6a:07:c2:b3:23:54:53:95:ca:
                    7c:b5:49:2d:32:43:0b:0f:62:9c:03:6c:77:d8:ef:
                    d1:3a:c0:56:4c:37:97:a4:a6:54:34:31:66:0c:ce:
                    9c:5b:c4:84:05:05:13:e2:26:71:1d:07:ac:cf:c6:
                    1b:cd:17:0a:18:b4:d0:8b:58:f6:58:18:98:d7:0e:
                    a6:5f:6f:c5:7a:92:25:a0:de:93:d0:7a:b2:61:1f:
                    24:24:74:1b:bf:b9:13:3c:99:75:34:80:49:3a:eb:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:41:1D:36:E8:3F:4F:23:99:A1:EF:2E:44:FA:37:17:58:DB:5D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/36b7f306-8d05-3b72-abaf-0d040e31c608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.154.248/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:e9:ab:cb:3d:46:73:0f:03:e3:8a:eb:2a:25:d5:c0:be:
         76:94:c5:97:69:96:3b:6e:e8:77:83:02:56:6b:e4:bd:7d:fa:
         16:a6:d6:af:b6:ef:36:8e:2e:b3:81:6a:9a:c3:95:13:d3:d1:
         b1:62:85:0e:fe:fc:c1:94:aa:8c:f0:4d:5e:dd:9d:5f:0b:01:
         a9:99:a0:d1:86:af:68:08:ef:da:b5:ff:a5:76:0f:75:5b:d0:
         d9:28:b9:08:a8:64:3e:50:e4:77:8a:15:6b:3c:d8:4a:c0:42:
         4d:0c:d2:d0:bc:16:1d:a4:55:5d:a7:be:77:a3:a8:b6:fe:09:
         e0:f4:b1:56:81:cd:fc:d0:cf:d8:00:cb:39:b2:b8:2d:f7:81:
         b1:25:a7:a7:f4:2d:df:c5:7b:a7:a6:ac:be:8f:9e:c0:96:58:
         de:b9:80:41:a1:1e:9a:e7:d1:61:ea:59:54:76:e3:88:82:88:
         91:30:eb:c4:96:c9:b4:f8:fb:21:85:79:71:35:f5:7c:8e:6f:
         b2:b4:fb:e0:8f:66:bc:4f:4e:d4:67:33:b5:f8:70:a2:1c:a5:
         98:08:7b:40:88:a3:12:6b:53:21:09:ba:51:a8:fd:23:a2:0e:
         04:d7:dd:23:ec:56:61:f6:53:a2:1a:31:68:a4:ca:67:f0:66:
         21:3a:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:39 2026 by rpki-client