Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/37184ea8-8d76-3d93-9400-2ee4d45c7305.roa
File:                     37184ea8-8d76-3d93-9400-2ee4d45c7305.roa (raw, json)
Hash identifier:          dNrQ24sHzGkgHuikNDgHMSkUWsdz3pTfdLda8gWj5d8=
Subject key identifier:   2C:1D:CE:AD:CB:8F:BA:2B:F1:AC:A2:D7:06:61:C1:09:D0:68:86:01
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA28C659A21FA55EE38C80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/37184ea8-8d76-3d93-9400-2ee4d45c7305.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     6939
IP address blocks:        172.252.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:28:c6:59:a2:1f:a5:5e:e3:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=6b7bd71c-c440-4d51-a24c-f0f86c106408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:30:0e:f6:b0:15:1d:7e:83:3b:e9:4d:bc:1d:
                    65:db:c5:93:12:fe:86:09:d0:b4:51:97:14:fe:9d:
                    9b:c0:b9:45:7f:a8:6b:fc:93:ec:40:1e:29:8a:0d:
                    0d:f9:97:bb:e8:7e:48:de:e2:43:2a:3e:29:c7:56:
                    40:2b:2a:cf:64:0b:83:c9:97:5e:ee:ea:c9:f5:f8:
                    d0:5c:a3:03:51:70:6d:1f:de:9b:0e:06:9a:f0:a1:
                    01:0b:fc:91:c7:f6:32:e5:ab:d7:7c:41:e2:c3:00:
                    b7:1b:d8:22:f4:7d:ba:09:89:67:b0:4d:a0:54:2f:
                    76:d5:fe:30:17:d8:7b:36:b1:2c:70:40:b8:0b:eb:
                    97:b6:22:70:64:ff:4e:c9:d6:6e:a8:f9:ec:2e:b0:
                    4a:58:57:e8:98:a6:1f:9d:f3:cb:1d:b2:a3:6d:b5:
                    09:ec:df:ff:66:23:40:e4:31:63:4b:f6:e1:75:fa:
                    52:56:46:f3:67:80:ac:3f:51:2b:c8:e3:72:b1:3c:
                    d9:fe:1e:49:0f:81:82:68:bb:26:b4:89:42:74:41:
                    b5:23:d0:ef:b6:cc:b3:42:7f:54:8d:f3:86:b3:04:
                    e3:3c:3f:19:fd:61:08:06:f8:bf:e1:9e:b5:d7:95:
                    01:32:18:3e:c8:f7:a1:c6:d5:30:d6:40:86:33:3c:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1D:CE:AD:CB:8F:BA:2B:F1:AC:A2:D7:06:61:C1:09:D0:68:86:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/37184ea8-8d76-3d93-9400-2ee4d45c7305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:03:10:bf:40:0c:d7:44:08:51:4f:24:14:83:a7:f6:03:77:
         2d:3d:25:10:58:2e:29:d9:66:09:68:e2:95:a0:5a:0d:56:92:
         eb:69:d1:b1:0e:06:eb:ec:44:ba:00:29:f4:75:bd:6b:ec:ef:
         38:29:0a:8b:60:5f:ec:71:b0:6d:95:6b:55:2b:ec:f2:5a:3a:
         57:da:db:88:62:d4:cf:0b:42:28:d9:48:a8:43:05:91:bd:4f:
         51:75:eb:d9:3f:89:e5:6d:b8:60:8a:34:7a:0a:23:65:02:12:
         e2:6f:b8:82:51:26:ad:6b:df:87:af:5e:3d:72:73:37:76:2a:
         45:5b:75:29:b2:7f:cd:17:b8:92:5b:e3:22:71:d5:98:42:33:
         9d:d8:0f:9a:44:f9:21:18:64:21:8c:3f:b0:63:f5:b4:04:cb:
         0f:09:d5:12:a0:8e:67:76:b8:b5:b2:b0:c8:3a:c0:99:fa:a2:
         c1:00:09:12:19:53:d5:08:de:fa:a5:a6:00:43:b3:95:97:ab:
         74:aa:8c:ae:dc:1e:1a:b8:c1:13:7e:e0:9f:50:3b:47:07:af:
         3e:43:ae:a0:48:4c:1b:29:c8:4f:5e:40:80:dc:71:14:d7:d6:
         4e:14:c4:30:58:e8:8c:97:69:30:0b:92:24:d6:c2:ab:77:ff:
         53:91:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:31 2026 by rpki-client