Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/59d8484e-3882-3b59-89d7-72bf1394f667.roa
File:                     59d8484e-3882-3b59-89d7-72bf1394f667.roa (raw, json)
Hash identifier:          VtaOtXAiup76ETnlABVrclCm1yPRqSBMtl/xL9z+13o=
Subject key identifier:   E9:D7:FE:A1:38:9D:BA:85:AE:67:60:15:BF:11:19:87:98:2A:9A:B5
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DE9316311503CCE7764656400
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/59d8484e-3882-3b59-89d7-72bf1394f667.roa
Signing time:             Thu 21 May 2026 20:44:26 +0000
ROA not before:           Thu 21 May 2026 20:44:26 +0000
ROA not after:            Wed 19 Aug 2026 20:44:26 +0000
asID:                     9009
IP address blocks:        172.252.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:31:63:11:50:3c:ce:77:64:65:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May 21 20:44:26 2026 GMT
            Not After : Aug 19 20:44:26 2026 GMT
        Subject: CN=a3a7fb20-fab6-4a1c-a87a-63b241620e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:be:1e:bd:96:ee:b8:43:b1:9f:d4:32:01:
                    ed:bd:19:55:f0:57:6d:d7:3f:c1:0a:64:79:d7:22:
                    df:99:9a:c6:42:68:fa:71:67:47:7f:b8:39:90:27:
                    71:fb:97:c4:e3:d9:83:1b:34:28:f7:b0:f0:6e:87:
                    36:c0:ae:23:ca:43:82:d2:2c:ff:90:05:03:9d:9d:
                    b6:32:a3:32:16:f1:c5:4e:f5:d0:39:31:52:71:70:
                    d2:b4:20:f3:c7:47:a2:bc:f1:8e:6e:b4:f9:f4:8b:
                    0a:e6:9f:07:69:54:98:58:eb:aa:18:0b:bc:60:eb:
                    4b:24:94:a1:22:03:1d:02:8a:ce:22:db:89:04:29:
                    8a:45:f5:c1:4a:2f:eb:93:7d:3a:fe:71:1e:4d:8f:
                    6d:58:91:d8:6f:89:ce:2b:d2:28:21:65:f7:98:fc:
                    5f:fd:33:9d:9e:cc:a0:76:44:ea:25:ec:01:99:ef:
                    4a:2d:81:47:f0:56:da:f8:f6:fe:fa:26:bf:be:62:
                    f1:4b:33:5e:87:f1:5b:ff:3c:18:d5:39:54:af:9e:
                    75:e2:eb:48:da:be:bc:f5:02:f9:44:3a:24:f9:b7:
                    b0:42:c1:7b:5b:99:f8:09:e7:c5:75:08:54:ee:59:
                    84:05:b4:a7:5d:97:9c:a2:91:ea:c4:01:38:b9:cf:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D7:FE:A1:38:9D:BA:85:AE:67:60:15:BF:11:19:87:98:2A:9A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/59d8484e-3882-3b59-89d7-72bf1394f667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:de:da:9f:89:e6:38:51:1a:ec:f0:95:78:4c:1f:9d:24:
         cb:a6:a6:c8:fd:68:a4:a4:0b:f7:83:b4:0f:8a:16:8a:01:e9:
         6f:da:b9:84:76:22:61:df:7d:7b:05:d7:0f:d4:fd:d3:4c:2b:
         51:fb:d5:ee:e1:81:72:be:0c:7d:0a:41:00:07:f4:4b:9d:bd:
         ee:31:06:fe:ef:0d:08:76:e0:46:0b:d1:b2:d2:5a:84:b8:cf:
         1f:71:f3:a0:7d:e7:ff:2e:80:08:8f:4f:9c:80:37:8c:65:ad:
         59:e6:87:e8:e8:d1:0f:ee:d9:c9:fa:20:53:c2:c7:c4:9a:1f:
         98:06:8b:c5:22:9e:7f:c1:43:2f:14:55:fa:cd:88:5f:f5:32:
         12:a1:69:ed:7c:8b:43:e4:dc:14:ad:71:6a:75:91:3b:16:87:
         eb:6e:1c:c1:43:97:5b:d3:d0:dd:02:56:5a:f9:82:64:7c:e7:
         27:e4:de:86:e2:ca:ae:8d:6d:bd:be:c3:a3:98:86:9b:13:08:
         15:77:f7:6a:78:eb:ea:ed:b7:51:57:fe:84:ac:ff:04:23:48:
         92:1f:c4:d9:03:d7:61:60:c5:c3:4d:a5:ac:58:86:c8:8c:43:
         a1:71:bd:f9:41:6c:0e:27:ec:be:92:6e:fc:7e:d5:70:46:5a:
         db:b3:da:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3pMWMRUDzOd2RlZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDUyMTIwNDQyNloXDTI2MDgxOTIwNDQyNlowLzEtMCsGA1UEAxMk
YTNhN2ZiMjAtZmFiNi00YTFjLWE4N2EtNjNiMjQxNjIwZTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQS+Hr2W7rhDsZ/UMgHtvRlV8Fdt1z/BCmR5
1yLfmZrGQmj6cWdHf7g5kCdx+5fE49mDGzQo97Dwboc2wK4jykOC0iz/kAUDnZ22
MqMyFvHFTvXQOTFScXDStCDzx0eivPGObrT59IsK5p8HaVSYWOuqGAu8YOtLJJSh
IgMdAorOItuJBCmKRfXBSi/rk306/nEeTY9tWJHYb4nOK9IoIWX3mPxf/TOdnsyg
dkTqJewBme9KLYFH8Fba+Pb++ia/vmLxSzNeh/Fb/zwY1TlUr5514utI2r689QL5
RDok+bewQsF7W5n4CefFdQhU7lmEBbSnXZecopHqxAE4uc+g5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOnX/qE4nbqFrmdgFb8RGYeYKpq1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNTlkODQ4NGUtMzg4Mi0z
YjU5LTg5ZDctNzJiZjEzOTRmNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyL3tqfieY4URrs8JV4TB+dJMumpsj9aKSkC/eDtA+KFooB6W/auYR2
ImHffXsF1w/U/dNMK1H71e7hgXK+DH0KQQAH9Eudve4xBv7vDQh24EYL0bLSWoS4
zx9x86B95/8ugAiPT5yAN4xlrVnmh+jo0Q/u2cn6IFPCx8SaH5gGi8Uinn/BQy8U
VfrNiF/1MhKhae18i0Pk3BStcWp1kTsWh+tuHMFDl1vT0N0CVlr5gmR85yfk3obi
yq6Nbb2+w6OYhpsTCBV392p46+rtt1FX/oSs/wQjSJIfxNkD12FgxcNNpaxYhsiM
Q6FxvflBbA4n7L6Sbvx+1XBGWtuz2sE=
-----END CERTIFICATE-----
Generated at Sat May 23 04:30:05 2026 by rpki-client