Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68dbf312-c162-317e-ad9d-7ade162517db.roa
File:                     68dbf312-c162-317e-ad9d-7ade162517db.roa (raw, json)
Hash identifier:          LL4b6roPbr/LJwnMKcHFqaxbi2sJVg7hSZucgDw34Zw=
Subject key identifier:   77:02:4D:01:BA:04:E5:F7:24:19:8F:55:C4:D2:8D:E1:8E:D2:07:77
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1BAD7DE60DA8812BE200
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68dbf312-c162-317e-ad9d-7ade162517db.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     398781
IP address blocks:        172.252.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1b:ad:7d:e6:0d:a8:81:2b:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=2dbad2d6-1092-41f7-9b3b-5e6f919c9856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:1a:b8:df:a5:8f:c1:a3:7c:a1:22:fe:42:
                    b0:f5:47:d2:8f:e9:87:69:16:3a:a7:0a:7b:69:0e:
                    e4:64:2c:a8:e0:d6:94:27:99:30:f1:0d:ec:42:63:
                    ce:4a:81:cc:39:38:31:cf:b5:32:2a:c3:74:bc:bb:
                    1a:bf:e8:bd:e4:a5:7a:4d:4e:67:c4:47:2e:c6:e3:
                    e6:cd:4b:f8:80:ae:3b:b9:c5:15:ff:84:df:77:25:
                    9c:18:29:87:48:90:16:a3:e7:bb:dd:dd:91:4c:1d:
                    24:09:0a:b4:2a:69:80:df:db:c3:4d:cd:f8:de:e6:
                    e6:11:38:24:49:45:c1:6d:7f:37:2b:29:95:28:bf:
                    50:34:79:91:06:4b:54:0b:33:de:1c:ab:a4:ea:a8:
                    5a:5b:5a:d1:62:e3:24:30:22:54:50:fc:69:c2:0c:
                    8c:6a:51:60:ac:78:e4:6e:8f:1d:e8:f4:eb:35:26:
                    78:0d:f4:5e:33:0e:9e:bb:51:6b:77:76:5a:ed:a0:
                    c0:1c:69:8e:b5:a6:54:6b:af:81:67:89:a8:83:d0:
                    49:89:23:eb:a7:82:81:c0:31:70:a6:66:39:04:b0:
                    b7:b5:41:82:97:de:7a:6d:1f:d4:6a:c5:c3:de:d1:
                    2c:45:f9:f5:90:ef:e4:c6:d0:2a:5c:f8:dc:35:69:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:02:4D:01:BA:04:E5:F7:24:19:8F:55:C4:D2:8D:E1:8E:D2:07:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68dbf312-c162-317e-ad9d-7ade162517db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:48:c6:d1:24:de:ea:b8:2e:26:02:ee:41:0e:93:8c:cc:3e:
         57:1a:c9:69:b1:4a:a9:28:7d:fc:93:0c:2c:8c:94:a7:a5:ba:
         78:dc:3f:09:d1:6b:d8:eb:00:82:5d:78:c0:19:53:24:59:b3:
         9c:cb:f9:3d:b0:d0:c2:fa:08:aa:37:3f:c0:fd:e0:67:62:75:
         4c:90:db:a1:d5:7b:14:1f:0f:e3:eb:b8:14:15:de:52:cc:80:
         83:1f:c1:59:48:d0:7a:fc:c5:71:b6:6f:40:79:71:2e:a1:d8:
         6a:d7:9f:09:ca:66:38:b6:c7:ec:45:9e:e5:80:19:66:08:25:
         87:5f:1f:c9:c4:45:6a:a8:88:58:57:ce:13:95:85:fa:9e:d4:
         62:c6:1b:c6:a9:84:72:c4:c1:36:b5:e7:68:10:75:df:4a:a5:
         db:b6:cd:4b:79:50:3d:30:0f:cf:2a:82:fb:6a:66:06:bd:0f:
         40:5d:eb:f8:66:4c:76:8d:9a:e4:74:f1:6d:8b:66:cb:27:38:
         d9:a1:df:e9:59:95:21:71:61:66:7c:23:1c:b0:a1:fd:0c:04:
         42:e4:29:1a:bc:b8:22:10:52:7d:43:b6:4e:95:86:4d:30:f9:
         6f:fb:a2:da:cb:5d:68:70:b1:a3:6b:b5:ef:12:84:90:43:80:
         23:aa:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:38 2026 by rpki-client