Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/73b42db1-8b7e-3de3-b15c-a7a1b1499f76.roa
File:                     73b42db1-8b7e-3de3-b15c-a7a1b1499f76.roa (raw, json)
Hash identifier:          D/KMp+JDKQhUOjlTY862qmURey1O8Xq9OFbt8aFHxt8=
Subject key identifier:   DD:FD:3A:13:04:1C:30:D7:AB:D1:42:8D:BE:C2:77:66:8A:83:FE:FE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EA7924E830F15A1291E82D58C
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/73b42db1-8b7e-3de3-b15c-a7a1b1499f76.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        172.252.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:4e:83:0f:15:a1:29:1e:82:d5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8c877667-9727-4f93-b5b7-8ed5ce043791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:9a:5e:45:39:da:d1:c1:bd:fd:bc:f4:27:
                    37:d0:b4:3c:2f:31:0f:d8:2b:73:4d:97:a5:26:6b:
                    b8:ec:30:57:a4:7c:93:cb:34:cc:76:2b:41:a3:60:
                    7b:55:fa:10:84:f1:10:f6:ab:06:aa:9b:92:8e:bf:
                    bc:d8:e3:c2:5a:3a:76:03:d0:ac:8e:cc:9b:a6:b4:
                    8e:f9:9d:88:a8:20:49:91:87:4a:ec:a9:58:78:7c:
                    e5:09:40:0e:17:c3:51:6d:2e:72:fa:9d:04:0f:ff:
                    78:99:ea:1f:40:c7:2e:2d:99:42:6a:ce:52:e7:ec:
                    ee:42:77:ff:d9:5b:46:f8:84:53:ff:e4:65:a1:2f:
                    0d:de:ab:5c:0d:2e:b0:21:f3:76:f6:d8:1c:45:5b:
                    77:1a:da:e8:99:74:e8:d6:15:94:76:a0:9a:d3:42:
                    dd:a7:d7:e7:0a:39:7a:89:9b:f8:13:4c:81:a3:ef:
                    e3:e0:1d:04:89:91:8e:4c:33:08:d7:33:fe:96:2d:
                    6d:c6:fc:ab:38:62:3d:3e:94:37:4d:0b:1e:5e:6e:
                    2a:91:bb:f7:5f:72:a2:a8:ee:1c:f2:e9:a4:ca:91:
                    17:11:59:6f:91:95:28:af:a7:fe:5f:a4:0c:12:05:
                    03:fa:2f:1e:92:cc:8a:e8:35:d5:cd:d8:d0:9a:01:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FD:3A:13:04:1C:30:D7:AB:D1:42:8D:BE:C2:77:66:8A:83:FE:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/73b42db1-8b7e-3de3-b15c-a7a1b1499f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:94:be:af:25:69:2f:2b:52:52:15:6e:73:a0:1f:76:1d:
         1b:7d:1e:2f:b6:9a:39:09:e8:12:25:d9:3a:c4:e9:5b:ca:41:
         66:56:59:8f:6b:0b:0a:54:df:03:82:2f:c9:51:1b:51:fb:f7:
         d5:0a:06:e5:97:ab:ea:d2:92:f4:75:b0:39:c7:5c:12:0a:e5:
         00:b8:9e:59:b1:14:fe:4a:60:d6:cd:99:93:35:98:22:00:84:
         57:ee:c1:ce:60:bb:c1:4d:d7:ac:d8:f2:5e:b1:f6:b7:41:da:
         b6:e9:8c:43:d5:e3:4e:32:d2:d5:76:c9:f2:0f:36:3d:44:eb:
         00:2c:8f:ff:6c:b0:99:e9:c7:6a:8b:4b:38:e7:52:cf:9a:07:
         ed:c8:e4:f2:f4:92:a6:56:8c:5d:ca:60:a2:fd:15:71:8c:40:
         b5:f3:a8:36:f4:64:7a:5d:1b:35:26:07:9d:bc:2e:1a:cc:ec:
         0c:d0:95:e9:f1:66:26:07:33:fb:01:bd:13:a4:a8:9c:b1:ac:
         15:90:3e:ad:b3:f6:b3:f0:cf:72:43:15:ee:e4:c6:77:87:52:
         4b:17:ce:2e:a5:9c:9f:d3:30:75:7e:ef:a2:ae:77:51:ff:de:
         74:f6:d9:99:15:62:6f:e7:72:ce:1a:49:bd:a4:ae:8b:61:35:
         86:66:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:43:46 2026 by rpki-client