Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/87685c54-b552-3387-b573-50848c8739cc.roa
File:                     87685c54-b552-3387-b573-50848c8739cc.roa (raw, json)
Hash identifier:          KzQrs/sj6W7IRZfkamWnqV0RxlSN6oo7UJMUeT5ORsU=
Subject key identifier:   8F:30:36:B0:E0:2B:D6:54:50:B2:EE:F9:D4:07:76:9A:75:EE:78:83
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA260490775EE4D12C5A80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/87685c54-b552-3387-b573-50848c8739cc.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     174
IP address blocks:        172.252.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:26:04:90:77:5e:e4:d1:2c:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=61089c91-191d-43a7-9d79-83f6b30a498a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a7:42:9d:2c:08:21:7d:d1:fc:19:c2:36:5c:
                    35:1c:c3:c6:9e:cb:f5:28:2b:cd:fa:d9:02:5a:aa:
                    87:71:ed:37:8b:43:25:93:b8:c6:8e:8e:d1:3a:2f:
                    0a:8e:cf:70:8b:78:b8:74:6d:16:15:a7:4c:13:91:
                    22:f4:96:11:de:ec:30:48:79:ce:15:aa:f9:53:e6:
                    b7:ca:80:14:69:28:45:ab:8f:ef:b4:07:ca:43:77:
                    c0:b1:1a:56:17:99:b2:56:75:88:04:0a:69:c3:97:
                    5d:23:c0:07:29:b4:38:3a:05:90:1d:03:f0:38:14:
                    cd:f6:c5:2f:b4:56:c7:3b:d1:de:4a:92:dc:da:5c:
                    ba:dd:22:5e:35:73:72:42:c9:37:94:10:72:ba:f9:
                    8d:5e:20:df:b9:85:45:59:75:0e:ed:73:bb:3a:c9:
                    1a:b9:72:2f:05:74:c2:77:4a:d5:0d:f0:0c:de:9a:
                    22:b9:00:ad:c0:b2:1d:47:d8:06:d9:e8:ab:26:12:
                    cc:a6:b2:2a:b8:02:ee:89:76:ff:ab:d5:c5:f3:a7:
                    aa:fe:33:ff:cf:77:35:d5:ee:2a:41:b3:99:f1:9e:
                    99:d1:06:d4:a2:92:83:94:45:8f:ab:46:f8:94:87:
                    11:98:10:d4:29:54:09:3c:96:22:f1:38:c0:53:fa:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:30:36:B0:E0:2B:D6:54:50:B2:EE:F9:D4:07:76:9A:75:EE:78:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/87685c54-b552-3387-b573-50848c8739cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:dc:bb:e0:8e:e0:72:28:f4:17:16:2e:78:7a:ef:44:43:16:
         f6:f5:e5:37:6e:1e:3f:f4:03:2c:90:41:b0:47:f6:f9:d5:cf:
         d6:42:01:65:94:c6:4c:86:08:05:9b:87:7b:38:0e:cb:52:a9:
         e9:b8:6d:09:49:31:3a:12:b2:a3:f5:25:68:33:b4:e7:52:18:
         2d:27:8b:f9:aa:3e:66:0a:79:fe:28:d0:c9:05:38:0c:c3:6f:
         7e:fe:a9:f3:fb:c3:19:85:73:84:8d:b9:46:88:5b:e1:f9:f8:
         5b:37:34:8c:18:89:75:3c:a4:e1:61:d1:0e:41:b6:b2:fc:85:
         18:9e:86:54:9d:78:34:48:26:67:29:bf:98:20:14:3c:aa:83:
         e0:ce:13:bc:db:dc:48:6b:5d:5d:3c:f1:a2:b1:57:1f:1e:ce:
         5f:10:ed:01:dc:fd:c9:89:c2:f4:dd:44:d4:88:d6:27:7a:5a:
         fb:fe:99:6c:cc:f5:4d:c6:48:2b:7a:05:3e:b2:d6:84:73:23:
         1f:c5:ec:cb:28:5f:c4:a4:f1:ed:78:85:6d:31:cd:15:44:37:
         09:a5:71:22:99:65:c7:e4:de:1a:fa:54:c4:8a:2a:ec:80:2f:
         34:41:95:6f:ee:b6:48:29:10:06:4f:fd:aa:d9:8e:28:ac:0f:
         a1:49:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:57 2026 by rpki-client