Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8cfac6a4-aaa1-3178-9921-6233000d9b3f.roa
File:                     8cfac6a4-aaa1-3178-9921-6233000d9b3f.roa (raw, json)
Hash identifier:          8vZx55pbGkjOgiOpuZ7LVJo4Vfsza1+80QLmyV1RLLg=
Subject key identifier:   B7:A9:1C:77:8B:85:C2:83:94:41:2E:3A:AE:97:65:9C:A4:DF:C9:5A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9F789FAFE01EA41689C80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8cfac6a4-aaa1-3178-9921-6233000d9b3f.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     834
IP address blocks:        172.252.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f7:89:fa:fe:01:ea:41:68:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=2230d298-74cb-426e-83fa-90594e4899c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:57:86:58:7b:b8:34:43:f1:c0:34:e4:1a:8e:
                    ef:3d:6e:3d:17:f6:bf:ef:b8:55:1d:3a:ef:15:b6:
                    dd:86:ab:8f:f2:de:5a:34:16:f4:30:9f:f9:6c:84:
                    96:45:f2:4f:d3:bc:07:30:d7:b0:50:14:03:d8:92:
                    4f:d4:c7:35:78:1f:da:ec:25:7d:21:40:cc:bc:43:
                    3b:8f:08:f7:87:e6:9f:8f:32:b5:59:76:1a:e1:02:
                    42:92:36:7f:7e:51:52:f1:22:77:e4:eb:71:b9:98:
                    be:70:5f:43:ca:9c:a2:c9:6b:0e:bd:e3:d1:19:43:
                    38:82:e1:11:1b:b9:cf:7b:63:e1:91:fb:c8:8c:66:
                    8e:97:9f:a5:20:81:08:d3:b2:36:4b:e5:9d:c1:4b:
                    fe:f4:6e:f5:30:38:43:a3:be:20:1c:d6:4a:11:54:
                    cb:5b:17:fc:42:7c:37:72:54:b6:2a:f6:c2:e5:91:
                    85:cd:34:c3:fc:44:11:ea:3f:11:55:ce:aa:2d:77:
                    f9:ee:1e:1f:1d:28:2f:f4:29:4a:00:20:48:1b:19:
                    e6:cf:c5:25:30:41:46:85:cc:76:9d:0a:22:1b:f3:
                    27:5e:60:24:71:e7:2c:29:0d:20:16:69:4e:75:40:
                    e3:c1:68:d5:14:5c:79:55:c2:a0:b9:11:d3:04:81:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A9:1C:77:8B:85:C2:83:94:41:2E:3A:AE:97:65:9C:A4:DF:C9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8cfac6a4-aaa1-3178-9921-6233000d9b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:0c:f6:ed:50:04:12:7f:47:59:47:1e:da:20:1e:7b:6b:
         2b:7c:43:18:ad:7c:e5:49:62:57:04:7b:20:15:5c:13:81:7a:
         15:12:42:08:c3:0a:d7:cb:8a:dc:f4:06:c9:ec:88:9c:7f:5c:
         c1:37:58:ea:60:9d:de:42:2c:ea:9d:24:ae:33:30:c4:a2:c8:
         e0:00:8e:5d:d9:41:3f:51:3c:7d:94:ca:ae:6e:bd:e3:62:bc:
         76:87:d5:95:31:42:4a:b9:b8:de:f5:b7:db:f3:71:08:ee:4d:
         53:1a:ca:bd:5c:9f:c2:61:a1:65:e3:13:c9:56:6d:9f:d0:4b:
         c7:84:17:ea:3b:d7:59:94:af:cf:e5:7b:20:83:fd:8c:04:39:
         67:65:6b:16:4c:f6:bd:c3:2d:32:97:3d:87:a3:e8:18:54:e4:
         93:87:02:dd:81:d1:16:f5:73:c4:ab:57:39:41:a7:9f:cf:98:
         19:6b:93:ff:9f:24:eb:c2:bf:4a:b4:96:7c:a5:3b:3b:c9:38:
         ea:ae:c1:c4:6a:a7:8d:f7:a9:8d:bd:1b:99:67:aa:12:ce:91:
         67:11:97:cf:13:d6:ab:46:a4:d4:13:da:39:ef:c2:50:1e:2b:
         09:65:2d:a4:29:40:85:78:44:d8:62:0e:1f:44:71:ad:84:a6:
         f2:06:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:36 2026 by rpki-client