Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/94bb68d6-758b-37b5-b069-e9d252b45b58.roa
File:                     94bb68d6-758b-37b5-b069-e9d252b45b58.roa (raw, json)
Hash identifier:          QTcMU0h5J07+ELUNjzMl8vI08sjl7QW5661iwqjs3gk=
Subject key identifier:   EE:62:02:BE:FF:02:CD:DD:AC:62:8E:D3:82:6D:47:81:C5:26:AD:35
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F0ED24453590DC5222740B740
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/94bb68d6-758b-37b5-b069-e9d252b45b58.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     29802
IP address blocks:        172.252.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:44:53:59:0d:c5:22:27:40:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=b18c7c13-9bab-4d93-8e80-45fb9cd74136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:78:71:45:4a:a5:15:f2:31:2c:9f:88:f8:
                    9a:19:fa:32:a5:e0:23:d3:cd:f9:e4:59:b0:54:5d:
                    03:b4:3b:c0:09:34:c4:32:6b:24:56:d1:f0:6f:ca:
                    a2:7a:f5:10:4c:83:e3:d4:2c:7a:f0:d5:7d:06:a6:
                    3b:f1:db:06:a5:91:4f:05:1f:2f:b5:d5:9e:2e:f9:
                    e5:fb:b4:ec:3a:56:2f:1b:c6:58:f9:6c:cb:d6:cc:
                    01:28:72:d0:3d:05:a0:c7:cf:3f:cf:8d:39:2a:85:
                    6d:c6:c3:67:b7:0a:63:6b:76:29:2f:ce:96:91:90:
                    96:17:42:a1:81:20:29:13:94:f2:6e:0a:bf:ad:4d:
                    5a:a5:66:69:6a:79:38:a0:e3:59:c1:80:35:fd:bc:
                    60:fd:1a:fe:74:0c:8f:bd:36:69:0d:09:f1:2a:a3:
                    de:ca:69:2b:c7:d6:4a:09:4c:f5:57:7e:eb:9c:62:
                    34:b4:90:9d:5c:af:1f:04:97:25:29:ee:0b:09:58:
                    a2:79:96:af:2d:e3:5d:69:60:f0:3d:b2:ec:cc:99:
                    6e:61:ab:f6:82:94:85:5d:94:50:78:41:9e:09:08:
                    b1:5c:fb:2e:90:29:9e:4f:f2:7c:8e:ed:56:29:67:
                    2f:91:c9:8d:c7:c2:f1:c0:21:a3:20:68:77:d9:13:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:62:02:BE:FF:02:CD:DD:AC:62:8E:D3:82:6D:47:81:C5:26:AD:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/94bb68d6-758b-37b5-b069-e9d252b45b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c7:4b:b4:8d:4e:fa:2f:c1:5b:5b:33:ee:0a:a9:a4:0b:6c:
         44:b9:85:1a:38:41:8b:4c:55:f6:c8:8e:66:ab:8e:2f:81:29:
         03:58:d1:d5:7f:63:12:19:79:bc:b9:1a:c6:ad:95:dd:3f:c8:
         b6:64:32:51:42:a0:13:89:ad:08:48:a6:9c:4e:d3:7d:51:d1:
         f1:c8:b4:f6:e5:be:dc:c1:ee:a2:25:4f:27:a2:9b:33:dc:2b:
         32:5b:8b:6f:f1:fd:26:88:97:a0:76:ec:1e:77:ac:af:3c:72:
         fa:1d:a2:9a:a8:92:8b:dc:82:94:a2:40:73:ff:2b:7d:96:a6:
         87:3e:3e:49:2b:9a:93:ee:a4:af:96:c9:de:65:30:c6:76:47:
         48:15:4d:31:e1:c2:75:79:99:2f:de:93:99:3d:1e:05:18:bf:
         c8:59:8e:38:a7:08:39:af:04:de:ec:5a:b9:83:1f:fb:b1:74:
         1d:78:eb:46:40:99:17:bb:a2:4a:0e:18:5e:80:ef:55:8b:f7:
         47:da:b2:ae:31:d9:2a:f8:79:2a:da:f5:1b:ac:7a:cc:22:df:
         39:5e:e6:af:af:fe:35:7b:54:4a:b5:4b:d3:1e:26:c2:d0:cc:
         73:8f:92:74:b7:90:b9:dd:95:43:06:95:a0:d2:d2:90:26:f4:
         0a:a1:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:34:34 2026 by rpki-client