Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9864f8f5-04dc-3949-89c7-8fba37ecb219.roa
File:                     9864f8f5-04dc-3949-89c7-8fba37ecb219.roa (raw, json)
Hash identifier:          YaCf0sHnNlx349yPBgA7ZKZXjPWJJ5BBp0HnXL1+U6c=
Subject key identifier:   F5:FA:F2:3D:52:0B:99:D0:AE:EA:47:16:A6:0A:F9:25:45:22:E2:1C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1CFEABE6346DB6514980
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9864f8f5-04dc-3949-89c7-8fba37ecb219.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        172.252.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1c:fe:ab:e6:34:6d:b6:51:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=ba097ed3-9a5d-40aa-8cfb-8f725e48883d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:b7:19:a8:3a:5b:34:5f:99:df:d3:5f:3e:
                    1c:48:41:29:56:97:5b:9e:ed:3c:47:a8:5a:b3:bc:
                    a9:6f:c4:82:c3:62:ba:5e:f8:04:b2:dd:c4:60:51:
                    9b:c4:cb:4c:a8:f9:25:42:f1:25:fb:ab:e6:92:4f:
                    a1:00:59:41:6d:8c:30:2c:e5:6a:a5:6a:bf:23:06:
                    d2:c6:ab:2b:b1:19:09:99:ae:ac:7c:41:e3:ab:50:
                    1b:9e:e0:b8:30:5e:31:c1:e5:53:7e:53:98:7a:36:
                    79:df:59:7a:73:01:a1:c5:80:65:4a:e0:5f:bb:04:
                    21:ad:2d:68:65:c3:3b:f3:40:bc:b3:57:af:2d:c8:
                    ce:ba:7e:be:99:ac:ea:66:cf:b6:45:0c:32:83:ed:
                    c1:40:3c:03:c7:72:13:2f:0a:9f:fe:2f:2c:38:86:
                    c0:32:ad:1b:3b:95:da:51:fe:84:d1:c8:be:6e:ba:
                    df:9d:53:c3:8f:31:6d:f9:35:de:fa:75:10:dc:fc:
                    36:25:e8:6b:2b:21:43:5c:51:10:36:bd:c2:b4:07:
                    d1:c0:27:6c:7a:91:b6:d1:1c:a3:0e:29:14:44:02:
                    12:39:4e:99:ec:fb:46:00:c2:a5:8b:22:d9:71:4c:
                    c8:ee:c2:81:4d:5a:8c:7e:b9:b6:34:e2:ab:50:9c:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FA:F2:3D:52:0B:99:D0:AE:EA:47:16:A6:0A:F9:25:45:22:E2:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9864f8f5-04dc-3949-89c7-8fba37ecb219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:52:aa:7d:ae:76:a6:1f:97:26:9e:d9:a1:79:0f:7a:3f:df:
         8e:f3:60:72:0b:09:d7:27:6e:bd:6b:c9:dd:0b:a0:a2:20:2f:
         a3:d7:22:63:30:02:d3:1a:06:3d:68:04:7a:ee:5e:70:d9:20:
         b2:a6:3e:f5:65:f0:e3:44:01:13:05:ce:3c:70:cb:3b:70:40:
         95:f8:d1:aa:3c:a9:8d:1c:e0:50:4d:dd:4c:7d:f2:c7:fc:57:
         91:31:f3:f6:6c:0e:64:3d:25:36:dc:dd:9e:7a:e4:24:6a:24:
         96:4f:65:84:f8:46:32:01:12:d0:24:cc:7d:40:79:a9:c6:5a:
         b7:7a:c6:52:4a:96:d2:15:af:b2:af:21:8c:e0:9c:ca:c9:43:
         12:26:2d:a6:c1:8c:09:df:ea:34:29:77:96:03:95:9a:93:0d:
         70:9c:cf:3b:ea:63:98:d6:f4:fb:0a:54:e6:4a:79:56:c7:11:
         72:60:a0:e1:df:8a:8d:84:04:0c:cb:2a:bc:8f:6c:49:85:ab:
         d5:18:40:4f:42:6e:58:98:8f:ab:fc:fd:48:74:09:75:c5:b8:
         5f:ed:17:18:c9:74:46:d0:c3:a4:1c:06:e8:d3:6c:e7:6c:5f:
         60:6e:7d:1f:a9:d3:05:01:a0:98:cb:01:04:9b:ba:cb:28:b2:
         26:60:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:07 2026 by rpki-client