Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a4f813a4-253a-3580-a606-54e6a36a1eb8.roa
File:                     a4f813a4-253a-3580-a606-54e6a36a1eb8.roa (raw, json)
Hash identifier:          Q3RZZGcaXNTkxnZ5JDtDAk4H1jn6q2qH7mzlVzdDBB8=
Subject key identifier:   2F:8A:AC:7B:73:F5:79:E2:20:FF:68:4C:EF:1C:11:CA:42:48:D9:A6
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA23C8155ECF425EE62480
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a4f813a4-253a-3580-a606-54e6a36a1eb8.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     10557
IP address blocks:        173.245.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:23:c8:15:5e:cf:42:5e:e6:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=200a3055-70be-433e-88e9-10b5d0a5a18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:78:6e:28:3d:85:5c:24:37:f8:50:17:e8:
                    a5:18:56:db:76:26:80:5e:ad:0a:bf:06:b1:67:68:
                    44:59:62:7f:a5:bf:8e:0c:e5:0d:52:b7:07:e5:44:
                    c3:d8:67:16:c7:39:23:02:f1:06:5e:19:5b:08:b1:
                    e1:f8:9b:ac:fe:4a:b8:8b:22:58:67:8f:25:46:8d:
                    1c:bf:07:c3:9a:a0:e2:00:54:35:d2:f5:e1:a9:f0:
                    39:60:ac:60:6e:41:b7:3b:51:9d:6d:d1:30:bd:54:
                    6c:2d:96:b9:70:cf:90:11:d5:ea:ba:e3:7c:48:87:
                    95:eb:f3:09:b6:af:09:e5:a8:5f:0f:f0:3d:64:e7:
                    78:70:62:b5:15:77:07:bc:89:5b:38:90:34:59:94:
                    d4:d9:98:48:2b:93:85:29:60:54:fe:bb:ab:43:88:
                    5b:5c:de:ba:b8:03:56:0a:4a:47:ef:d9:2a:d8:7d:
                    ac:9c:06:91:0a:7c:e4:b3:4d:15:02:51:e2:1c:2d:
                    fb:5e:9b:d2:aa:2c:e6:23:2d:89:ab:28:2e:4a:85:
                    25:82:38:b3:e1:97:3b:28:d1:3f:7c:2b:3b:74:e1:
                    97:24:67:13:a2:4e:a9:01:55:9c:1d:89:08:c7:b9:
                    be:c4:ba:87:d9:82:24:d9:37:4c:73:aa:84:e2:50:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:AC:7B:73:F5:79:E2:20:FF:68:4C:EF:1C:11:CA:42:48:D9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a4f813a4-253a-3580-a606-54e6a36a1eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e2:19:84:cb:1f:cc:4c:b1:b7:1b:d8:0c:02:69:3a:e4:67:
         26:6a:0d:a4:f2:11:f7:0b:47:2b:08:e0:0e:06:d6:ea:a7:32:
         70:bf:a4:bf:e0:62:d6:bb:a9:e8:17:84:6f:a7:83:07:d0:f7:
         d2:41:3a:46:e0:15:e2:1a:5a:86:7a:00:c6:4d:4c:a4:28:ec:
         57:27:d0:6f:28:4a:79:1d:b8:b8:57:9d:d2:d4:85:76:b6:f5:
         dd:aa:3f:05:9a:78:95:67:67:60:43:7b:ac:14:38:77:ff:65:
         61:54:8d:57:00:24:96:c2:ad:7a:5c:7c:26:d0:96:97:02:31:
         08:94:29:fe:2c:7f:b0:fd:85:2f:21:9f:8e:89:90:dc:bd:0a:
         11:e1:cd:9e:63:84:31:d1:92:1a:ec:c0:71:f3:6e:01:87:38:
         33:77:84:21:91:67:10:63:9f:ed:5d:ee:fc:2a:15:02:92:e6:
         27:76:09:a5:7c:70:92:bd:da:94:1f:64:1c:fb:25:9c:9d:ff:
         0f:13:c0:56:a5:a0:43:40:ab:d8:b8:16:54:19:a5:fa:b4:10:
         2c:c2:5d:96:14:1d:fd:3c:78:3d:2b:20:cb:fe:a0:59:a9:a8:
         e6:1f:79:cf:1b:71:11:42:6e:a4:e0:a3:75:69:3a:1e:ed:4f:
         aa:b8:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:36 2026 by rpki-client