Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aa19eea1-48d0-3e65-81d4-1f2fbf9021ae.roa
File:                     aa19eea1-48d0-3e65-81d4-1f2fbf9021ae.roa (raw, json)
Hash identifier:          NlwY01qRsIdialsWGVr7frxOJSF3u9ZGcDlCQ8/6y2w=
Subject key identifier:   C7:19:A6:97:E2:4E:94:AE:EE:4F:DC:54:3D:08:E7:4B:51:ED:EC:48
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1BDB03677F9080DA0B00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aa19eea1-48d0-3e65-81d4-1f2fbf9021ae.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        172.252.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1b:db:03:67:7f:90:80:da:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=4e9c78ba-9765-4900-a6f7-f82427478f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:df:d9:3e:9f:53:9f:47:45:c6:29:6a:f3:
                    d9:7b:52:a0:bc:89:28:c2:71:18:ca:64:03:20:14:
                    60:f1:bf:af:15:33:04:73:01:d6:b2:13:85:c6:94:
                    15:29:f1:56:75:3b:e6:ac:c0:4b:86:61:59:41:4c:
                    2f:a8:b5:89:4a:06:b3:52:6f:80:c0:e4:25:1b:fd:
                    c6:b1:e1:22:fb:8b:75:dd:0f:8d:64:0d:9b:80:91:
                    8d:b4:20:05:09:8c:76:c1:5d:b6:0a:06:a3:94:e4:
                    0f:39:fc:96:92:a0:97:f7:85:40:96:8e:fd:43:93:
                    03:69:12:ba:ab:67:be:92:1d:ea:3f:1d:df:53:3f:
                    95:94:7a:a6:cb:b6:4d:c4:11:dd:9c:ab:f8:0f:85:
                    b9:ad:d3:36:43:d8:64:34:fc:46:47:c9:b2:6e:1d:
                    0e:46:b9:85:b3:7f:71:19:e0:c6:b6:00:e4:a0:d9:
                    38:26:56:1c:5d:e0:16:37:92:13:99:96:0f:e9:c3:
                    5e:93:cb:a9:d5:2f:fa:50:ec:ab:71:14:4c:9e:7c:
                    c9:96:21:5f:dc:43:57:7a:35:43:6c:56:9a:69:56:
                    25:6d:04:53:78:b5:42:8a:64:e9:20:23:4a:44:63:
                    6f:f5:b2:3a:7b:ee:76:ec:8e:28:c1:24:07:41:e5:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:19:A6:97:E2:4E:94:AE:EE:4F:DC:54:3D:08:E7:4B:51:ED:EC:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aa19eea1-48d0-3e65-81d4-1f2fbf9021ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:90:b7:18:71:1c:46:8b:ea:69:cb:cf:06:06:b8:7e:f0:f4:
         da:ad:b2:41:90:10:f4:af:18:5b:d7:70:3a:ae:93:8c:3d:79:
         e9:a9:97:56:46:d8:d8:83:c1:00:d7:4c:da:4a:07:19:5d:35:
         45:22:a3:73:77:84:6d:80:5c:99:b7:57:bd:63:23:ee:38:d5:
         e4:00:00:22:4f:a8:7f:f8:fb:58:35:c6:6b:e7:68:cc:89:2b:
         70:b9:10:04:4f:33:7b:f5:45:66:c5:b4:de:5b:69:a8:ad:22:
         49:8a:6b:85:d6:1e:19:21:ad:9d:cb:92:71:21:bb:68:d9:92:
         41:6f:8c:a7:a3:b3:e5:3e:2f:2c:62:9d:66:6a:30:11:47:6f:
         86:52:c3:64:2d:51:70:46:59:e3:d1:45:4a:1c:c2:48:c1:a4:
         be:97:63:77:a5:3a:01:ea:63:cf:02:97:24:c7:57:ce:eb:b7:
         cb:fd:89:de:8b:fd:e7:47:7d:5a:dc:08:b2:46:08:df:f9:0d:
         0a:a3:79:89:ee:8b:62:64:a3:8a:fc:6a:4a:fb:a3:7f:1a:5c:
         a9:02:47:2e:ff:4a:24:88:3b:bf:e2:fb:51:7e:cf:64:b7:20:
         79:d2:95:22:c7:6b:99:27:f5:cf:0b:d9:9e:4b:0c:d2:3f:f6:
         84:43:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:04 2026 by rpki-client