Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa
File:                     b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa (raw, json)
Hash identifier:          BFIE1k2+BRInrjawrG+hjn4fGWrBbkzMROxDdblvnwA=
Subject key identifier:   E7:E4:AC:62:BD:3C:91:2A:33:85:52:D5:B3:68:FF:A7:01:86:69:9A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1B045282DD610EE2F100
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        172.252.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1b:04:52:82:dd:61:0e:e2:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=e51598ad-d971-434d-967c-b35e378a4a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:36:ed:84:2f:71:a3:92:a9:bb:41:6a:27:
                    98:a3:31:2f:a0:f8:13:3e:1f:7d:81:e6:9c:b9:63:
                    68:a2:a8:e4:0b:bd:e2:91:0f:78:d1:a6:ca:7f:f6:
                    f8:4b:fc:c7:92:53:cd:50:ed:c8:ca:5a:81:a9:cd:
                    e3:93:b9:a2:61:64:ad:14:e7:39:57:54:30:25:cb:
                    ff:c2:ca:0f:dc:82:06:60:7d:d6:bd:5b:6a:7e:5d:
                    68:ae:34:7d:4e:78:e1:08:92:1b:64:71:eb:7c:bb:
                    5f:f0:28:bc:f1:1a:e6:34:3f:6b:cc:d2:14:39:12:
                    49:e8:d4:86:4d:ac:03:ea:6c:4e:10:d4:7c:6c:aa:
                    c7:00:ab:7b:bb:e5:f4:21:5a:16:47:90:2a:8a:13:
                    fb:31:ad:e0:06:82:1e:23:32:86:b6:18:54:01:00:
                    89:a3:80:41:be:ad:31:fb:ac:0a:15:b1:3b:dc:06:
                    9d:98:4a:43:b5:8b:1a:a1:f4:c7:f6:72:f1:c4:36:
                    d3:49:36:46:6c:29:e7:36:28:e5:10:d9:57:88:8e:
                    15:fd:f3:20:90:ea:46:45:dd:05:a1:ab:d7:c7:c0:
                    cf:99:e1:79:8d:1e:9a:c0:f9:09:ff:b0:08:88:48:
                    a8:04:e8:1a:8b:db:90:56:0a:a5:c8:08:b4:bd:c8:
                    c4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E4:AC:62:BD:3C:91:2A:33:85:52:D5:B3:68:FF:A7:01:86:69:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:67:ee:43:e6:3f:a6:01:85:7b:d6:e2:a3:87:70:99:38:a6:
         b4:ec:76:8d:b9:01:99:48:bc:9b:e5:2f:a7:34:44:ae:1a:9c:
         51:28:00:e8:e0:a6:5e:92:ec:41:b5:97:d6:e0:3d:1c:c3:95:
         a9:98:61:8d:f5:fd:86:ec:12:1f:67:49:7e:65:96:a6:e0:d9:
         8d:2f:4e:f4:73:4b:6c:e9:68:8d:7e:27:16:39:6c:d2:57:38:
         22:47:7a:94:b7:ab:8e:de:c9:81:47:f6:f2:db:62:a2:ae:1b:
         fd:61:a1:76:47:a9:64:89:8c:c3:f4:1c:71:bb:09:13:a4:89:
         c1:b1:ce:cf:da:6a:6a:9e:85:24:c9:30:fd:52:c9:52:5f:cc:
         62:88:7e:63:e7:52:ca:5a:8d:49:63:f9:0c:2d:a2:75:21:71:
         0f:5b:a8:2b:64:c6:80:f1:03:0b:78:a5:9d:4d:66:1f:be:81:
         57:88:81:d0:56:71:ae:30:77:eb:98:79:8b:a7:39:1a:b4:37:
         87:89:d0:88:99:86:df:11:d6:0e:84:0f:74:d2:e0:42:41:3a:
         d4:fd:a7:84:5c:0f:03:aa:85:4b:b0:45:34:46:12:39:40:01:
         2d:6e:e5:4d:a0:51:b3:e3:dc:51:30:72:48:9b:49:a6:fc:04:
         56:25:a3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:42 2026 by rpki-client