Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b38cedbe-a0a8-3545-9b4d-fee4bc4e7c75.roa
File:                     b38cedbe-a0a8-3545-9b4d-fee4bc4e7c75.roa (raw, json)
Hash identifier:          SXDjSaIz1OorlWbYvl4EEXGF9NH0Epu2cuw/U6EvYOQ=
Subject key identifier:   12:77:55:E3:57:BE:7E:07:A0:EC:CB:CD:0F:EA:65:F5:7E:F8:6D:E4
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E33D85975DEC2FE593F913300
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b38cedbe-a0a8-3545-9b4d-fee4bc4e7c75.roa
Signing time:             Wed 17 Jun 2026 14:30:39 +0000
ROA not before:           Wed 17 Jun 2026 14:30:39 +0000
ROA not after:            Tue 15 Sep 2026 14:30:39 +0000
asID:                     44559
IP address blocks:        172.252.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:33:d8:59:75:de:c2:fe:59:3f:91:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 17 14:30:39 2026 GMT
            Not After : Sep 15 14:30:39 2026 GMT
        Subject: CN=d642dd6d-9ef2-41b3-ac46-42b8e99aeb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:e3:9c:e5:59:8b:03:88:f9:ab:73:7d:44:
                    fd:18:93:9c:44:9a:40:9c:c4:e8:78:91:77:31:7c:
                    b8:28:34:4d:4c:03:c7:51:5c:0c:2e:f6:7a:c6:bc:
                    e9:b4:26:2a:90:b2:07:13:a5:76:55:61:86:24:d8:
                    48:2e:d7:fc:ff:0c:cd:cb:42:d7:9e:a5:f0:ac:6e:
                    ec:1f:1b:16:e3:1a:73:84:90:95:1a:06:63:c1:a7:
                    ab:67:96:f6:b8:60:b3:4d:79:e2:d3:cb:fe:4f:fb:
                    50:26:ac:af:a5:02:44:ae:75:cb:90:0d:e4:d0:89:
                    b4:ca:e5:0a:53:6b:be:88:7a:44:b5:92:4f:62:47:
                    c5:92:87:d6:8f:82:17:95:79:ea:56:11:e3:0b:fd:
                    28:9c:d7:69:a6:bc:9f:25:3f:03:8d:96:ab:d6:84:
                    30:52:03:d6:cd:c5:57:b5:33:99:63:e4:8d:43:9a:
                    01:7c:5d:96:a5:81:d6:3e:1b:5e:99:01:b2:71:67:
                    7a:67:7c:04:cc:d7:ff:e2:38:cf:87:c5:27:78:17:
                    33:7f:f4:96:43:79:cc:f4:0c:f9:c9:93:3f:26:48:
                    43:6a:e3:a4:75:94:50:ab:62:6e:0b:48:4d:77:da:
                    63:4d:ef:11:c2:ac:d7:e5:73:15:91:f0:e6:bd:39:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:77:55:E3:57:BE:7E:07:A0:EC:CB:CD:0F:EA:65:F5:7E:F8:6D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b38cedbe-a0a8-3545-9b4d-fee4bc4e7c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:01:90:30:87:0b:a5:23:17:ff:ab:f3:6d:f8:6b:a1:fd:
         e2:b3:7b:75:b9:0d:a5:11:29:c0:91:c6:7d:f4:a5:b1:18:30:
         8a:4e:36:97:c1:34:1f:9a:3d:ad:f9:1a:29:be:b0:5f:82:ea:
         53:2b:fc:57:fc:65:f3:04:4b:cf:b6:3a:0a:34:7a:c7:cd:c4:
         02:77:84:2b:43:6b:fe:c3:32:bb:a6:46:a0:ee:89:a9:4a:f0:
         b0:a6:9b:3f:a6:33:86:cb:be:85:21:e4:b1:90:61:0a:97:04:
         67:c5:b1:19:64:83:cf:87:ba:35:0c:f8:ed:e2:4d:70:9c:da:
         1e:8c:79:03:6f:f1:02:5d:57:82:37:8a:07:99:58:91:3f:b6:
         68:22:a3:8d:d7:e9:48:39:2d:63:7c:9b:48:ff:0d:b2:ac:2a:
         9b:db:54:32:0b:1e:d7:6c:d0:86:44:c3:3e:ab:5e:35:99:6f:
         cf:25:ca:68:0f:2d:68:f3:56:c3:8b:84:5d:39:de:07:10:b8:
         d6:ef:cc:1b:e3:61:f8:20:02:31:2f:db:05:85:aa:2a:88:03:
         51:fa:96:42:44:17:63:b1:95:30:3e:d7:f9:60:96:92:64:5c:
         50:51:5c:27:fa:08:88:85:9e:11:f9:38:3f:a7:78:d0:af:b6:
         82:d9:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:50:03 2026 by rpki-client