Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c629ec6b-b34c-391b-8c1a-ef66523ce881.roa
File:                     c629ec6b-b34c-391b-8c1a-ef66523ce881.roa (raw, json)
Hash identifier:          4ebuaFK7lAOEk9XKuBVfU9q4wARcL1u0sFQ3HxBSzB0=
Subject key identifier:   CE:0E:76:A1:EE:27:40:DE:02:E7:7C:BA:AA:43:27:BA:E4:3B:F9:32
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA28D135E74D9A21D04080
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c629ec6b-b34c-391b-8c1a-ef66523ce881.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     6939
IP address blocks:        172.252.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:28:d1:35:e7:4d:9a:21:d0:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=42558b3d-ad0f-486e-8683-55da8a6eac50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:9e:26:15:dd:c4:28:2d:1d:d5:85:64:8e:
                    5a:5d:cd:d6:10:4c:bf:cb:3e:d5:cf:09:51:78:75:
                    9c:6a:00:e0:01:89:3c:45:e4:e5:1c:e2:c2:dd:23:
                    59:5f:42:2d:07:ce:72:cc:85:9c:12:74:11:69:12:
                    0d:3f:74:34:c6:4e:69:eb:af:f9:20:60:ef:8d:50:
                    bc:86:c9:da:b8:1d:0a:21:f3:a1:5f:2e:7d:7a:bb:
                    15:19:99:42:db:d4:ce:8f:fc:f9:0a:e2:82:32:f6:
                    ad:d2:44:84:80:d0:12:7f:46:23:1b:ef:00:37:75:
                    d6:ee:64:fa:66:cc:94:3e:5c:87:4d:d5:b9:43:f3:
                    bc:99:5d:a1:9b:5a:cc:79:d0:c1:58:46:5e:68:9a:
                    35:ad:0f:8f:88:e5:f9:6b:1b:27:99:80:6f:87:08:
                    d3:b0:8b:c6:c2:8b:e6:98:8f:c9:2d:b6:c1:ce:c8:
                    9d:e3:c1:18:35:08:a1:83:44:b0:ff:d1:e0:4b:c1:
                    bc:60:14:05:65:13:d5:cd:ed:98:09:55:7a:d3:c7:
                    90:ab:ae:36:b3:77:91:61:0a:aa:d6:51:da:aa:d1:
                    69:3e:fa:ec:9a:00:00:ac:e0:0f:0b:51:34:f7:d2:
                    73:86:e2:f5:5d:29:95:f7:86:5f:e9:b0:c7:55:16:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:76:A1:EE:27:40:DE:02:E7:7C:BA:AA:43:27:BA:E4:3B:F9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c629ec6b-b34c-391b-8c1a-ef66523ce881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b6:ed:fb:40:8a:cb:f9:1d:05:89:03:89:e7:c2:68:45:fa:
         5b:a8:0b:d1:c0:00:d9:60:ae:4b:7d:ed:8b:2f:66:9b:fb:36:
         3b:d2:6e:35:d1:48:78:54:48:ce:42:f0:a4:f3:c1:9e:85:88:
         d1:ad:a3:5d:9b:22:ef:1d:80:8e:7f:db:13:ee:49:6d:38:42:
         c0:2d:3b:57:94:f4:02:25:e3:44:7b:fb:ce:79:8a:8d:c4:fd:
         81:01:fb:08:32:c3:6f:51:5b:3f:fb:a6:b6:66:04:dc:81:2d:
         15:fa:37:73:29:a3:dd:64:4c:af:9e:a2:16:7d:a9:14:22:66:
         29:de:6e:35:b4:08:a0:ac:64:03:82:69:22:62:97:d2:57:8c:
         f0:77:3c:3c:64:00:9f:6e:63:6d:85:b4:58:77:5b:ba:e0:ae:
         d8:0e:ef:6b:25:87:c8:34:4b:9d:e1:96:4b:ee:82:88:15:e4:
         e8:07:49:c4:2b:00:60:f4:21:83:f4:27:96:fd:a3:76:1d:f1:
         05:b1:57:0a:ef:59:5f:c4:0e:d3:9e:39:1a:eb:6f:ec:98:1e:
         d8:9d:16:9a:b1:10:08:15:48:ec:3b:56:39:1c:d1:97:e7:a0:
         c9:0d:6f:1a:f0:e4:a7:6f:8c:15:1a:e9:7e:2a:c7:2c:91:8f:
         91:bd:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:55 2026 by rpki-client