Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d13c8dc2-08cf-32e8-850f-89028df779c1.roa
File:                     d13c8dc2-08cf-32e8-850f-89028df779c1.roa (raw, json)
Hash identifier:          +/+rkn2eqKmlewsZvJ2xC5vL0Df21rdurWSyz6dE7Bg=
Subject key identifier:   F3:07:81:AC:37:F3:59:13:35:6B:60:2C:1F:50:2D:C5:DE:A6:1C:86
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1BB8526E683539EB9300
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d13c8dc2-08cf-32e8-850f-89028df779c1.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     10557
IP address blocks:        172.252.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1b:b8:52:6e:68:35:39:eb:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=07283ac3-b921-413c-a0eb-ebf35701132e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:72:a2:b0:c2:64:c8:97:38:eb:1a:c8:1d:
                    f8:91:e7:5f:60:85:7a:11:5e:04:c3:6c:38:2c:43:
                    36:a8:07:4b:54:ad:1e:c1:b3:ee:38:a2:6e:17:47:
                    9b:60:9d:aa:76:36:ec:3b:d8:63:7d:84:83:30:b3:
                    de:5f:cf:a9:09:73:23:06:1e:d6:d0:b3:44:ae:1c:
                    6a:93:4e:6b:9a:f6:81:e3:a9:e8:1b:25:8b:ac:af:
                    58:08:1f:50:64:ff:e4:14:0d:00:0d:5d:de:66:43:
                    ca:37:c6:1a:02:cb:86:9b:5e:6c:ac:ad:cb:22:c5:
                    36:c0:38:1a:19:36:a4:52:7e:25:bf:07:d9:0c:b2:
                    df:b8:55:43:4b:39:4d:c1:15:47:cf:88:ee:29:01:
                    90:ab:05:e4:a1:e8:31:4d:0e:ad:1f:d2:99:3d:67:
                    52:29:18:ca:2d:10:0c:53:42:71:3b:76:da:a9:f7:
                    6f:71:0e:90:19:4a:45:53:9e:1e:33:5a:1a:b8:6c:
                    b4:f5:c4:35:87:6b:63:7a:ff:d8:a6:3d:96:10:6a:
                    c8:a4:06:21:00:15:4b:d0:c7:32:04:27:0c:43:b4:
                    b4:37:4e:2b:af:57:63:44:32:e4:01:a3:e3:ae:cf:
                    e5:bf:a7:46:2a:fd:0a:39:77:96:95:35:51:65:9f:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:07:81:AC:37:F3:59:13:35:6B:60:2C:1F:50:2D:C5:DE:A6:1C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d13c8dc2-08cf-32e8-850f-89028df779c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4b:34:bc:97:3d:95:b7:49:58:f4:5d:79:64:01:9c:ef:1a:
         eb:d4:52:50:f8:f8:e6:fe:dd:21:b3:7e:39:70:17:b2:ae:5e:
         8d:5a:8b:5b:d3:f3:e3:8b:22:48:fb:a6:63:aa:63:ba:e8:1e:
         d5:a5:37:9c:62:9a:4e:7c:a0:c6:e1:af:17:01:57:07:fc:dd:
         4a:4a:74:5a:58:ee:98:92:46:7f:94:ca:54:4c:c9:18:8a:a7:
         a0:77:e7:56:50:a8:54:5f:6c:7f:da:e9:76:2b:0b:96:d2:40:
         9c:3c:60:b8:ec:08:ef:08:cc:c9:88:ba:3e:79:03:3b:15:c8:
         68:64:43:6c:51:d7:e8:b1:ef:63:60:d8:a1:64:be:5d:a3:f9:
         53:75:42:30:58:71:73:be:fe:0d:15:d6:52:f0:1b:a2:64:d6:
         11:e8:17:28:44:07:c4:15:5b:d4:27:9c:02:43:3e:64:ed:31:
         f7:d3:76:11:01:86:1e:44:99:5f:f4:01:9a:cb:68:e9:6d:3a:
         15:bc:90:12:4c:ae:b2:72:36:d3:75:10:e4:bd:d4:dd:31:cb:
         ae:e6:98:bd:1f:c3:b1:23:c3:6b:5c:78:59:9c:4d:b8:d5:d9:
         4b:7d:e8:a8:aa:3e:10:77:5b:4c:81:b9:38:e9:9f:bb:28:e2:
         ed:96:07:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Nuhu4Um5oNTnrkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
MDcyODNhYzMtYjkyMS00MTNjLWEwZWItZWJmMzU3MDExMzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzShyorDCZMiXOOsayB34kedfYIV6EV4Ew2w4
LEM2qAdLVK0ewbPuOKJuF0ebYJ2qdjbsO9hjfYSDMLPeX8+pCXMjBh7W0LNErhxq
k05rmvaB46noGyWLrK9YCB9QZP/kFA0ADV3eZkPKN8YaAsuGm15srK3LIsU2wDga
GTakUn4lvwfZDLLfuFVDSzlNwRVHz4juKQGQqwXkoegxTQ6tH9KZPWdSKRjKLRAM
U0JxO3baqfdvcQ6QGUpFU54eM1oauGy09cQ1h2tjev/Ypj2WEGrIpAYhABVL0Mcy
BCcMQ7S0N04rr1djRDLkAaPjrs/lv6dGKv0KOXeWlTVRZZ++AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMHgaw381kTNWtgLB9QLcXephyGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZDEzYzhkYzItMDhjZi0z
MmU4LTg1MGYtODkwMjhkZjc3OWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdLNLyXPZW3SVj0XXlkAZzvGuvUUlD4+Ob+3SGzfjlwF7KuXo1ai1vT
8+OLIkj7pmOqY7roHtWlN5ximk58oMbhrxcBVwf83UpKdFpY7piSRn+UylRMyRiK
p6B351ZQqFRfbH/a6XYrC5bSQJw8YLjsCO8IzMmIuj55AzsVyGhkQ2xR1+ix72Ng
2KFkvl2j+VN1QjBYcXO+/g0V1lLwG6Jk1hHoFyhEB8QVW9QnnAJDPmTtMffTdhEB
hh5EmV/0AZrLaOltOhW8kBJMrrJyNtN1EOS91N0xy67mmL0fw7Ejw2tceFmcTbjV
2Ut96KiqPhB3W0yBuTjpn7so4u2WB2U=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:04 2026 by rpki-client