Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2c2a70a6-54c6-3d92-a7da-27d290919ecc.roa
File:                     2c2a70a6-54c6-3d92-a7da-27d290919ecc.roa (raw, json)
Hash identifier:          GQp1g8OVP8pZBeuZI3E8YsGzol4Gc97xk3TLz0nTEic=
Subject key identifier:   B7:56:E6:41:1D:91:E2:9A:80:02:0B:36:13:3B:0A:31:22:A9:B4:8B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D9851A1E4DDC3E2C2EB355600
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2c2a70a6-54c6-3d92-a7da-27d290919ecc.roa
Signing time:             Wed 22 Apr 2026 21:28:55 +0000
ROA not before:           Wed 22 Apr 2026 21:28:55 +0000
ROA not after:            Tue 21 Jul 2026 21:28:55 +0000
asID:                     400402
IP address blocks:        172.252.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:51:a1:e4:dd:c3:e2:c2:eb:35:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr 22 21:28:55 2026 GMT
            Not After : Jul 21 21:28:55 2026 GMT
        Subject: CN=fb82c05f-79c0-45b9-8b66-d612242d8761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:fc:50:4a:30:e3:a3:34:7d:13:bd:1a:55:
                    c3:df:d4:b5:a6:5d:54:25:d7:6e:5f:00:5d:f5:0a:
                    a9:d2:de:58:6e:83:a5:bc:cd:b6:df:eb:5f:80:f2:
                    6c:e0:e1:98:94:7d:3b:24:01:11:2a:f6:a5:d3:c1:
                    cf:8d:3a:f0:34:1c:c5:cb:12:dc:a6:c4:fb:a8:f4:
                    2b:e9:d8:5a:ed:46:7b:38:ec:28:44:a3:0f:91:23:
                    47:22:7c:b2:64:31:60:c3:50:94:b3:d4:49:c3:51:
                    8a:09:e3:e7:70:b1:76:81:e1:9f:ef:0c:14:96:1f:
                    62:18:97:40:90:af:25:a5:d0:86:7a:c0:ad:b1:07:
                    bd:cc:1f:ad:53:07:ed:5d:c9:c8:a1:57:e5:1a:5a:
                    60:51:12:41:9b:33:24:49:8d:82:2d:20:4a:fb:52:
                    86:22:54:4e:aa:84:20:cd:dc:eb:7c:8d:e2:bd:b2:
                    a7:97:05:87:33:59:0c:f5:a6:54:b0:3a:31:b4:77:
                    17:27:06:d6:62:99:9a:e3:45:c7:96:4d:9c:cb:6e:
                    09:30:ba:25:84:58:46:c7:7b:3f:22:f9:62:e5:3f:
                    16:dd:a6:1b:76:fb:37:d6:ce:36:d0:3e:72:24:90:
                    93:b8:0a:b3:c2:bf:05:21:74:e2:91:50:af:c3:2b:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:E6:41:1D:91:E2:9A:80:02:0B:36:13:3B:0A:31:22:A9:B4:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2c2a70a6-54c6-3d92-a7da-27d290919ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ed:87:06:34:85:74:af:3e:b0:02:c4:0d:2f:75:fe:d8:e5:
         5a:52:dd:f2:5e:e2:29:9e:29:8a:38:41:29:da:64:b5:28:61:
         a6:ba:5a:33:3b:27:17:23:a0:e1:c9:9e:c5:74:62:02:f0:67:
         d6:35:01:85:be:74:3e:1f:e0:95:d5:82:3c:5e:df:82:a8:15:
         5d:e5:93:3f:b7:33:6f:b7:4d:19:2f:fd:1b:a1:72:5b:c8:b4:
         2f:72:0c:26:6d:5d:f6:35:1e:0a:ed:3f:79:b5:18:6b:b9:d6:
         94:fa:a8:9e:45:ea:2b:75:06:03:b1:04:c5:34:d4:85:fe:cb:
         d3:ac:54:41:56:38:ce:7b:11:bc:67:cf:37:82:89:ab:52:15:
         13:51:29:e8:3f:fa:3b:f5:ca:0f:89:f8:d7:05:9d:2d:d2:2b:
         ff:13:d7:0d:d9:8b:a5:d5:0d:fb:dc:6d:b9:87:82:80:da:42:
         9b:73:25:b3:ed:df:98:e6:79:34:cb:65:0a:2c:02:c7:07:f0:
         22:b4:63:22:68:a5:ce:6b:dc:bb:73:0d:70:8b:a1:39:0c:f2:
         a1:b9:ec:ab:36:75:fa:dd:31:ff:b3:55:65:92:a8:d9:f5:ef:
         57:5a:12:52:54:65:ec:43:e4:7d:42:76:c0:52:c1:78:c7:88:
         d0:23:1e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:10 2026 by rpki-client