Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41e02930-4001-3fe6-86e8-0a14402f4273.roa
File:                     41e02930-4001-3fe6-86e8-0a14402f4273.roa (raw, json)
Hash identifier:          ntL1fob0kwEB6lEfLrOJ/BEIjLExi5ltq5NGvod2ah0=
Subject key identifier:   32:B3:BC:06:91:5B:F4:71:42:B0:35:B8:43:A9:9D:86:4F:46:C3:79
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CF34058F5786A0C26A8E0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41e02930-4001-3fe6-86e8-0a14402f4273.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        172.252.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f3:40:58:f5:78:6a:0c:26:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=3cfd6d6a-bd04-4657-966f-16e8c18ad1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:65:db:d2:8c:6a:f2:e2:ab:bf:60:ae:36:
                    07:c0:22:0d:15:07:10:ab:f9:77:69:77:39:16:1b:
                    e3:7d:e6:7d:76:05:a4:8f:ad:2d:56:7a:3f:fe:1b:
                    0b:3e:a6:6f:02:1e:81:84:d8:57:ee:68:ac:6c:48:
                    fa:e3:97:75:46:00:81:35:e3:09:54:7f:de:db:26:
                    59:13:82:d7:8a:5b:b8:80:80:1b:ac:0e:c0:f9:6e:
                    3c:65:63:b4:02:c0:f4:de:b4:73:be:c8:ef:51:39:
                    2b:42:ed:9a:92:28:dc:34:2c:51:89:44:5e:de:1d:
                    af:77:69:10:88:69:02:04:52:b4:84:eb:ca:91:08:
                    43:33:92:01:94:58:6c:ef:12:0a:22:ad:30:52:2c:
                    ef:4d:43:6e:25:2e:54:fb:30:06:44:3b:dd:84:66:
                    1b:96:e9:b5:b3:56:d3:d7:eb:5c:64:6b:f8:2d:ef:
                    82:ea:ad:5d:2e:62:09:47:0d:9a:e0:68:94:14:a0:
                    8f:46:8e:5d:58:a7:56:28:71:37:87:33:bc:fa:01:
                    61:41:63:09:c9:da:fd:3f:c4:ec:02:67:80:45:7a:
                    51:e5:c7:b9:26:8e:26:7c:ed:77:b1:a5:d3:be:66:
                    04:b1:63:f1:e7:74:1d:f4:c3:46:3b:00:2b:c4:2f:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B3:BC:06:91:5B:F4:71:42:B0:35:B8:43:A9:9D:86:4F:46:C3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41e02930-4001-3fe6-86e8-0a14402f4273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:45:e3:93:f4:17:87:58:7b:60:af:dc:12:60:e1:c5:d7:ba:
         ca:2d:69:93:3d:b8:a7:66:db:66:e2:4e:2f:91:83:ec:4d:85:
         76:20:50:66:3a:4f:88:61:51:80:eb:44:cd:e7:9a:51:40:b4:
         16:70:94:a2:c1:12:88:4f:2f:2f:32:f7:ef:eb:7b:9f:db:74:
         a0:66:d1:98:7e:88:d1:e0:e2:e2:6d:e2:b3:78:8d:88:ef:5e:
         92:82:d1:41:f0:db:4e:33:4f:3d:d0:5c:65:b8:27:a4:94:b3:
         54:c2:34:ec:dd:da:1f:e9:07:fc:6f:3f:d6:cc:c7:b2:c1:10:
         48:21:d0:2a:1a:5d:fc:3d:5a:eb:63:6a:59:83:d6:92:78:b3:
         2e:d5:ef:9a:53:1e:62:40:bd:2f:b0:ef:88:ce:cb:fd:0e:4f:
         67:4a:61:1c:e6:50:3a:4a:df:2b:72:9e:f0:3e:02:d9:44:6c:
         25:1b:7d:28:90:82:83:02:75:eb:5e:ea:7f:9f:20:61:20:e6:
         ff:c7:be:41:63:58:8e:fa:71:0e:99:17:10:2c:90:87:48:51:
         6c:8a:1e:79:9e:65:65:80:59:6b:56:46:8c:b9:84:9e:86:66:
         a4:58:98:ff:3d:e7:97:c7:49:12:0f:52:1b:b2:89:c1:cc:e8:
         b2:64:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:24:48 2026 by rpki-client