Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6cc2f810-89fb-316a-9dfe-5f76d0c56c3e.roa
File:                     6cc2f810-89fb-316a-9dfe-5f76d0c56c3e.roa (raw, json)
Hash identifier:          LzTnb8+nZeYQIBjdij1oPlZ86st6LMqZOiDjZKd/s1E=
Subject key identifier:   DD:EF:CC:99:58:99:CD:A6:B0:F7:6B:D9:A6:7E:D3:EF:6A:F6:22:1C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F49735832991AB2128F710550
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6cc2f810-89fb-316a-9dfe-5f76d0c56c3e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        172.252.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:58:32:99:1a:b2:12:8f:71:05:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=00ad0f0a-748c-4860-b80e-4d7e88cfa05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:f4:2d:f4:6d:0c:45:cd:ab:9a:82:21:15:
                    27:12:12:75:75:79:3c:0d:14:5e:14:0d:5f:7e:46:
                    f2:af:49:12:f5:33:39:75:cc:40:f3:5f:86:0c:17:
                    98:6c:80:0f:65:20:06:9e:35:0c:40:84:5e:e9:da:
                    ea:a9:3d:37:74:91:ec:5c:39:34:0d:7d:18:b8:e4:
                    f5:24:96:fa:16:8d:96:09:25:a2:7e:bd:49:52:52:
                    4c:f9:d0:ea:58:f3:1a:87:8f:76:39:3e:27:f7:b4:
                    58:33:0e:aa:29:65:e1:ae:01:2f:25:c3:c1:10:ff:
                    81:fd:38:03:44:c5:87:d4:73:13:20:aa:e6:f3:95:
                    18:d2:d4:27:da:bd:5b:e4:d7:2f:e2:2b:e1:e3:52:
                    b2:dd:21:41:ca:a2:48:86:18:a5:c8:9a:37:a4:4a:
                    80:63:35:d6:b8:67:3d:8f:2a:2d:c2:e2:60:45:9f:
                    14:1d:f8:9f:d7:1a:68:7c:f2:fc:ff:38:fe:fe:59:
                    be:a8:79:b5:fe:2f:dd:ab:fc:67:55:57:cd:81:f6:
                    4c:4f:7b:17:b7:64:6d:77:4c:41:70:45:92:3d:83:
                    49:b4:8d:bd:b1:c9:27:a6:8f:b4:ce:83:96:f5:03:
                    81:a3:95:9c:07:a2:38:16:a0:1e:a1:70:60:e4:b7:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EF:CC:99:58:99:CD:A6:B0:F7:6B:D9:A6:7E:D3:EF:6A:F6:22:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6cc2f810-89fb-316a-9dfe-5f76d0c56c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:59:18:ed:eb:1d:74:c5:af:9d:ab:1b:cd:2d:a7:92:0d:32:
         b0:ab:be:78:c7:9d:e1:a9:a6:a0:f5:cb:76:39:9e:4e:42:0a:
         d0:d1:e0:2a:b7:85:f4:02:3f:64:43:57:e2:3d:73:8a:57:14:
         9e:4b:78:7d:38:9c:b8:4b:f8:52:a8:9d:46:27:75:73:9b:f4:
         fc:54:b7:ad:0e:2a:3c:db:c2:e0:e5:c6:12:ce:4a:2e:ff:35:
         03:78:fe:32:fc:b1:b3:7e:07:98:88:63:19:bc:ff:cc:e7:c9:
         01:c0:43:e4:27:a7:28:46:c8:d2:33:a6:81:c4:c1:06:b1:77:
         7d:2d:34:29:09:97:2f:04:41:77:a7:b7:89:e7:83:09:68:3b:
         a5:b0:75:de:dc:7e:a5:b6:02:ae:66:ff:f9:46:1a:a2:87:99:
         e6:c5:e7:fd:40:b3:97:58:c4:4b:08:33:19:de:2e:54:d2:13:
         f4:0e:f7:d5:3a:de:84:87:ee:97:6f:15:ab:05:b5:e0:4d:0c:
         ab:c0:26:d0:79:0d:be:07:64:7d:3b:58:ae:ac:7e:63:aa:80:
         80:a8:2b:43:0e:53:48:d4:7c:be:3e:61:83:c2:65:27:d2:29:
         33:0a:fd:dc:8f:6b:68:b5:ee:6f:f9:6b:4b:7d:c1:74:83:c2:
         d2:cc:3b:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1gymRqyEo9xBVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDBhZDBmMGEtNzQ4Yy00ODYwLWI4MGUtNGQ3ZTg4Y2ZhMDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA/0LfRtDEXNq5qCIRUnEhJ1dXk8DRReFA1f
fkbyr0kS9TM5dcxA81+GDBeYbIAPZSAGnjUMQIRe6drqqT03dJHsXDk0DX0YuOT1
JJb6Fo2WCSWifr1JUlJM+dDqWPMah492OT4n97RYMw6qKWXhrgEvJcPBEP+B/TgD
RMWH1HMTIKrm85UY0tQn2r1b5Ncv4ivh41Ky3SFByqJIhhilyJo3pEqAYzXWuGc9
jyotwuJgRZ8UHfif1xpofPL8/zj+/lm+qHm1/i/dq/xnVVfNgfZMT3sXt2Rtd0xB
cEWSPYNJtI29scknpo+0zoOW9QOBo5WcB6I4FqAeoXBg5LeabQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3vzJlYmc2msPdr2aZ+0+9q9iIcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNmNjMmY4MTAtODlmYi0z
MTZhLTlkZmUtNWY3NmQwYzU2YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVZGO3rHXTFr52rG80tp5INMrCrvnjHneGppqD1y3Y5nk5CCtDR4Cq3
hfQCP2RDV+I9c4pXFJ5LeH04nLhL+FKonUYndXOb9PxUt60OKjzbwuDlxhLOSi7/
NQN4/jL8sbN+B5iIYxm8/8znyQHAQ+QnpyhGyNIzpoHEwQaxd30tNCkJly8EQXen
t4nngwloO6Wwdd7cfqW2Aq5m//lGGqKHmebF5/1As5dYxEsIMxneLlTSE/QO99U6
3oSH7pdvFasFteBNDKvAJtB5Db4HZH07WK6sfmOqgICoK0MOU0jUfL4+YYPCZSfS
KTMK/dyPa2i17m/5a0t9wXSDwtLMO8k=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:16:55 2026 by rpki-client