Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6fa439de-4e40-3340-a1b1-98f1b34c7063.roa
File:                     6fa439de-4e40-3340-a1b1-98f1b34c7063.roa (raw, json)
Hash identifier:          e0mRFrfjX4p8kiqTBERWZLT1QZPcKxK4BnwAz2Mzqzo=
Subject key identifier:   84:89:2C:91:B7:B0:29:DA:59:4F:0A:BA:2E:C2:FC:0C:54:EE:05:0D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E95DA4558C62FC7BA18F0A980
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6fa439de-4e40-3340-a1b1-98f1b34c7063.roa
Signing time:             Wed 22 Jul 2026 17:03:45 +0000
ROA not before:           Wed 22 Jul 2026 17:03:45 +0000
ROA not after:            Tue 20 Oct 2026 17:03:45 +0000
asID:                     2914
IP address blocks:        172.252.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:da:45:58:c6:2f:c7:ba:18:f0:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul 22 17:03:45 2026 GMT
            Not After : Oct 20 17:03:45 2026 GMT
        Subject: CN=f4df1f7e-1e10-4227-b3f7-dd4a7f5b25f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:e0:4f:d8:ea:f1:4a:46:48:ab:30:29:de:
                    0e:3e:38:ff:dc:79:06:b7:ff:aa:bf:6b:44:97:52:
                    24:24:94:f9:45:21:cb:a8:c2:0c:ce:68:85:93:4f:
                    9d:54:22:a7:d8:70:9b:d4:b8:77:ee:96:28:41:ad:
                    1a:7e:a1:63:da:2c:5e:a1:da:e8:0e:b8:8a:57:9e:
                    12:a9:90:3f:84:73:da:ca:74:1a:f6:16:be:49:67:
                    06:b3:dd:eb:79:12:d9:52:53:35:69:f3:01:fe:7a:
                    67:fa:18:62:96:2b:d3:20:b1:c2:4b:7c:ce:e1:83:
                    a9:67:c0:6c:2a:6c:c7:87:75:a2:60:64:f0:f5:41:
                    7b:d6:b7:6a:a8:6f:eb:e2:36:39:09:52:a0:7f:8b:
                    c0:1f:21:5f:e5:04:b8:1e:29:9f:51:1c:dd:5f:fd:
                    83:7d:af:6d:49:ff:19:97:17:77:21:e6:5d:31:b9:
                    d6:e9:60:a6:a8:f7:41:87:97:5f:cd:39:e6:92:d9:
                    81:c5:80:69:8f:fe:2b:14:51:57:b3:33:51:d3:8c:
                    a2:2d:f9:b4:00:de:59:06:1b:df:f7:07:ae:51:96:
                    cf:65:7b:de:1e:3f:45:ac:02:a0:a5:38:85:ca:4a:
                    1d:a6:30:9d:a5:11:e1:20:a3:a8:5e:54:22:98:52:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:89:2C:91:B7:B0:29:DA:59:4F:0A:BA:2E:C2:FC:0C:54:EE:05:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6fa439de-4e40-3340-a1b1-98f1b34c7063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:40:91:3f:aa:62:51:9e:f4:c0:18:b6:12:e1:38:01:95:89:
         45:89:7f:81:59:e5:b9:b6:3a:aa:75:e1:16:ed:14:02:84:41:
         19:6f:87:a5:a0:e5:86:52:1a:44:1f:2b:6f:6d:45:7c:b8:2b:
         a6:e7:d8:56:22:32:8a:e6:71:7d:99:12:ed:cb:dc:29:a6:f7:
         82:0e:3f:62:b4:e7:21:10:93:fe:77:fb:33:9e:6e:e1:aa:3a:
         8a:70:26:49:14:93:4d:52:89:4b:c7:7c:50:de:77:92:0d:11:
         ac:b4:e5:58:ea:91:e2:52:bc:4b:c0:ec:27:6b:77:b2:7a:55:
         15:3e:ae:05:a7:03:e8:0c:fc:4b:f8:5c:dd:f1:66:5c:7d:d9:
         eb:29:33:96:01:48:94:cf:68:05:5e:51:80:3d:04:28:68:6c:
         13:23:ff:f5:78:db:40:f1:04:22:3d:cd:30:5c:fa:35:07:ec:
         97:32:af:a9:19:ed:a7:12:ec:9d:93:8a:9e:a4:f5:e7:6f:9f:
         3b:66:60:5e:68:fb:c8:30:dc:b9:c8:db:5c:63:94:2c:37:4f:
         fe:8b:c1:38:ba:0d:13:4c:d8:e1:1b:37:9a:c0:14:24:c2:57:
         05:d7:05:57:03:39:11:70:e9:cf:f3:5c:c2:8e:6c:9d:33:f5:
         15:c6:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:20 2026 by rpki-client