Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7e127581-b525-3eca-a959-02fe49ad80ae.roa
File:                     7e127581-b525-3eca-a959-02fe49ad80ae.roa (raw, json)
Hash identifier:          K6w8gwpRWxrntcBWWS7uts7/wlCP91ffGeUtY/ahcLM=
Subject key identifier:   27:10:FF:D2:66:5A:EC:AA:7E:D1:EF:85:44:1C:C1:7B:73:07:21:0E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DBE32A20BBCA82C7E4434AF80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7e127581-b525-3eca-a959-02fe49ad80ae.roa
Signing time:             Wed 06 May 2026 11:07:11 +0000
ROA not before:           Wed 06 May 2026 11:07:11 +0000
ROA not after:            Tue 04 Aug 2026 11:07:11 +0000
asID:                     834
IP address blocks:        172.252.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:32:a2:0b:bc:a8:2c:7e:44:34:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May  6 11:07:11 2026 GMT
            Not After : Aug  4 11:07:11 2026 GMT
        Subject: CN=015c5c02-c25c-4c4f-a787-4cf3bd785c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:19:cb:48:35:d0:b5:88:b3:6b:d8:cf:2a:
                    51:4e:9a:e0:e5:79:16:cf:3d:1b:c6:ea:e5:25:b2:
                    6a:9d:87:27:4c:05:45:53:a4:40:aa:a7:8a:f2:25:
                    fd:ed:f7:3f:0e:72:4e:9e:2a:68:38:44:6b:4b:04:
                    af:8d:0e:c5:85:ae:f2:24:4a:b4:d9:f7:0d:a9:3a:
                    e2:f7:c5:c8:9a:e5:38:4c:52:86:1a:8e:d7:a7:46:
                    96:07:bc:3d:b1:59:d7:e8:45:e5:05:ba:4c:de:c7:
                    80:1c:ad:bb:68:85:f5:70:69:3a:a5:6d:39:5f:e6:
                    e1:cb:8a:16:5e:7f:ef:ee:31:26:14:2d:7a:91:49:
                    6b:73:7f:a1:c3:b4:ea:ef:7e:23:a1:d2:de:d9:45:
                    26:0c:6c:7d:29:6b:4b:fb:b1:92:e6:c9:ac:1f:30:
                    9e:9b:b4:ea:5b:72:3d:d8:d2:fb:b7:be:18:7b:4b:
                    c6:75:e5:18:72:64:ab:17:b9:c5:1d:44:f0:af:35:
                    c4:c1:e4:a5:d3:e4:a7:f7:0b:d3:6a:42:9d:91:51:
                    c0:fc:c7:1b:aa:8a:6b:16:69:18:df:50:48:4a:08:
                    23:ed:72:aa:bb:81:3a:31:03:27:3b:a3:48:50:f8:
                    44:e3:b3:7a:f9:dd:d7:e2:d4:08:53:2a:14:b2:1f:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:FF:D2:66:5A:EC:AA:7E:D1:EF:85:44:1C:C1:7B:73:07:21:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7e127581-b525-3eca-a959-02fe49ad80ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:7a:56:bf:c0:93:45:50:e8:bd:e2:a5:76:3c:e5:96:c7:
         df:c4:70:38:b8:26:26:3f:73:1a:7c:fb:08:f7:54:ff:69:43:
         5f:a0:1d:d6:bd:69:5c:35:66:7c:0c:46:1f:f2:ad:82:0e:26:
         95:4b:b5:07:fb:51:28:93:2a:1f:cf:dd:1b:1e:ee:ad:d4:f8:
         87:34:c2:21:e8:25:71:e5:48:73:62:57:ba:bd:d9:91:5b:9a:
         b1:6a:f0:f3:ce:75:4a:99:64:0b:55:26:54:44:e7:bd:92:91:
         a1:b7:52:e0:21:61:ee:25:43:99:dd:25:ba:f1:f7:e7:8f:18:
         24:ef:37:68:9c:52:a4:24:64:b5:cf:59:9c:86:83:27:d0:7d:
         56:92:91:58:21:2d:e3:d8:16:5c:4c:8f:ff:08:98:6e:31:ff:
         f4:35:f8:b5:42:0a:91:31:72:4c:c4:0b:90:0b:97:bf:3c:17:
         63:69:f1:60:d8:37:a2:11:3f:82:8a:24:91:d2:63:95:9a:6b:
         8c:64:6b:1a:84:ec:b3:e4:c1:27:17:82:f5:f2:ba:53:5b:fb:
         09:6c:79:5a:89:fe:64:52:cc:a9:5c:53:3e:8a:91:e0:7b:9f:
         ad:c1:88:4c:39:fb:0c:f5:65:8a:45:09:c2:6f:0e:c5:70:d7:
         7b:5f:27:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:41 2026 by rpki-client