Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c01f80cb-a0e9-3b18-8d82-237f7db29d31.roa
File:                     c01f80cb-a0e9-3b18-8d82-237f7db29d31.roa (raw, json)
Hash identifier:          GjtKy1IJOMj3zBXDKirP4TRX/c3LEaA9L+Fl1clrhDM=
Subject key identifier:   7A:78:C9:69:45:82:2B:1D:16:24:64:72:B1:3C:BD:03:EF:34:9C:BC
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F4973041297A2EA6BD3AA9B00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c01f80cb-a0e9-3b18-8d82-237f7db29d31.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        172.252.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:04:12:97:a2:ea:6b:d3:aa:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dbeea396-f7b8-4223-8487-77597d9099ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:90:10:59:ef:52:82:cb:af:5a:06:09:58:
                    54:e6:08:c1:61:7e:e6:36:a6:01:11:f1:e9:8f:23:
                    b5:b6:65:21:03:d1:bb:43:43:63:dd:09:a5:17:3e:
                    35:4b:e9:9a:60:8e:8d:39:64:ef:db:4f:84:1d:47:
                    e6:75:95:7b:ae:f3:6d:76:d3:e1:f9:8b:84:7b:6b:
                    f2:bd:00:18:c2:1d:50:ad:65:3f:21:72:01:c1:a6:
                    5c:b3:6f:06:1b:d3:22:d9:ce:8e:36:26:94:b4:45:
                    2e:4f:31:25:f5:ee:8c:89:d9:28:36:30:4b:14:6b:
                    5b:e8:e3:df:15:d4:82:11:1e:8d:8e:9b:8f:c8:d5:
                    fd:6c:f7:75:af:b5:69:74:c9:50:a9:8e:27:5f:23:
                    54:89:4a:e7:06:12:8e:74:d2:d4:5d:49:c4:85:16:
                    2a:55:b5:13:1f:e9:7b:a7:fb:dd:b8:6c:b2:19:b0:
                    cb:13:0e:f4:a9:01:eb:5d:82:12:6a:95:25:f7:e0:
                    43:44:b3:80:a2:85:f2:88:c5:3f:43:28:22:1f:46:
                    6d:7e:07:09:51:a4:f4:af:bd:a2:c4:89:3b:84:a7:
                    16:ce:35:db:cc:3e:85:c0:46:80:3c:f4:10:67:a2:
                    09:f7:cf:3e:b6:25:31:5a:31:a4:90:d2:7a:2c:01:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:C9:69:45:82:2B:1D:16:24:64:72:B1:3C:BD:03:EF:34:9C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c01f80cb-a0e9-3b18-8d82-237f7db29d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:44:5f:1d:a2:3f:ad:ed:3f:6b:ff:10:7e:99:b7:f4:4e:
         f3:a6:d2:eb:4c:3b:d4:52:ea:f4:84:8a:46:b3:33:aa:8b:43:
         10:f9:9f:a0:dd:f1:fc:af:a8:8b:16:71:2e:0d:20:56:17:ee:
         e3:b2:8e:12:2f:7c:48:dd:42:17:b9:92:0b:52:79:5b:6b:4e:
         c8:df:ae:e7:cb:21:9e:9c:15:e4:89:86:24:54:10:bb:a8:21:
         1e:2d:37:c3:36:3a:01:a8:00:2e:47:18:e0:79:63:db:c2:0f:
         02:fb:e6:24:fe:a8:d9:87:c9:b5:bd:c9:d4:02:53:50:0b:ed:
         48:71:8c:42:dd:10:9e:d2:77:4d:68:d5:b4:25:f3:59:84:73:
         5f:7c:95:32:df:54:98:64:0e:66:3f:02:41:81:17:f6:9b:53:
         56:e4:db:11:b7:e4:e5:f9:b8:b9:cc:58:02:53:6d:88:7e:66:
         28:9d:bb:45:78:cf:e2:73:fe:2b:af:eb:08:4f:16:16:a0:fb:
         c8:d0:07:8e:f2:92:59:1a:45:18:28:5a:bd:b5:6c:67:20:cb:
         2a:d7:48:d9:82:38:4f:5f:cb:c0:ea:81:3d:81:51:4e:30:ce:
         d6:9d:a7:b0:24:b8:67:0a:11:cd:69:be:65:d2:4b:cf:0e:d4:
         cc:b1:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:44:23 2026 by rpki-client