Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c8a0a628-529d-3121-8978-b755ddf60c27.roa
File:                     c8a0a628-529d-3121-8978-b755ddf60c27.roa (raw, json)
Hash identifier:          h+pexl8h2mGZaXxcYrHw1erYwDEEKNbSG7qaCxVO9WA=
Subject key identifier:   58:8A:4C:15:34:A5:FD:24:01:22:A6:80:7E:7A:D0:06:1E:0E:1B:57
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CC47F4C58153B2272F840
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c8a0a628-529d-3121-8978-b755ddf60c27.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     215728
IP address blocks:        172.252.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c4:7f:4c:58:15:3b:22:72:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=29e70c02-ba0e-434c-b226-16b51cdb23a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:79:6e:ad:ba:e4:df:b6:2a:c3:2a:e9:97:
                    3e:b4:82:33:f4:f9:fe:96:c5:23:7f:20:88:d6:62:
                    0b:9e:e9:a4:15:6b:ea:92:6e:f5:22:d6:26:cd:a3:
                    2f:87:e8:8d:5f:33:5e:ab:f5:e2:d9:2a:a8:a5:58:
                    b5:67:32:9d:68:85:1b:cb:00:0e:57:c9:fc:89:32:
                    81:ec:1b:83:77:ad:19:11:8c:d2:e7:85:ea:69:4d:
                    90:c0:05:cb:b9:52:82:32:e5:cc:71:4f:cd:5a:32:
                    7c:9d:2a:53:56:dd:80:27:08:9e:f8:02:fc:f7:7c:
                    60:a1:81:e1:88:61:8e:a1:b9:c5:fa:cb:8c:28:76:
                    e3:74:2b:d0:ca:10:ca:2e:fe:24:d2:40:a4:3f:08:
                    3f:5d:48:75:36:3a:13:5c:91:b8:d6:4f:2a:e2:6e:
                    d8:74:b6:33:38:42:c9:f6:ba:57:4c:c1:15:18:fe:
                    63:48:ea:e0:73:c8:27:6d:d7:f3:a3:2c:2a:4b:2c:
                    a7:ea:40:68:1a:b5:c8:37:ab:1b:94:fa:ad:7a:cc:
                    1a:bb:e6:fd:76:1b:b1:09:9b:15:d1:79:11:9d:04:
                    79:51:8d:6f:fc:06:81:cf:b8:39:c2:0a:3f:66:81:
                    67:e2:d7:17:14:34:a6:6f:42:1d:b1:92:2d:67:24:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8A:4C:15:34:A5:FD:24:01:22:A6:80:7E:7A:D0:06:1E:0E:1B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c8a0a628-529d-3121-8978-b755ddf60c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0f:c7:1d:8f:bb:58:56:dd:cc:85:68:14:de:a1:cc:f1:ee:
         21:b2:8c:4a:66:3c:a7:c1:b9:51:6a:60:24:95:d0:bc:66:66:
         ec:dd:d8:54:34:4e:fe:01:34:1c:88:58:78:2c:dc:25:53:46:
         3d:8c:8d:4b:f0:d3:16:57:39:f0:fd:41:18:ed:e8:49:da:26:
         1d:83:1b:85:97:4c:81:7c:67:f3:09:2d:f8:3d:a1:78:31:ae:
         63:37:3d:f8:69:3e:b7:fb:c9:31:d6:fa:52:5a:0f:64:cf:cf:
         f4:50:00:5d:48:79:0a:55:cd:48:63:82:5a:e5:e9:b5:39:50:
         c0:86:7a:70:74:65:c3:13:c3:53:6b:ef:ee:b6:af:fe:aa:9c:
         0b:bf:be:e7:68:14:e0:4d:c1:5e:b2:09:83:9c:bb:99:1a:3c:
         8c:58:30:52:d1:ac:27:82:78:77:64:51:96:6f:f4:b4:25:90:
         71:4f:f5:e0:80:dd:a1:00:54:5c:3d:43:85:d9:22:1e:08:8b:
         dd:9b:88:85:a1:41:23:dd:05:4a:d7:b2:50:94:32:ee:7c:f8:
         8a:c5:bd:3b:3d:18:7d:0d:8d:6c:da:58:92:97:87:5a:06:01:
         02:7c:a9:ee:0c:09:1b:2a:92:ca:90:61:4c:7c:23:81:4c:ae:
         21:a3:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:51:23 2026 by rpki-client